Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b172b7-6ae5-46e1-b0c0-0065e4a890b4/1/rcpuVKzQJs76NitCJ7iQgcClAEk.mft
File: rcpuVKzQJs76NitCJ7iQgcClAEk.mft (raw, json)
Hash identifier: LPnfF1a08C86vdOq5X44xO19g/u70zphUwBTkKQ+f2E=
Subject key identifier: B1:51:A1:80:CD:BB:E9:39:5F:84:B1:63:3E:75:7B:0C:61:70:82:E6
Authority key identifier: AD:CA:6E:54:AC:D0:26:CE:FA:36:2B:42:27:B8:90:81:C0:A5:00:49
Certificate issuer: /CN=adca6e54acd026cefa362b4227b89081c0a50049
Certificate serial: 019652DB7D76E63FD8B4AE7BE9C30B952C5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rcpuVKzQJs76NitCJ7iQgcClAEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/b172b7-6ae5-46e1-b0c0-0065e4a890b4/1/rcpuVKzQJs76NitCJ7iQgcClAEk.mft
Manifest number: 025B
Signing time: Sun 20 Apr 2025 11:00:38 +0000
Manifest this update: Sun 20 Apr 2025 11:00:38 +0000
Manifest next update: Mon 21 Apr 2025 11:00:38 +0000
Files and hashes: 1: nH-mLa1nqtF7NuWi_AxaaJ7rrpE.roa (hash: k+SK+iFUjD8k3G8uFqdLPMVQgq2VY/v5iPwBM07SwqU=)
2: rcpuVKzQJs76NitCJ7iQgcClAEk.crl (hash: C9X6y/o4lRd0pit1lGWQVhl64YMDTwJvB1es1Z4ygQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/b172b7-6ae5-46e1-b0c0-0065e4a890b4/1/rcpuVKzQJs76NitCJ7iQgcClAEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/b172b7-6ae5-46e1-b0c0-0065e4a890b4/1/rcpuVKzQJs76NitCJ7iQgcClAEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/rcpuVKzQJs76NitCJ7iQgcClAEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:db:7d:76:e6:3f:d8:b4:ae:7b:e9:c3:0b:95:2c:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adca6e54acd026cefa362b4227b89081c0a50049
Validity
Not Before: Apr 20 11:00:38 2025 GMT
Not After : Apr 21 11:00:38 2025 GMT
Subject: CN=b151a180cdbbe9395f84b1633e757b0c617082e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:20:33:df:d4:61:50:df:6c:52:40:a0:86:06:
e8:1f:87:c1:97:a8:84:af:15:83:b4:af:8a:4e:5d:
12:08:a9:17:57:bf:10:55:e2:fa:29:7f:af:94:dc:
c4:e3:84:e6:8b:2a:bf:85:65:cd:9a:99:58:82:de:
cf:af:1b:fa:18:bf:2b:de:dc:ab:e0:bc:6f:85:36:
17:f2:05:d9:88:4b:32:34:42:e8:48:f3:d2:af:ff:
23:f9:ae:e4:79:90:c8:e4:8c:e4:ec:15:76:be:23:
e6:a5:d8:7f:03:79:7a:1b:1a:0d:be:45:d6:69:21:
89:04:4d:61:39:b9:6d:8f:f6:06:c0:f3:4e:b2:87:
74:0f:03:70:d2:07:47:f6:a4:35:42:4b:e9:74:63:
39:72:aa:96:55:a7:c2:41:a2:23:78:0c:ea:5a:82:
81:c8:ef:31:ab:1e:72:e9:c0:cf:b6:a7:82:fd:ce:
1d:14:d6:69:f3:65:fb:ea:0d:9a:fe:94:4d:7c:d1:
48:52:e9:af:d1:80:d6:cc:05:de:90:0e:85:49:9d:
a8:a2:a7:6f:d1:96:0e:57:d7:58:2d:f9:ee:65:e1:
d4:3b:d9:9d:37:0e:41:c4:c0:5d:f4:e9:2a:20:7c:
5a:47:3b:94:59:af:a9:8e:d1:a9:00:65:e5:09:d1:
d0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:51:A1:80:CD:BB:E9:39:5F:84:B1:63:3E:75:7B:0C:61:70:82:E6
X509v3 Authority Key Identifier:
keyid:AD:CA:6E:54:AC:D0:26:CE:FA:36:2B:42:27:B8:90:81:C0:A5:00:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rcpuVKzQJs76NitCJ7iQgcClAEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b172b7-6ae5-46e1-b0c0-0065e4a890b4/1/rcpuVKzQJs76NitCJ7iQgcClAEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b172b7-6ae5-46e1-b0c0-0065e4a890b4/1/rcpuVKzQJs76NitCJ7iQgcClAEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:b5:3b:65:fb:3c:17:86:95:11:2d:46:66:00:fe:b7:92:b9:
49:29:43:a7:36:5e:fa:31:93:0b:5e:ed:44:76:e2:8a:e0:5b:
e6:45:85:8e:f5:08:11:dc:40:4d:67:f3:17:ee:55:ec:03:b3:
9f:2d:b9:20:d1:0b:f1:8a:81:6f:a2:55:86:08:72:71:e3:52:
1b:89:93:ef:1f:3c:c2:92:24:74:ba:85:e0:bb:36:97:d0:95:
cc:cc:e5:68:6f:50:cb:e5:c7:e9:e8:27:b2:20:fc:dd:ad:16:
10:58:6d:af:b2:7f:d6:16:7d:5a:1b:38:1d:6c:6d:47:53:0f:
2b:1f:57:03:9c:95:ae:0d:bc:03:e2:36:50:e4:ab:99:4e:0b:
19:0f:e4:77:cf:3b:82:80:ce:6f:f0:b5:7b:e2:9c:ba:50:8d:
8e:46:35:ca:1c:58:3e:66:e8:b0:a2:61:1e:9e:48:67:5a:58:
bb:9d:ab:3d:2f:84:6d:c3:85:3f:88:65:dd:8f:da:e8:8b:b8:
a6:1d:a1:58:31:95:fe:c7:27:13:e7:50:5f:68:44:a5:06:c2:
e0:b4:da:20:9e:ab:51:a6:fa:c0:3d:f1:aa:76:35:02:af:d6:
6b:a8:95:3d:2d:9f:b1:5a:0c:6f:51:d3:7e:3f:07:81:7b:cc:
be:cc:63:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:13:25 2025 by rpki-client