Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.mft
File: rd0qgVBgqn5iGiCUNJdYsgNolvA.mft (raw, json)
Hash identifier: syVmsp5xVwk1Nx5449k6Ym+CUxz5Ns0OE9NQOzzfAx4=
Subject key identifier: 67:28:D4:4A:4F:35:3A:BC:C7:8F:1F:93:E4:A1:83:E0:1C:C4:95:17
Authority key identifier: AD:DD:2A:81:50:60:AA:7E:62:1A:20:94:34:97:58:B2:03:68:96:F0
Certificate issuer: /CN=addd2a815060aa7e621a2094349758b2036896f0
Certificate serial: 0196545BBD58E6CE3BC630658C42AE92A764
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rd0qgVBgqn5iGiCUNJdYsgNolvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.mft
Manifest number: 0157
Signing time: Sun 20 Apr 2025 18:00:20 +0000
Manifest this update: Sun 20 Apr 2025 18:00:20 +0000
Manifest next update: Mon 21 Apr 2025 18:00:20 +0000
Files and hashes: 1: 1-B4mnYUsJDtWU5_HUQ7FJC6tCSw.roa (hash: sHcyd6IuGZiLkLEHDVFO8zkeKGMSe2epXGrDt7jtZiY=)
2: pUwT5WPNwZ36CRQfdZy_qy0h7Bw.roa (hash: jkKjJfJmkg4E68Fod/wXsJ/Vl/Yl+Hk0+HkH2tCfw7I=)
3: rd0qgVBgqn5iGiCUNJdYsgNolvA.crl (hash: 5HNNrxTHZnHzho6fwb8nnDBIfgUPzosDMOunu87y/WU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rd0qgVBgqn5iGiCUNJdYsgNolvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:5b:bd:58:e6:ce:3b:c6:30:65:8c:42:ae:92:a7:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=addd2a815060aa7e621a2094349758b2036896f0
Validity
Not Before: Apr 20 18:00:20 2025 GMT
Not After : Apr 21 18:00:20 2025 GMT
Subject: CN=6728d44a4f353abcc78f1f93e4a183e01cc49517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:95:fa:89:7f:ca:60:a0:40:8c:22:63:fb:4a:
7a:35:8b:ef:f2:3e:69:fd:34:11:43:ca:88:bd:53:
74:3d:e2:c6:18:9b:d7:4a:b0:c7:6a:e6:62:99:41:
d2:d1:9e:c2:d1:77:77:49:d8:45:37:8d:d9:1a:64:
80:e1:b7:0b:8e:b6:01:8d:6e:17:64:be:0e:d8:a4:
b3:93:75:2a:21:ec:02:f8:88:8f:32:6e:b7:88:65:
b2:b0:48:af:ed:72:57:59:2b:03:8d:75:2b:ba:d5:
b8:e9:07:26:91:37:ff:92:81:54:58:c6:61:a8:7c:
19:65:ef:71:bc:1b:69:93:84:dc:16:28:25:01:2b:
e3:28:b0:7d:27:07:0a:bb:a0:93:5b:82:56:e9:f4:
b4:de:7e:8c:25:4f:3e:fd:6a:bf:82:d6:9e:5a:40:
a0:28:2f:c6:22:f6:9a:71:26:3d:22:a9:6c:03:09:
8a:f5:d7:08:66:43:36:73:23:a8:d0:69:40:8a:ae:
e9:b1:4d:77:ff:d1:f5:38:37:e8:8e:81:03:5e:ce:
03:6e:db:62:5d:c2:7e:10:f0:7e:4f:42:6c:c2:82:
98:3c:6f:fa:78:72:c2:94:de:45:66:29:84:d5:8c:
42:15:4a:c2:a6:84:4d:84:83:5c:bd:25:c8:fd:17:
b5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:28:D4:4A:4F:35:3A:BC:C7:8F:1F:93:E4:A1:83:E0:1C:C4:95:17
X509v3 Authority Key Identifier:
keyid:AD:DD:2A:81:50:60:AA:7E:62:1A:20:94:34:97:58:B2:03:68:96:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rd0qgVBgqn5iGiCUNJdYsgNolvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:91:19:e1:2a:16:d6:35:67:1d:3e:50:6f:af:dd:29:99:60:
26:bf:c3:3e:1f:52:d0:94:b4:08:b8:d5:92:c8:ee:95:33:df:
8e:29:37:47:41:e0:ff:a3:0b:8b:ab:d8:aa:5f:7e:03:af:8f:
61:87:c3:17:c7:c1:ea:54:7b:74:d3:a4:ef:be:d9:88:04:b1:
7e:94:be:b7:9d:8e:23:4b:cc:80:29:d6:eb:22:6f:4f:ac:e9:
55:3c:6e:d7:3d:d8:d8:c3:d4:08:f3:c8:ac:e6:6b:75:36:f3:
33:6e:5e:7a:2d:c6:39:69:5e:f7:fe:de:ed:7f:3f:6d:13:03:
bc:e7:35:2b:f2:43:ac:42:cf:f3:db:27:07:3e:3d:7e:98:48:
3d:5b:03:d1:d5:b4:50:50:53:f5:54:72:e3:04:0e:d5:b8:1d:
93:b7:0c:0a:5a:2d:e8:ec:e7:83:2b:40:42:15:62:08:89:2a:
50:6b:10:b4:65:f7:bf:0f:4e:6d:fa:51:54:54:f4:28:92:6c:
be:2f:76:76:e5:06:1b:0c:39:b1:34:d2:97:3e:f9:89:87:d0:
b3:6f:0f:dd:9c:0b:f6:38:57:57:49:f1:a4:05:75:23:96:ad:
45:dc:f7:94:af:ee:6c:26:6f:68:40:4a:bc:ec:fb:b5:26:01:
7f:96:68:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:28:06 2025 by rpki-client