Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/2884a1-c124-4565-b841-e104c982d7a0/1/S5PGoQ0UHwCu-t4BvNNJL3VPToM.mft
File: S5PGoQ0UHwCu-t4BvNNJL3VPToM.mft (raw, json)
Hash identifier: DjWyHFLLZXdpKJoeA0bJ2osZl+Z854GVMQTKk1dbEWY=
Subject key identifier: 24:B7:9A:3B:F0:EE:7B:59:1B:89:8F:52:62:06:C1:84:A3:2C:0E:EE
Authority key identifier: 4B:93:C6:A1:0D:14:1F:00:AE:FA:DE:01:BC:D3:49:2F:75:4F:4E:83
Certificate issuer: /CN=4b93c6a10d141f00aefade01bcd3492f754f4e83
Certificate serial: 019651C91210B0FB01EAF05B3B56C9BA1412
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5PGoQ0UHwCu-t4BvNNJL3VPToM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/2884a1-c124-4565-b841-e104c982d7a0/1/S5PGoQ0UHwCu-t4BvNNJL3VPToM.mft
Manifest number: 1455
Signing time: Sun 20 Apr 2025 06:00:53 +0000
Manifest this update: Sun 20 Apr 2025 06:00:53 +0000
Manifest next update: Mon 21 Apr 2025 06:00:53 +0000
Files and hashes: 1: S5PGoQ0UHwCu-t4BvNNJL3VPToM.crl (hash: KpXajCdBm1ZJwTp8UX2oDOBjJs1MtH4HwbnwIf+BIgc=)
2: v6SZGiKR24BVvAjZdd8cz7dRNVo.roa (hash: SrmYXvyqUl8YVIgTkfPYRcexlIdDbvR6648X1c8kcVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/2884a1-c124-4565-b841-e104c982d7a0/1/S5PGoQ0UHwCu-t4BvNNJL3VPToM.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/2884a1-c124-4565-b841-e104c982d7a0/1/S5PGoQ0UHwCu-t4BvNNJL3VPToM.mft
rsync://rpki.ripe.net/repository/DEFAULT/S5PGoQ0UHwCu-t4BvNNJL3VPToM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:c9:12:10:b0:fb:01:ea:f0:5b:3b:56:c9:ba:14:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b93c6a10d141f00aefade01bcd3492f754f4e83
Validity
Not Before: Apr 20 06:00:53 2025 GMT
Not After : Apr 21 06:00:53 2025 GMT
Subject: CN=24b79a3bf0ee7b591b898f526206c184a32c0eee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:b2:7b:78:fc:db:8e:27:9a:87:51:25:13:5b:
af:05:3e:6b:ad:70:4d:05:b2:b8:6f:41:a9:d8:3d:
12:ee:c2:70:c6:38:7e:f1:ab:1a:a7:12:c6:35:4d:
e1:86:d9:a8:21:cc:03:12:73:ee:90:57:73:10:b5:
98:a8:a8:0d:8c:0d:d0:a9:b9:f2:df:53:dd:a3:4c:
e9:56:fb:f2:97:e8:e1:25:39:39:6b:5c:cf:7b:e0:
97:2f:3a:0e:96:da:9b:33:dd:a5:03:20:d5:8a:ff:
e7:9a:40:ed:cc:a5:9b:32:75:2a:d2:8b:db:ae:e0:
83:63:77:b5:05:9b:f6:8b:d5:38:6b:a1:c5:41:dc:
a9:f4:77:dd:64:56:05:2b:75:9f:99:75:22:de:e7:
44:38:35:c2:01:4c:ea:12:85:74:bc:f4:7d:c4:7f:
01:79:19:1b:9a:9a:a0:49:9b:49:43:cc:2d:3a:f4:
ff:8f:a8:76:45:bb:f8:b9:18:31:e0:d0:bc:5d:26:
cc:b5:f6:07:42:42:27:53:5c:56:d8:1a:7e:d0:0b:
38:b1:f2:1f:3f:42:4e:fd:ec:f9:62:76:b0:ef:fc:
b5:8a:06:e7:d1:f2:b8:e9:ee:c0:f9:75:dc:39:79:
9c:62:11:90:99:8b:0b:e2:09:3c:92:54:7c:0a:41:
4d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:B7:9A:3B:F0:EE:7B:59:1B:89:8F:52:62:06:C1:84:A3:2C:0E:EE
X509v3 Authority Key Identifier:
keyid:4B:93:C6:A1:0D:14:1F:00:AE:FA:DE:01:BC:D3:49:2F:75:4F:4E:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5PGoQ0UHwCu-t4BvNNJL3VPToM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/2884a1-c124-4565-b841-e104c982d7a0/1/S5PGoQ0UHwCu-t4BvNNJL3VPToM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/2884a1-c124-4565-b841-e104c982d7a0/1/S5PGoQ0UHwCu-t4BvNNJL3VPToM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:79:91:14:8a:0d:9e:5a:2c:73:c7:b0:05:b6:3b:ec:97:90:
48:81:18:06:68:79:c2:3e:8a:4c:a1:e8:f9:54:c0:f2:2a:c8:
ab:28:20:06:88:b1:22:93:80:28:b7:d2:dd:84:42:94:22:65:
e0:ca:ea:f2:44:af:9d:67:4e:26:bc:3d:26:a9:65:41:46:56:
c2:37:c6:6a:69:11:b9:28:45:c0:6b:9b:22:69:16:49:5e:4e:
77:d1:15:94:5b:a3:90:a6:26:f4:5a:bf:23:8e:b8:cd:d2:2c:
3c:08:27:f8:0b:97:9a:22:76:26:46:9c:68:9c:3c:42:6c:1a:
47:83:b4:e7:e2:e7:c1:b5:ea:88:6d:da:36:85:ff:ea:61:d3:
e0:ca:89:ae:45:20:09:71:93:21:84:c1:64:ce:f9:3f:09:79:
c5:a5:bd:b4:b2:c2:ef:4e:e7:16:72:55:99:ad:6a:1d:2c:2d:
17:99:fe:bd:74:b8:6d:f2:48:8e:8e:b7:41:44:da:db:d9:ee:
95:79:2c:98:36:29:ca:f8:94:03:3a:87:4a:da:cf:d8:9f:36:
94:33:5c:d4:0f:81:72:3b:66:2d:af:46:32:da:5f:69:0f:31:
76:68:c5:48:72:de:da:dc:e0:ea:00:9d:20:b8:75:50:77:b8:
5b:ae:a6:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:07:18 2025 by rpki-client