Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.mft
File: pB1Ol4gQ6XiaduaHp93ZdSaw2bw.mft (raw, json)
Hash identifier: cxjBy0Z53d4GM9fEFx0/L/OdgkIz7/4Xsfj6a+ZHG4U=
Subject key identifier: 53:53:0D:EB:06:6C:51:58:92:CF:FF:26:66:DD:B7:2A:26:E8:FA:B3
Authority key identifier: A4:1D:4E:97:88:10:E9:78:9A:76:E6:87:A7:DD:D9:75:26:B0:D9:BC
Certificate issuer: /CN=a41d4e978810e9789a76e687a7ddd97526b0d9bc
Certificate serial: 0196591479B9FD1B06B97660C41304347CF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.mft
Manifest number: 1505
Signing time: Mon 21 Apr 2025 16:00:36 +0000
Manifest this update: Mon 21 Apr 2025 16:00:36 +0000
Manifest next update: Tue 22 Apr 2025 16:00:36 +0000
Files and hashes: 1: IsTCtVmTNyn-RD8cnFqGYXSoe0E.roa (hash: L2WChiXDdgP/OiZ7K6XF82266pxnvmteFE2BApkpXrw=)
2: nLB2qYSBJ1YFwwH2Uq3CWH-Xycw.roa (hash: DDaDM0x5+8q+LGF59JGSBz5quMqPXuHhZb7HpNUm6U8=)
3: pB1Ol4gQ6XiaduaHp93ZdSaw2bw.crl (hash: Avn+EBR+Z8YojZyNiZ7L76r7e82m8jEDLf9bEcXzWKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:14:79:b9:fd:1b:06:b9:76:60:c4:13:04:34:7c:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a41d4e978810e9789a76e687a7ddd97526b0d9bc
Validity
Not Before: Apr 21 16:00:36 2025 GMT
Not After : Apr 22 16:00:36 2025 GMT
Subject: CN=53530deb066c515892cfff2666ddb72a26e8fab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:92:82:23:65:10:c1:7c:7d:5d:95:14:88:d4:
51:cf:9d:22:a6:5d:96:35:3a:0c:64:cf:d5:67:89:
1c:86:7e:f8:d6:d7:22:80:3b:bc:48:25:6b:b9:9b:
b7:d8:03:a8:51:5d:ec:bb:64:57:78:f5:47:6b:20:
9f:fd:97:89:8a:88:11:01:da:53:83:d1:74:1f:57:
ca:0d:05:fe:f5:7f:c4:b4:d7:63:40:9e:6d:01:87:
91:87:93:dd:91:1b:75:fc:d8:6a:e4:27:b1:66:d8:
e2:c1:5c:d4:e3:64:cc:ad:c5:33:94:35:9b:83:09:
09:2f:9a:f8:2f:4d:4f:7a:42:19:fd:ba:e9:53:3c:
be:e8:07:e7:45:eb:cf:2d:e1:f3:61:43:3f:3a:68:
9c:47:a2:bd:5b:15:f5:7e:a7:76:54:6f:f0:65:d2:
65:46:99:a1:38:e5:3f:1c:d1:ce:99:09:f1:f8:97:
ad:86:7b:31:49:ed:6c:c8:ec:1c:c6:bb:31:6c:fe:
ec:a7:59:7d:85:17:0f:82:47:c4:8b:9a:f4:8a:46:
7c:be:b8:aa:1d:14:c3:ac:04:8c:b2:76:4d:ee:a3:
b2:ab:3e:f4:7f:1f:c8:7d:a8:66:d0:0a:af:3c:28:
5c:81:9b:5a:7a:d6:ff:08:48:14:bb:96:5b:34:f9:
cd:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:53:0D:EB:06:6C:51:58:92:CF:FF:26:66:DD:B7:2A:26:E8:FA:B3
X509v3 Authority Key Identifier:
keyid:A4:1D:4E:97:88:10:E9:78:9A:76:E6:87:A7:DD:D9:75:26:B0:D9:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:66:93:90:ac:cd:e3:47:98:cd:64:81:1f:9d:e2:79:51:89:
43:fb:4b:19:43:d2:0a:81:9f:97:5d:5f:cd:27:8a:ee:fa:f8:
1a:1d:f1:b0:56:38:4e:4d:50:34:cc:be:29:89:fa:9d:c1:f5:
e7:04:3b:39:4b:62:1e:35:91:84:54:f2:24:a4:45:d2:20:d5:
7c:65:3d:d4:8c:99:96:9a:df:0c:90:34:ff:ea:4c:49:f6:d5:
cc:6d:92:41:91:59:88:00:bc:d6:f8:3d:c5:2b:29:aa:48:61:
4e:17:6b:d9:62:1b:9f:47:2a:7f:1d:05:b0:3b:69:ab:49:dc:
3b:a5:ef:64:f8:51:17:a4:7a:5c:55:82:0f:58:33:ea:b8:6a:
d2:20:13:29:ad:6e:98:51:44:70:b8:e8:d7:8d:a7:5d:b4:14:
73:7d:e2:ff:65:6c:29:8b:68:d6:e7:cb:45:99:ad:73:3a:a4:
23:63:70:7d:17:08:e0:fc:80:ad:51:fb:92:a2:6f:72:d4:53:
7b:c2:82:1b:a5:60:ea:c1:a7:a3:22:51:f9:d9:17:46:e2:f1:
04:81:44:9f:b4:33:d7:3c:64:12:0e:fe:57:13:46:d7:48:1a:
a6:86:5f:40:89:ca:1f:1c:b3:87:98:13:09:15:77:23:bb:7c:
90:cf:bf:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:16:22 2025 by rpki-client