Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/zSaUgromG4gAVgjsULe5CdPz_U4.mft
File: zSaUgromG4gAVgjsULe5CdPz_U4.mft (raw, json)
Hash identifier: 2r6rWXOSTlmXctEwLwGba+3xBRmaTntrf9pgcm2wjxI=
Subject key identifier: 3B:44:75:1F:CB:7B:93:7D:96:BA:D7:2B:1C:BA:FE:C4:9D:D8:48:21
Authority key identifier: CD:26:94:82:BA:26:1B:88:00:56:08:EC:50:B7:B9:09:D3:F3:FD:4E
Certificate issuer: /CN=cd269482ba261b88005608ec50b7b909d3f3fd4e
Certificate serial: 01965E3AB9564672D1DF12B2C7A0AC2C07AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zSaUgromG4gAVgjsULe5CdPz_U4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/zSaUgromG4gAVgjsULe5CdPz_U4.mft
Manifest number: 1501
Signing time: Tue 22 Apr 2025 16:00:28 +0000
Manifest this update: Tue 22 Apr 2025 16:00:28 +0000
Manifest next update: Wed 23 Apr 2025 16:00:28 +0000
Files and hashes: 1: 4bVZoUiCbJaTBG7aA0p9xBgeM94.roa (hash: MzCfFVB6xbhIQC2ta/MEsIETvDrpIdsUhLGtVjRSeig=)
2: zSaUgromG4gAVgjsULe5CdPz_U4.crl (hash: YLKm9+Ihz/X5tBLuqMT287/oJGM4SUm0O+R2bg1jas0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/zSaUgromG4gAVgjsULe5CdPz_U4.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/zSaUgromG4gAVgjsULe5CdPz_U4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zSaUgromG4gAVgjsULe5CdPz_U4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:3a:b9:56:46:72:d1:df:12:b2:c7:a0:ac:2c:07:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd269482ba261b88005608ec50b7b909d3f3fd4e
Validity
Not Before: Apr 22 16:00:28 2025 GMT
Not After : Apr 23 16:00:28 2025 GMT
Subject: CN=3b44751fcb7b937d96bad72b1cbafec49dd84821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8d:b4:a1:ed:da:e9:35:1d:e2:df:93:8f:42:
9a:e2:1f:af:a3:86:88:3f:1d:ac:63:70:6f:40:97:
61:c7:64:85:22:87:60:4b:d0:f0:92:15:be:a7:7c:
b5:ae:de:7e:fc:b3:23:33:b5:af:37:20:2a:9d:1a:
cb:a7:02:40:c1:1f:6c:31:ff:6c:68:2f:85:9f:2b:
93:54:fc:9a:c2:a6:2a:ea:95:e4:fd:d6:f8:72:2a:
18:72:05:8e:f9:20:46:68:22:c5:0d:fd:c5:ea:28:
45:2a:d4:cb:d7:b8:13:49:eb:96:3e:19:58:99:2b:
21:c5:7a:90:45:d1:ee:9c:a8:f8:1b:3d:2f:4b:73:
e5:55:83:61:e3:99:5b:27:33:69:98:91:db:38:91:
73:b5:b3:28:09:86:e3:71:d6:f1:ca:c1:2e:12:de:
c6:39:4e:fb:be:ea:e2:7c:f1:70:fd:78:2e:37:b5:
c1:a7:06:fe:8b:28:eb:88:60:b0:29:71:98:70:d9:
8a:5c:c6:a5:00:d4:19:0a:02:42:fa:96:63:95:b0:
cb:99:55:83:50:45:0b:56:fa:75:93:55:a4:37:d0:
2a:51:13:e9:37:bd:55:e3:51:e1:b6:ed:ef:05:ba:
1a:3d:9b:cc:f6:c9:0a:6b:7a:90:9e:bd:a0:e1:bc:
74:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:44:75:1F:CB:7B:93:7D:96:BA:D7:2B:1C:BA:FE:C4:9D:D8:48:21
X509v3 Authority Key Identifier:
keyid:CD:26:94:82:BA:26:1B:88:00:56:08:EC:50:B7:B9:09:D3:F3:FD:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zSaUgromG4gAVgjsULe5CdPz_U4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/zSaUgromG4gAVgjsULe5CdPz_U4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/zSaUgromG4gAVgjsULe5CdPz_U4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:91:d8:23:d1:29:91:44:9f:0a:71:d0:8e:58:4f:96:0b:6c:
95:8e:28:e7:a1:8b:66:62:d6:5f:d1:8f:bb:89:d2:da:21:22:
17:5a:cb:23:c3:cf:60:c1:95:fa:7b:79:21:f7:97:7c:32:a0:
64:c3:54:31:73:08:ea:fc:e1:15:55:d5:52:fb:11:2e:fa:74:
c9:0d:c9:41:0e:e7:50:df:b2:cb:71:66:2b:b1:dc:2c:ca:4b:
98:1f:0f:cb:47:15:f9:fe:9b:84:6a:24:b5:d0:fe:34:88:af:
4d:5a:48:24:5c:a7:a0:a5:e6:4e:0f:cd:3e:ad:b2:e1:b3:83:
ab:53:ec:20:c9:98:67:d7:46:fb:c1:02:26:11:1d:e2:13:b5:
ce:92:ba:a9:f1:06:74:27:69:51:6e:9a:18:a1:0e:3d:bb:55:
75:23:f8:98:a2:15:a7:5c:4a:52:b1:7c:fb:59:49:93:16:21:
b0:19:58:ea:f8:8c:a6:80:42:d2:f5:8e:e9:c6:69:c8:31:e9:
d0:64:33:d4:8f:f4:aa:d8:42:c5:46:d2:ed:a1:57:c3:4e:f8:
48:26:bb:ec:89:18:f0:b6:39:0d:d3:d1:11:dd:d9:1d:a1:dd:
e2:b0:c0:49:96:75:be:1b:04:43:83:f9:73:93:43:8f:64:87:
15:5e:d3:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:24:14 2025 by rpki-client