Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/4498aa-cc27-4316-ae87-d472d9afe134/1/uRWvWdJPWaYNl8HIirl5oUxYD_Q.mft
File: uRWvWdJPWaYNl8HIirl5oUxYD_Q.mft (raw, json)
Hash identifier: 6PeI6ALokMQV5UkBK29IYhCM/g6mGzsS4NwECLAMi9U=
Subject key identifier: B1:E2:EA:80:DB:F5:58:03:90:A7:A3:5A:80:38:E7:06:5C:40:66:15
Authority key identifier: B9:15:AF:59:D2:4F:59:A6:0D:97:C1:C8:8A:B9:79:A1:4C:58:0F:F4
Certificate issuer: /CN=b915af59d24f59a60d97c1c88ab979a14c580ff4
Certificate serial: 019658A67B1379249DD1C30B0024AA0F2F5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRWvWdJPWaYNl8HIirl5oUxYD_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/4498aa-cc27-4316-ae87-d472d9afe134/1/uRWvWdJPWaYNl8HIirl5oUxYD_Q.mft
Manifest number: 1500
Signing time: Mon 21 Apr 2025 14:00:27 +0000
Manifest this update: Mon 21 Apr 2025 14:00:27 +0000
Manifest next update: Tue 22 Apr 2025 14:00:27 +0000
Files and hashes: 1: hbB_a3Y8U324LaNC-0q5xvctY3o.roa (hash: nXIgFtsgC878hqr3xc7aa+lfCX4icrBjNT+2kWgSc+Q=)
2: uRWvWdJPWaYNl8HIirl5oUxYD_Q.crl (hash: 70UArlyIjU5JDwOUOzAFHGXeO9T6qDk0CHJ2Yh+8QeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/4498aa-cc27-4316-ae87-d472d9afe134/1/uRWvWdJPWaYNl8HIirl5oUxYD_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/4498aa-cc27-4316-ae87-d472d9afe134/1/uRWvWdJPWaYNl8HIirl5oUxYD_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRWvWdJPWaYNl8HIirl5oUxYD_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 13:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:a6:7b:13:79:24:9d:d1:c3:0b:00:24:aa:0f:2f:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b915af59d24f59a60d97c1c88ab979a14c580ff4
Validity
Not Before: Apr 21 14:00:27 2025 GMT
Not After : Apr 22 14:00:27 2025 GMT
Subject: CN=b1e2ea80dbf5580390a7a35a8038e7065c406615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:51:c0:21:d0:22:b7:0e:15:d7:60:18:7a:95:
5a:58:09:9b:10:5c:ab:22:7e:19:b7:08:89:cd:2a:
5c:91:2b:4c:b8:47:ae:4c:15:6e:ee:ce:2c:12:02:
9a:9f:42:22:f0:9c:da:9c:44:85:20:3e:63:09:58:
f0:6e:8d:52:3e:17:69:b2:a4:2c:57:27:11:92:ea:
3e:87:26:46:2a:44:5c:c7:41:6b:fb:33:bf:a4:7f:
29:c2:29:3b:be:e4:78:f7:53:5d:de:08:19:c4:4d:
a3:48:f1:ab:00:ac:8f:6f:51:77:c9:cd:5b:64:8b:
5f:f1:17:06:69:d1:e2:70:ed:24:90:f8:bc:ff:9d:
f5:36:20:be:d3:c1:c5:8c:d4:4b:b3:af:ed:ba:d2:
74:d9:be:16:69:cb:63:30:22:fa:c4:2e:02:a5:bd:
51:bf:ca:33:10:bb:68:bf:6b:6d:f3:5a:48:43:9f:
f4:82:f8:7f:7d:12:f1:b8:42:50:ab:61:f0:fe:99:
61:cd:1e:ca:02:c4:aa:a3:b2:0f:ff:37:29:19:dc:
29:57:85:28:31:cf:07:48:6d:37:78:48:fe:fc:13:
67:e1:f7:e5:e0:1a:92:4e:00:31:10:cc:2b:64:d7:
b6:85:b4:61:03:f6:eb:a0:ca:fd:e3:b8:74:75:99:
8a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:E2:EA:80:DB:F5:58:03:90:A7:A3:5A:80:38:E7:06:5C:40:66:15
X509v3 Authority Key Identifier:
keyid:B9:15:AF:59:D2:4F:59:A6:0D:97:C1:C8:8A:B9:79:A1:4C:58:0F:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRWvWdJPWaYNl8HIirl5oUxYD_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4498aa-cc27-4316-ae87-d472d9afe134/1/uRWvWdJPWaYNl8HIirl5oUxYD_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4498aa-cc27-4316-ae87-d472d9afe134/1/uRWvWdJPWaYNl8HIirl5oUxYD_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:05:72:1b:77:85:85:72:a8:c5:20:39:38:62:b9:a8:d9:21:
65:1a:58:33:d3:b8:a0:7e:6f:28:d2:a4:27:72:af:1b:c5:01:
cf:df:ae:12:c1:83:e2:ad:05:83:10:f2:c6:6d:ad:f9:56:e3:
49:91:fc:ba:d6:47:d1:73:2b:2b:d5:07:53:4e:32:0b:87:6a:
f2:68:88:2e:a5:e3:22:85:ed:1e:03:4c:cf:0d:32:c2:d4:1a:
b2:70:ff:3c:be:eb:8c:98:9a:0f:c8:f7:92:9e:e7:c3:e6:1d:
99:df:f1:38:bb:83:c3:7e:77:62:9b:0f:3e:37:30:12:55:98:
41:73:e0:77:56:cf:1b:1d:b9:4b:c7:e9:f6:c4:31:ef:9d:00:
0f:c0:fe:fe:0a:29:94:a0:80:82:38:77:7f:1c:c9:fd:5f:06:
63:39:15:12:19:60:e2:b0:2e:c4:71:60:19:ab:10:ec:45:a7:
89:95:2d:5d:d9:f1:f8:6b:e1:12:8c:f7:64:af:2a:6f:8b:c7:
9a:e4:54:40:6c:66:8f:95:9b:9b:09:29:45:ea:b7:9a:e4:7c:
2c:66:03:45:18:aa:e8:03:57:3c:2d:d5:7d:9f:4b:5d:9c:90:
3c:55:8f:5a:a8:a1:69:51:a0:5e:8b:74:7e:19:90:0e:3c:30:
62:17:6c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 21:28:10 2025 by rpki-client