Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft
File: h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft (raw, json)
Hash identifier: 120gI1DVPhYeBoZ9LhpXepgtL4B6J62qQJBlbFW1bn8=
Subject key identifier: D0:C9:40:13:F5:BA:B0:E5:35:4B:E5:F5:3F:E6:3D:78:7C:13:6C:46
Authority key identifier: 87:8E:CA:3B:CC:D4:E5:C2:EF:B3:60:8E:E8:3A:57:F9:AE:82:1B:E6
Certificate issuer: /CN=878eca3bccd4e5c2efb3608ee83a57f9ae821be6
Certificate serial: 019657945AD8B4C3B9080F42E7C4CA3395FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h47KO8zU5cLvs2CO6DpX-a6CG-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft
Manifest number: 1501
Signing time: Mon 21 Apr 2025 09:01:02 +0000
Manifest this update: Mon 21 Apr 2025 09:01:02 +0000
Manifest next update: Tue 22 Apr 2025 09:01:02 +0000
Files and hashes: 1: h47KO8zU5cLvs2CO6DpX-a6CG-Y.crl (hash: mpN3G/loRRf6pRyOKyGDUD50jjPK6169j9Rg2dSgukg=)
2: rWmXzuPVAuMc61ALuQe-2WhbT9s.roa (hash: OUZXq6sIvQV4mWZYFrhWWMjn+vbRxUs/Ip4xXPXay4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/h47KO8zU5cLvs2CO6DpX-a6CG-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 09:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:94:5a:d8:b4:c3:b9:08:0f:42:e7:c4:ca:33:95:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=878eca3bccd4e5c2efb3608ee83a57f9ae821be6
Validity
Not Before: Apr 21 09:01:02 2025 GMT
Not After : Apr 22 09:01:02 2025 GMT
Subject: CN=d0c94013f5bab0e5354be5f53fe63d787c136c46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c9:4a:fd:a3:38:dd:cd:24:e8:0b:45:fc:92:
c4:e1:03:34:0f:12:ba:fa:cf:13:b7:6d:c6:4f:b4:
99:b8:88:2e:2c:fd:63:bf:58:43:ca:6f:11:20:4b:
9b:4c:ce:de:40:95:c0:a6:12:0a:5f:3d:72:2b:e8:
b3:1a:f4:7a:26:17:f1:fe:e7:f0:af:5e:78:85:e3:
6f:a3:a3:71:31:b9:98:eb:d9:32:b0:c2:14:f6:17:
fd:b3:64:17:3e:d0:d1:2f:3a:98:08:7e:63:87:af:
3c:36:3e:89:7e:ba:51:3d:10:e0:e6:01:c9:f9:c8:
2f:d2:88:ad:e1:a3:7e:51:a5:63:8f:9e:c6:ec:3d:
a5:b2:70:3c:fb:a4:8c:dc:58:27:9c:f5:99:95:0d:
5e:b7:ec:12:ce:1e:ff:92:db:da:ea:88:12:cf:14:
00:a7:f1:28:e2:b2:ee:35:3a:56:c3:1a:06:8b:a3:
13:fe:60:79:6c:45:de:65:e3:12:36:00:f4:d7:a0:
7e:67:af:54:05:63:a3:1f:c2:d6:5f:75:7a:d2:62:
99:cc:28:4f:ef:3b:a2:06:2e:9f:32:4c:ad:48:16:
55:f9:a0:e5:f7:45:dd:41:74:15:2a:d1:a5:f2:f4:
8a:0d:a5:8d:d7:39:71:50:66:9c:9f:35:aa:83:5a:
dc:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C9:40:13:F5:BA:B0:E5:35:4B:E5:F5:3F:E6:3D:78:7C:13:6C:46
X509v3 Authority Key Identifier:
keyid:87:8E:CA:3B:CC:D4:E5:C2:EF:B3:60:8E:E8:3A:57:F9:AE:82:1B:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h47KO8zU5cLvs2CO6DpX-a6CG-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:3a:5c:25:c7:fe:ee:f2:e4:8d:a6:70:89:63:e8:73:2a:e4:
fd:45:2e:45:9b:cf:02:e8:86:71:59:8b:8e:b6:ba:5d:95:0d:
19:f9:63:a2:60:9f:1e:4d:d8:ce:7c:db:03:fd:46:11:13:d8:
c9:c9:41:d2:a8:c3:67:ba:49:f4:91:d5:b2:eb:37:ec:2e:cc:
8d:86:be:46:f7:04:02:84:c2:0e:6b:9d:9d:20:64:00:81:43:
8d:e1:da:3b:09:d1:53:61:b7:e3:50:8a:2a:a0:eb:8a:0d:e6:
0f:88:98:2b:4c:29:4c:a0:46:24:73:77:44:e9:9b:b8:0b:e0:
0a:2f:df:bf:14:e3:a3:93:13:b0:16:b9:6c:4e:db:97:9f:45:
5c:42:a8:53:0d:73:d1:4c:03:12:30:09:cd:18:8a:6f:26:ae:
de:13:cc:7e:36:7d:dd:1c:1d:b9:f1:59:15:0b:a8:ec:d4:8b:
5f:72:73:eb:f0:8f:81:3f:3d:e3:37:be:e9:da:0d:2a:07:30:
03:32:1c:a0:4d:ad:d7:24:a2:84:b8:77:60:81:c4:40:a1:68:
02:38:9b:12:7c:5f:b0:57:89:7a:a3:e8:df:2e:29:18:7a:06:
85:fc:ee:13:f8:a5:94:3b:ec:f5:33:1e:7b:57:71:21:3b:b0:
42:6c:91:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:07:44 2025 by rpki-client