Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/T51fuq92qApl4OksAgYeiVsrgRc.mft
File: T51fuq92qApl4OksAgYeiVsrgRc.mft (raw, json)
Hash identifier: +Sbjhy1CfcR1IwwiTr+FEZ7S4p4paWUZUbN9i0wI+vc=
Subject key identifier: 70:DA:CE:95:27:92:08:EA:D1:FC:D1:E4:C1:6A:A6:01:51:99:F5:10
Authority key identifier: 4F:9D:5F:BA:AF:76:A8:0A:65:E0:E9:2C:02:06:1E:89:5B:2B:81:17
Certificate issuer: /CN=4f9d5fbaaf76a80a65e0e92c02061e895b2b8117
Certificate serial: 01965191B255F2328ED7CB7402DF372E7B15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T51fuq92qApl4OksAgYeiVsrgRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/T51fuq92qApl4OksAgYeiVsrgRc.mft
Manifest number: 14FC
Signing time: Sun 20 Apr 2025 05:00:24 +0000
Manifest this update: Sun 20 Apr 2025 05:00:24 +0000
Manifest next update: Mon 21 Apr 2025 05:00:24 +0000
Files and hashes: 1: T51fuq92qApl4OksAgYeiVsrgRc.crl (hash: YatzsZgtOPMl30zDzszEQ/7qzVOnRi09WxCCaOSPYN4=)
2: oudSfHdCLiNB6U8UydMcb_Ovg84.roa (hash: LQDm0fv1Tzx1NMtk5XfrPEJuzKPUwQiMUZ87fbukA4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/T51fuq92qApl4OksAgYeiVsrgRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/T51fuq92qApl4OksAgYeiVsrgRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/T51fuq92qApl4OksAgYeiVsrgRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:91:b2:55:f2:32:8e:d7:cb:74:02:df:37:2e:7b:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9d5fbaaf76a80a65e0e92c02061e895b2b8117
Validity
Not Before: Apr 20 05:00:24 2025 GMT
Not After : Apr 21 05:00:24 2025 GMT
Subject: CN=70dace95279208ead1fcd1e4c16aa6015199f510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:56:d4:3c:cd:c5:f1:35:5f:a0:a7:bf:86:6c:
e4:30:19:3d:42:1f:6f:7e:53:ff:d7:fd:0c:e6:6e:
93:0e:08:d0:24:f6:f2:57:2a:d2:3a:ab:91:c5:24:
24:e9:e6:58:70:48:c8:28:bf:e1:be:47:24:1e:62:
41:49:8d:af:19:02:f3:33:0b:3b:f7:a7:b7:bb:b9:
03:c2:b5:a8:b0:41:19:2b:38:e1:9d:c4:36:c1:c9:
50:04:e7:06:a4:c2:90:a5:bc:1b:b5:26:8d:34:aa:
6d:a8:c8:7c:e4:ce:4b:89:c3:b1:19:3e:22:a3:2e:
ed:5c:99:31:2d:a2:e0:1a:75:e0:25:7d:bc:2c:e6:
8d:0c:f0:2f:0f:2d:84:8f:fb:64:64:0f:34:46:42:
22:a7:b6:50:4c:33:4d:08:9e:bf:1f:91:47:32:da:
df:dd:27:b8:22:9f:b3:eb:2e:24:c6:4d:b1:b1:0c:
b6:be:ec:4e:8b:c1:92:93:97:75:96:a6:a9:b9:51:
36:ab:75:65:5b:f5:89:69:57:5a:78:88:a8:56:a8:
3e:1e:6a:3b:d5:14:52:36:51:10:a8:e6:f4:0b:ce:
12:c1:6e:b7:0d:74:28:ee:39:d9:f8:b9:ce:6f:d7:
38:1b:68:54:72:17:75:08:da:8e:55:61:14:25:e4:
27:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:DA:CE:95:27:92:08:EA:D1:FC:D1:E4:C1:6A:A6:01:51:99:F5:10
X509v3 Authority Key Identifier:
keyid:4F:9D:5F:BA:AF:76:A8:0A:65:E0:E9:2C:02:06:1E:89:5B:2B:81:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T51fuq92qApl4OksAgYeiVsrgRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/T51fuq92qApl4OksAgYeiVsrgRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/T51fuq92qApl4OksAgYeiVsrgRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:51:c3:33:74:e4:ca:a2:e0:45:7b:b2:78:1c:dd:30:93:be:
6e:80:da:c1:1a:d5:7d:5f:88:c7:b4:68:c6:bd:7f:1e:62:e1:
4c:cb:81:12:76:28:03:52:30:c5:70:92:f4:25:b4:95:66:3d:
cf:64:b3:2c:6d:c9:e6:7a:49:7a:67:1a:38:67:a9:a8:12:5e:
fd:bc:83:d0:f8:c8:ab:ba:ab:bf:ce:fe:75:e7:41:fa:df:32:
47:b2:f9:50:c3:90:c4:dc:dd:90:a9:9d:a9:e5:21:6a:57:79:
f2:0b:cf:d4:c4:81:89:4e:d6:76:f9:81:7b:5d:c7:00:31:1f:
f1:5a:d4:da:f7:94:79:5a:9a:d0:37:23:76:8c:c8:23:fa:b2:
b8:1e:bb:d9:85:d6:34:f1:18:15:8b:17:8d:48:8e:59:16:4e:
ac:06:a9:ee:ad:8a:4e:73:68:62:09:56:e1:c8:03:df:a4:85:
f3:fd:01:92:35:52:74:ef:e1:27:d2:bf:d7:aa:4e:f5:8f:fb:
b7:f4:d3:5c:c7:31:9a:89:15:88:ba:8f:c8:08:6e:1f:37:7c:
42:ea:72:06:b0:4a:c3:69:80:46:bd:67:c6:c2:b4:2b:91:b1:
f8:f8:04:ff:24:6a:ad:51:95:0f:34:bb:36:0c:eb:07:80:f0:
f3:7a:0c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:07:59 2025 by rpki-client