Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft
File: 25Kd7FwPI63Zuu7qe7OayHpykIM.mft (raw, json)
Hash identifier: E67ZG3BB8vYlX3W+2J7iBxe2WzUI9DVNcI9lQeqEYVE=
Subject key identifier: 50:CC:F8:62:4E:7F:D1:69:B1:E0:F0:71:F7:8C:FB:60:14:C0:E5:7F
Authority key identifier: DB:92:9D:EC:5C:0F:23:AD:D9:BA:EE:EA:7B:B3:9A:C8:7A:72:90:83
Certificate issuer: /CN=db929dec5c0f23add9baeeea7bb39ac87a729083
Certificate serial: 0196515B5490B0B411BFA8F3A466B94618D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25Kd7FwPI63Zuu7qe7OayHpykIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft
Manifest number: 1500
Signing time: Sun 20 Apr 2025 04:01:01 +0000
Manifest this update: Sun 20 Apr 2025 04:01:01 +0000
Manifest next update: Mon 21 Apr 2025 04:01:01 +0000
Files and hashes: 1: 25Kd7FwPI63Zuu7qe7OayHpykIM.crl (hash: bttOvQqerweTtTYBcs/KFjpiUmov0s8saECBCiFr8NU=)
2: N4n5sfqwVKR0MtRKu60VkuVT8t8.roa (hash: 7oA83Z9SKqiyh1q+LTyv1yKzsMJNh3uvhrwtOfQSMtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/25Kd7FwPI63Zuu7qe7OayHpykIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 04:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:5b:54:90:b0:b4:11:bf:a8:f3:a4:66:b9:46:18:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db929dec5c0f23add9baeeea7bb39ac87a729083
Validity
Not Before: Apr 20 04:01:01 2025 GMT
Not After : Apr 21 04:01:01 2025 GMT
Subject: CN=50ccf8624e7fd169b1e0f071f78cfb6014c0e57f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:09:30:86:f9:d8:ef:87:fc:d6:27:0a:d0:2b:
8d:4b:f3:90:1a:74:ff:89:4b:2f:0d:64:2b:37:91:
d2:8a:86:b6:dd:43:1d:f8:e8:05:b7:d6:75:03:45:
2b:eb:d5:36:24:c9:b3:eb:a8:cc:2d:92:f5:c9:ca:
87:4f:88:57:9e:44:0c:9d:e4:77:1d:9e:e0:8c:50:
b9:d2:33:37:e2:8a:76:41:7c:65:88:4c:7a:a0:b3:
39:73:aa:61:5c:d8:65:82:46:ae:95:a3:ed:2d:dd:
f8:b0:f0:a1:f0:82:74:ff:a7:af:7e:d0:d9:0a:88:
32:cb:e3:74:84:d8:50:d2:68:03:df:49:e6:76:6d:
8a:06:a4:e0:38:a0:af:c5:75:31:2e:a0:97:a7:c0:
a4:e1:0a:a8:8c:b9:9c:5b:9d:d2:ee:96:78:1f:b2:
67:68:e7:94:03:6b:14:25:ac:d6:e1:b3:36:a4:62:
1f:45:84:db:e2:05:0e:e2:59:39:2c:97:61:73:82:
f7:83:84:02:68:11:46:ed:e5:44:92:1d:fe:be:02:
82:d0:33:70:41:14:ae:c5:22:bc:f5:62:4e:2b:c5:
8d:ec:ab:ec:c5:0e:f0:69:9d:ad:dd:7b:7d:cd:4a:
c5:cd:1a:d8:56:f4:e9:57:cf:40:79:37:29:b1:78:
f7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:CC:F8:62:4E:7F:D1:69:B1:E0:F0:71:F7:8C:FB:60:14:C0:E5:7F
X509v3 Authority Key Identifier:
keyid:DB:92:9D:EC:5C:0F:23:AD:D9:BA:EE:EA:7B:B3:9A:C8:7A:72:90:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25Kd7FwPI63Zuu7qe7OayHpykIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:f5:3b:f4:a7:ad:6f:9b:a3:dd:32:b3:25:5f:55:ff:e2:99:
0b:00:87:ae:09:5a:a7:13:6d:77:09:51:f7:5d:58:5b:b4:5d:
c6:19:4f:28:1a:31:d6:e8:de:98:3e:a9:ac:79:0b:18:3a:44:
60:94:5e:33:f1:d7:f8:b0:d6:99:e7:a5:31:51:46:de:00:2e:
a9:c8:88:32:a9:ab:44:83:df:2e:00:71:b3:3d:58:64:14:cb:
ff:26:22:04:c9:57:b9:74:67:27:e8:71:a1:22:9e:b4:f6:78:
94:03:97:56:ec:d3:fa:f5:88:07:7f:af:46:1f:68:fd:77:6e:
7f:d3:f1:05:ca:ad:3c:69:c4:24:4a:f5:29:99:41:a3:fb:00:
d1:c4:05:d0:65:fb:f5:b5:1b:99:73:be:f7:6a:b2:a2:e9:06:
ea:b5:1b:59:fb:c9:c3:90:b9:6b:38:ae:1f:94:37:57:ae:db:
4e:cd:d0:64:f7:61:2f:59:84:c0:44:9f:d9:ae:39:30:47:68:
70:94:7c:4c:7d:4c:19:bf:53:d7:54:02:a1:6f:63:aa:43:79:
b4:f3:da:f6:5e:cd:35:11:90:6e:52:d8:bf:a3:6e:ee:db:59:
6e:b4:1e:97:3b:dd:37:18:4c:ab:79:fb:29:70:11:b3:8c:be:
57:39:ce:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:16:06 2025 by rpki-client