Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.mft
File: koCqYVCQTiD4hKRjybZq5tQWG5s.mft (raw, json)
Hash identifier: 3NnsmQBBgMzoXYiwusSUh3QT6lyj0bZ621XI8v8qH/U=
Subject key identifier: 7C:5B:1D:EF:E5:DD:C4:24:31:D8:8A:C3:42:12:72:75:39:9E:76:08
Authority key identifier: 92:80:AA:61:50:90:4E:20:F8:84:A4:63:C9:B6:6A:E6:D4:16:1B:9B
Certificate issuer: /CN=9280aa6150904e20f884a463c9b66ae6d4161b9b
Certificate serial: 0196579445D6691A2A8D6917B27DC6F5DE14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/koCqYVCQTiD4hKRjybZq5tQWG5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.mft
Manifest number: 1501
Signing time: Mon 21 Apr 2025 09:00:57 +0000
Manifest this update: Mon 21 Apr 2025 09:00:57 +0000
Manifest next update: Tue 22 Apr 2025 09:00:57 +0000
Files and hashes: 1: 42CIzWao25DIQH989gjkrV7OjrY.roa (hash: J1v5sJHZZ0GbntLAyFYLEEa5CiZuVx8YZ/XB+JD5wdg=)
2: koCqYVCQTiD4hKRjybZq5tQWG5s.crl (hash: Z/v/go6W1vavOtDsLZ78j4N2hCIHdJvT6i2DDz6iRLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/koCqYVCQTiD4hKRjybZq5tQWG5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 09:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:94:45:d6:69:1a:2a:8d:69:17:b2:7d:c6:f5:de:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9280aa6150904e20f884a463c9b66ae6d4161b9b
Validity
Not Before: Apr 21 09:00:57 2025 GMT
Not After : Apr 22 09:00:57 2025 GMT
Subject: CN=7c5b1defe5ddc42431d88ac342127275399e7608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:33:8e:ae:dc:7a:23:d1:6c:de:2e:b9:9f:b5:
6e:4c:bb:dc:6a:37:08:48:7d:cb:8f:21:bf:c7:bd:
92:9b:ef:36:0b:0c:cd:cf:10:b1:c1:2b:a6:8e:a9:
aa:4e:ab:ed:97:b2:e9:b2:33:6a:54:82:26:45:39:
c1:6f:7c:b1:5e:d8:b7:c2:63:a0:33:ec:0a:27:02:
b2:ac:51:cc:f5:fb:b8:d9:43:48:60:94:cf:af:f8:
34:cc:7f:a2:0f:41:2c:15:66:57:ef:e2:a6:63:58:
a1:cb:1d:61:95:fa:22:4e:d7:a5:47:ed:1c:8a:5a:
e9:6d:4d:03:9e:82:20:de:f2:82:07:e1:29:ec:25:
96:6f:ad:af:25:f2:c1:e8:3c:8e:3c:f7:ff:89:fd:
87:38:a7:53:1e:48:7b:be:35:29:c3:bf:bd:82:b8:
da:02:3d:ae:80:72:6f:87:20:90:2d:9c:63:fe:7a:
5b:92:7c:50:12:3d:41:ec:37:c2:32:05:9f:7a:ff:
e7:86:a3:36:ac:0e:59:d9:ad:04:0a:04:eb:30:ee:
d0:18:99:81:ff:e4:e4:2d:a3:02:99:99:9f:16:a5:
d8:16:a9:db:cc:a9:93:5c:cb:f9:14:20:c2:11:72:
85:90:d3:d6:95:27:70:8a:c7:b3:5e:6b:07:85:79:
b8:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:5B:1D:EF:E5:DD:C4:24:31:D8:8A:C3:42:12:72:75:39:9E:76:08
X509v3 Authority Key Identifier:
keyid:92:80:AA:61:50:90:4E:20:F8:84:A4:63:C9:B6:6A:E6:D4:16:1B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koCqYVCQTiD4hKRjybZq5tQWG5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:c7:66:88:d8:4c:f3:de:b5:7e:fc:eb:c2:a3:b7:ab:c6:87:
92:42:72:b9:44:5e:cb:0b:d5:7c:a6:95:57:c6:32:c7:74:72:
02:51:d9:74:ac:87:14:63:2b:8c:59:8d:c0:f5:12:eb:c3:b1:
dd:7d:c6:bf:2c:8a:41:0d:f0:d5:84:41:69:71:da:7e:b8:50:
b7:90:99:8e:f2:bf:f8:9e:0b:b8:ec:3b:20:bf:0c:a6:26:8f:
8b:c6:bc:81:ec:23:4d:ea:1b:58:e8:d0:8f:c5:bc:bb:f9:e4:
e7:43:6a:c2:9b:80:a1:2c:ff:2c:9f:36:1b:bb:44:ea:42:95:
63:84:c0:42:b8:7a:13:6e:35:b6:e8:46:72:e7:54:cc:d2:01:
f2:89:30:0d:a4:f0:1b:3e:6a:e7:2c:04:c4:43:e5:3c:f4:16:
e9:37:fe:ca:15:32:a1:e8:8b:b5:bd:4c:eb:c4:e2:58:89:6d:
49:1f:df:93:cf:01:08:ed:a6:2a:b5:0f:3a:09:3c:69:dd:53:
57:47:3f:20:fd:6b:de:eb:f4:b1:4f:ec:c1:c7:e7:5e:c3:87:
33:6c:96:81:60:1d:7f:72:70:a7:a1:eb:bf:b5:fb:90:89:d3:
42:7e:7d:f7:f4:36:79:1e:29:12:c5:af:48:b7:ce:e6:c2:3d:
51:e9:f2:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:19:42 2025 by rpki-client