Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.mft
File: kOszbVYE1HuugXI4sNu0l3HiRyk.mft (raw, json)
Hash identifier: PashbwVfRSbgznAM6t943TmbJXPlVQB/utWA6MFDBt0=
Subject key identifier: 57:91:21:7B:4D:62:5F:7F:9E:4E:BC:5E:8A:34:A9:C6:53:FD:A4:9B
Authority key identifier: 90:EB:33:6D:56:04:D4:7B:AE:81:72:38:B0:DB:B4:97:71:E2:47:29
Certificate issuer: /CN=90eb336d5604d47bae817238b0dbb49771e24729
Certificate serial: 019648C59B1ACB9A8D210B74A4BFB37F7FA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kOszbVYE1HuugXI4sNu0l3HiRyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.mft
Manifest number: 14F8
Signing time: Fri 18 Apr 2025 12:00:31 +0000
Manifest this update: Fri 18 Apr 2025 12:00:31 +0000
Manifest next update: Sat 19 Apr 2025 12:00:31 +0000
Files and hashes: 1: kOszbVYE1HuugXI4sNu0l3HiRyk.crl (hash: Qf8+6X+t/5YmfX0+wa1oqEARUbEUOsgO9GoKEzn40cg=)
2: nHFDaIILOdTjKywJ536u2NbijQ4.roa (hash: GZUS5OKqPLBVaLkWEyB2Ce3k2q8gf8Rj7vaTEKCevNk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kOszbVYE1HuugXI4sNu0l3HiRyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 12:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:48:c5:9b:1a:cb:9a:8d:21:0b:74:a4:bf:b3:7f:7f:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90eb336d5604d47bae817238b0dbb49771e24729
Validity
Not Before: Apr 18 12:00:31 2025 GMT
Not After : Apr 19 12:00:31 2025 GMT
Subject: CN=5791217b4d625f7f9e4ebc5e8a34a9c653fda49b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:58:16:4c:b4:26:5f:f8:08:d2:4a:52:ee:c0:
d0:3f:fc:7d:b7:ce:52:a1:49:07:20:63:a4:58:84:
36:21:51:a1:3c:01:d8:7a:6f:6f:f1:1e:3f:ad:06:
3d:86:02:07:32:ac:48:03:b4:31:d3:2d:2c:c7:dc:
59:a8:4e:e9:cd:2b:ff:e9:53:b1:4c:c5:a6:f9:47:
7a:73:3f:f5:d0:fa:47:7f:91:8e:2d:0e:6e:a3:40:
32:a7:f8:cb:2d:ca:09:62:97:45:a2:5a:af:0e:da:
b3:90:35:9b:d1:48:ce:7d:a5:14:59:40:28:de:ea:
d5:9f:a4:96:f4:29:9d:46:ea:a1:b6:7f:19:ea:c2:
9e:0d:85:16:0a:41:fa:14:67:f4:4e:0e:c1:4a:da:
11:10:f2:bb:b3:cc:3f:bd:c6:34:62:11:17:4b:98:
9a:30:99:15:04:2c:cd:5a:7f:0d:15:e7:75:4a:dd:
68:d2:2d:ce:88:a5:77:ce:45:56:f9:e5:34:9d:d4:
0f:37:3c:85:e6:a2:1c:f4:76:d1:66:48:fb:e9:48:
d1:27:95:a4:5b:a1:f4:f5:6a:f4:c6:39:2d:67:fe:
b6:fe:d3:7d:b0:4d:91:74:e2:d5:67:32:f1:3a:c8:
23:90:bc:93:0d:5b:02:b7:b5:f5:6e:63:1b:52:bf:
84:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:91:21:7B:4D:62:5F:7F:9E:4E:BC:5E:8A:34:A9:C6:53:FD:A4:9B
X509v3 Authority Key Identifier:
keyid:90:EB:33:6D:56:04:D4:7B:AE:81:72:38:B0:DB:B4:97:71:E2:47:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kOszbVYE1HuugXI4sNu0l3HiRyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:ac:87:8b:2f:ca:c3:79:a0:66:79:2d:a4:b6:4f:bd:74:1e:
2e:d9:b2:a0:18:3e:85:e4:71:0b:5a:cd:23:b8:47:c0:c8:d2:
91:07:a9:e7:4f:ba:f5:61:db:10:28:1f:ff:b1:b6:10:75:5c:
b6:b8:f0:3e:83:b9:8e:88:82:39:7b:b5:e5:2b:b8:62:17:24:
78:99:7d:3d:1b:60:3d:3a:b9:68:bf:77:89:e3:1d:18:bc:a8:
8c:c7:8e:c8:fb:5b:b0:97:33:fd:e9:74:4d:f8:a0:49:4f:95:
82:85:69:d9:69:d5:c5:fa:85:c4:98:4d:ac:7b:91:2f:5b:57:
38:3a:3e:5c:24:79:f1:6e:90:99:10:dc:6a:9e:c8:2c:f8:18:
6e:e3:90:8f:e3:18:64:33:fa:83:a6:2a:73:76:f0:b5:fc:a9:
9b:ec:b8:37:77:6a:c4:60:90:61:83:e7:6b:f1:b7:6a:a0:10:
fe:81:f8:a5:68:59:40:ba:81:06:1c:83:f9:c0:bf:b1:08:c3:
a9:33:43:ec:1f:16:a6:e1:0b:25:62:1e:44:bc:35:5c:18:66:
8e:1a:91:c0:f2:57:26:fe:50:98:32:96:e1:bd:53:31:bd:d1:
f2:2a:26:29:9b:01:d1:b9:0e:b8:0c:65:3a:0c:54:88:25:e4:
a0:a3:35:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:24:10 2025 by rpki-client