Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft
File: A61jZSMe15OWlAkgFJ33HAqgjh8.mft (raw, json)
Hash identifier: gc7v4IpocI7I3dkIEyGXCiqG+p47nSB2lmMw33H3IDg=
Subject key identifier: B4:56:53:9D:3A:8D:5C:EC:14:AB:F5:E5:34:C7:07:9B:BA:F9:2C:9D
Authority key identifier: 03:AD:63:65:23:1E:D7:93:96:94:09:20:14:9D:F7:1C:0A:A0:8E:1F
Certificate issuer: /CN=03ad6365231ed79396940920149df71c0aa08e1f
Certificate serial: 01963FFA60CA522DF7907D9DB209A4AAFD10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A61jZSMe15OWlAkgFJ33HAqgjh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft
Manifest number: 05D1
Signing time: Wed 16 Apr 2025 19:01:35 +0000
Manifest this update: Wed 16 Apr 2025 19:01:35 +0000
Manifest next update: Thu 17 Apr 2025 19:01:35 +0000
Files and hashes: 1: A61jZSMe15OWlAkgFJ33HAqgjh8.crl (hash: 0twMU14y+jmGkmbv3JQZwYS+3pr6/tOGP/+zOO/bwSg=)
2: lKpyDy3PB0VVOKumldUJ5R7DcrY.roa (hash: bAnBEKlnNSPWwWtu1bOB6beqo4iFn6Nt2CccoFRqSNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/A61jZSMe15OWlAkgFJ33HAqgjh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 19:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:fa:60:ca:52:2d:f7:90:7d:9d:b2:09:a4:aa:fd:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03ad6365231ed79396940920149df71c0aa08e1f
Validity
Not Before: Apr 16 19:01:35 2025 GMT
Not After : Apr 17 19:01:35 2025 GMT
Subject: CN=b456539d3a8d5cec14abf5e534c7079bbaf92c9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:6a:83:67:7f:75:10:81:ae:55:dc:45:3d:17:
5a:d4:75:dd:56:58:c8:45:b2:65:fc:65:b7:43:c1:
52:6e:c5:83:8c:ca:97:05:4d:20:ff:6b:fa:48:87:
cb:c4:36:84:fb:61:f6:dc:86:e5:31:0e:90:2b:7f:
5e:fe:31:b1:46:18:80:64:a0:6f:34:37:0b:76:c2:
ca:c3:f5:2f:d1:57:32:33:ed:cb:98:4d:a9:fb:f7:
9c:98:91:17:08:e2:e1:e1:e5:38:1b:de:19:fa:0c:
66:10:b3:7d:95:91:93:c5:4d:44:ac:5a:6b:5a:ff:
65:48:3a:9b:09:cf:6d:c0:59:a9:08:22:5f:73:b8:
30:87:bb:a9:b5:9c:01:1a:f7:d8:28:61:32:ce:30:
6a:60:0b:56:82:a1:a6:12:07:60:2b:b3:60:b1:20:
43:6d:7d:a6:1d:36:df:2c:67:a8:1a:97:13:08:f8:
e8:71:7c:a4:74:8d:7c:8a:4f:21:9a:28:c7:f0:a9:
a4:ec:01:78:af:d9:e6:f7:9c:82:67:2b:08:34:c5:
38:34:7f:ef:0f:14:d2:11:fd:bd:5e:90:a8:bb:ca:
2f:b0:3b:7a:4d:03:4f:56:7d:c1:e0:08:55:64:8e:
6b:d0:45:e4:72:84:7f:f1:b6:b9:3d:4a:c9:a9:8f:
22:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:56:53:9D:3A:8D:5C:EC:14:AB:F5:E5:34:C7:07:9B:BA:F9:2C:9D
X509v3 Authority Key Identifier:
keyid:03:AD:63:65:23:1E:D7:93:96:94:09:20:14:9D:F7:1C:0A:A0:8E:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A61jZSMe15OWlAkgFJ33HAqgjh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:5a:f4:63:f6:1e:d9:cb:3f:b2:ac:d9:67:2d:55:ab:66:3f:
1c:1c:f9:94:fd:7c:57:2a:19:c9:7d:7c:79:91:7a:0f:93:bb:
a1:c4:88:25:c3:f0:79:e0:9b:79:cf:62:20:01:53:50:6b:ad:
b1:a7:4a:c1:b0:32:47:10:80:7b:ce:59:57:c1:84:0a:e0:f4:
a2:c8:19:cf:95:06:2f:f0:74:62:66:56:16:fc:1c:27:cc:86:
c2:bd:5d:e6:22:e3:6a:3f:0e:ae:6f:70:e2:b2:d0:88:53:3d:
a3:ac:ee:3d:f5:6d:1f:d5:ff:27:75:41:9a:29:e1:32:3b:cd:
1f:60:ae:5d:58:b2:2d:b1:ad:96:bb:db:81:84:9f:fa:47:18:
98:89:87:18:f6:7a:b0:4d:cd:a4:77:9f:e6:f7:eb:e2:d3:09:
3b:17:24:6b:68:14:bf:4e:73:e2:8d:ae:f1:14:12:35:8a:db:
85:bc:e2:2a:9e:4c:7d:1b:9a:58:e0:37:87:63:61:31:99:a1:
03:fc:4d:a4:d0:08:db:dd:fd:cc:96:a3:42:46:26:a1:4f:8c:
0b:cf:bb:27:bf:49:8c:fd:9d:35:bf:e9:bd:eb:32:07:4e:f7:
05:75:28:25:f3:c3:47:e9:6e:f3:51:32:2d:32:7a:22:d9:de:
31:0b:af:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:42:31 2025 by rpki-client