Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.mft
File: rSzfJ9neZesk5c_J0xDkyKAwFGA.mft (raw, json)
Hash identifier: qw+3soLoIQ6wu/RzIyQfkL9DXa6K38g2wWZ7vxI7cgo=
Subject key identifier: C4:BE:75:15:9A:F7:75:CB:04:37:F7:51:A9:6D:43:C8:B1:81:30:D5
Authority key identifier: AD:2C:DF:27:D9:DE:65:EB:24:E5:CF:C9:D3:10:E4:C8:A0:30:14:60
Certificate issuer: /CN=ad2cdf27d9de65eb24e5cfc9d310e4c8a0301460
Certificate serial: 01964CA242329A69049435EC8F32C75CF8D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSzfJ9neZesk5c_J0xDkyKAwFGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.mft
Manifest number: 0B02
Signing time: Sat 19 Apr 2025 06:00:24 +0000
Manifest this update: Sat 19 Apr 2025 06:00:24 +0000
Manifest next update: Sun 20 Apr 2025 06:00:24 +0000
Files and hashes: 1: Zp_o_Avy64dimsDN37AJZ_vsvNw.roa (hash: w725AD9grVqnjs1N3X5smX0OnVgWb9b37Wpm1j4UCoQ=)
2: rSzfJ9neZesk5c_J0xDkyKAwFGA.crl (hash: 1OgnowPPK1gmtwsqaZr/HuyCiDum87XNFioq72RXWgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rSzfJ9neZesk5c_J0xDkyKAwFGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:a2:42:32:9a:69:04:94:35:ec:8f:32:c7:5c:f8:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad2cdf27d9de65eb24e5cfc9d310e4c8a0301460
Validity
Not Before: Apr 19 06:00:24 2025 GMT
Not After : Apr 20 06:00:24 2025 GMT
Subject: CN=c4be75159af775cb0437f751a96d43c8b18130d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8c:e5:46:8f:41:c6:6d:67:ad:3b:ed:a8:33:
bf:32:d3:67:5b:b7:98:e5:e4:57:d3:50:d5:15:d9:
15:21:04:6c:14:c6:8c:2a:65:df:f3:bc:54:57:b9:
e7:5c:2e:12:4b:90:4a:d0:8b:92:75:42:48:fb:dd:
1e:c0:5a:5d:cd:34:e0:ef:6d:b2:3f:34:b0:31:7d:
ad:c5:98:d3:d8:37:7c:2c:4c:49:96:54:1f:31:4b:
f5:a3:f1:b8:95:f3:3a:39:25:d3:28:8c:0d:c6:6a:
e1:45:5b:ec:7a:76:fd:e4:ed:5a:d6:7a:5b:e3:d1:
82:a5:68:56:c8:4b:ef:02:ce:12:9d:4a:99:97:f7:
22:4f:ce:74:22:27:1f:3b:65:36:99:a6:d6:29:4b:
66:a8:38:86:42:b3:6c:43:85:49:87:dc:fa:1b:b0:
4d:e4:11:51:bf:c4:4a:f8:bc:5e:27:95:38:dc:12:
7b:1d:16:a8:89:ca:6d:df:6a:a8:ef:f9:d8:aa:77:
70:bb:f8:a8:d3:29:f3:ca:0d:a2:53:74:b5:6d:a5:
ee:8d:c3:bd:c2:62:d7:94:bc:9d:56:ca:30:dc:3d:
7c:0d:f9:22:bb:c6:be:6f:6e:d4:41:7c:56:5e:db:
9e:aa:cd:d4:e8:e7:7c:1d:de:6b:3d:42:03:7a:93:
4d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:BE:75:15:9A:F7:75:CB:04:37:F7:51:A9:6D:43:C8:B1:81:30:D5
X509v3 Authority Key Identifier:
keyid:AD:2C:DF:27:D9:DE:65:EB:24:E5:CF:C9:D3:10:E4:C8:A0:30:14:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSzfJ9neZesk5c_J0xDkyKAwFGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:94:25:5b:76:43:42:3c:98:cd:85:b4:0e:c7:b0:f2:35:50:
83:56:08:b6:56:9e:3a:f9:9a:7e:37:9a:7f:01:a5:83:4a:43:
8e:f4:e3:d3:48:61:ac:77:6c:44:6c:1f:66:15:38:3c:9a:01:
92:1c:b3:01:70:ac:73:81:fb:a2:ed:13:ea:30:f7:52:23:2e:
17:26:46:bc:f0:6e:97:e1:d5:82:e6:a3:7f:17:27:f6:33:1b:
d2:6d:f1:9e:6c:37:29:e4:d6:5e:f7:f1:b4:b4:7e:43:0f:02:
ae:ae:86:71:a9:44:20:8b:56:91:35:63:dd:1e:62:11:06:58:
64:d5:6e:ee:fa:66:fe:96:6b:53:95:1e:0b:a1:53:03:ed:a3:
09:7c:41:e6:64:5f:b1:b3:98:32:69:57:09:9d:24:59:38:98:
1b:50:09:26:42:4c:3f:04:64:3f:3e:ee:83:db:3e:ab:f3:49:
28:7b:aa:42:72:ad:ed:d5:3d:29:24:c1:cc:e7:5d:b0:c1:d0:
d0:f8:2b:fc:d6:b6:11:d3:1e:33:39:92:8f:96:36:87:4b:4a:
89:52:e8:7b:9a:23:f0:22:34:bb:c6:0d:d8:7d:e6:cc:39:bc:
0d:21:07:c4:c1:16:ad:ae:8d:2c:b4:44:b1:1a:2f:72:15:d8:
4e:0f:2f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 13:58:42 2025 by rpki-client