Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.mft
File: 4toj07kw1MHzrHMGXXGmB8NdKQA.mft (raw, json)
Hash identifier: HJqSmZki4HSBx76rX+Up0hU++q7o7a8ejX3jyrgCREo=
Subject key identifier: A5:C8:DE:87:C2:C4:BB:9B:4D:02:FB:8C:D3:BD:A0:F6:7A:82:93:7B
Authority key identifier: E2:DA:23:D3:B9:30:D4:C1:F3:AC:73:06:5D:71:A6:07:C3:5D:29:00
Certificate issuer: /CN=e2da23d3b930d4c1f3ac73065d71a607c35d2900
Certificate serial: 0196729D8B9F6304338CB6BFC6EFD66386EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4toj07kw1MHzrHMGXXGmB8NdKQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.mft
Manifest number: 1510
Signing time: Sat 26 Apr 2025 15:00:49 +0000
Manifest this update: Sat 26 Apr 2025 15:00:49 +0000
Manifest next update: Sun 27 Apr 2025 15:00:49 +0000
Files and hashes: 1: 1-rU3n-MmX0x7vSSIglpKrM6p7wc.roa (hash: c73xh5XkAcPFRSo/oWqlfjE2NzFubQ+3BLO5+whFr6o=)
2: 4toj07kw1MHzrHMGXXGmB8NdKQA.crl (hash: duj4KzIlSDT0lks9No/zScx7amLrjBloykz5PiNM5K4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4toj07kw1MHzrHMGXXGmB8NdKQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 15:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:9d:8b:9f:63:04:33:8c:b6:bf:c6:ef:d6:63:86:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2da23d3b930d4c1f3ac73065d71a607c35d2900
Validity
Not Before: Apr 26 15:00:49 2025 GMT
Not After : Apr 27 15:00:49 2025 GMT
Subject: CN=a5c8de87c2c4bb9b4d02fb8cd3bda0f67a82937b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:13:9a:e9:3e:bf:dd:07:cb:ec:55:80:96:8b:
8e:77:20:48:a0:bc:23:f7:c2:de:da:a9:a3:25:24:
67:5f:e5:18:0e:9e:2b:50:6f:f3:60:92:ea:ad:92:
7e:4e:8b:85:38:4e:91:e1:dc:ef:5d:f8:e4:c8:bf:
15:2e:6e:97:11:b1:cb:e5:2e:71:41:8f:c5:31:68:
91:15:ee:37:20:20:29:d1:b3:ee:72:a1:5e:5a:4f:
bc:88:cc:b2:ea:09:9e:0a:89:e0:fb:8e:11:4c:16:
56:cb:0e:86:b1:26:c2:f5:47:21:f2:a1:36:02:c3:
38:23:c4:5b:13:4d:64:19:ce:85:13:6e:bf:f5:7a:
cc:43:ae:af:79:98:86:23:19:19:5c:7a:a6:d8:01:
ef:36:d0:f1:c9:80:58:88:6a:1e:03:55:4c:75:1b:
25:66:15:00:55:66:fc:85:aa:77:89:ed:65:ac:1b:
03:8e:4f:87:80:de:5d:18:ea:5e:c3:b3:77:46:ce:
83:d4:84:a4:81:1c:30:af:2c:80:a5:04:a7:a6:c3:
b9:39:74:c6:d9:91:cf:02:a0:15:28:70:af:71:e2:
7c:db:46:05:c4:3b:6d:37:00:cf:b1:d6:96:34:c6:
38:a8:9d:7c:04:2c:d8:38:2a:f8:4c:75:0d:31:7c:
59:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:C8:DE:87:C2:C4:BB:9B:4D:02:FB:8C:D3:BD:A0:F6:7A:82:93:7B
X509v3 Authority Key Identifier:
keyid:E2:DA:23:D3:B9:30:D4:C1:F3:AC:73:06:5D:71:A6:07:C3:5D:29:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4toj07kw1MHzrHMGXXGmB8NdKQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:8a:09:48:f2:c7:99:ba:ed:b2:ba:1b:7f:24:7e:a7:2f:c9:
6f:1b:da:3a:82:9e:53:ba:60:f2:ad:36:89:d2:9e:3c:b6:ef:
a1:b0:7e:30:96:db:70:aa:51:48:4e:1f:e1:bf:b5:de:42:a8:
67:bc:dd:05:0e:97:38:19:8c:65:ae:2e:c0:06:60:23:4d:8e:
0c:03:00:50:f0:0f:12:73:e9:ea:49:4a:2a:bf:bd:95:de:61:
44:5a:c5:94:51:40:3b:74:8a:30:ce:17:63:51:80:eb:29:bc:
0c:8e:2d:76:cf:24:39:17:ca:98:61:b4:6b:d0:89:9f:c0:3a:
44:57:fe:b8:8a:fb:9b:3f:0d:5d:f0:96:9e:24:ad:66:84:3e:
ce:6e:43:79:65:d8:6f:e2:cf:7e:a3:2d:5c:a8:f2:b2:a9:ee:
d6:cd:96:47:7a:54:25:7a:7c:42:8d:6a:28:38:9e:f7:e5:53:
0d:a7:9c:59:1a:c7:d8:59:74:c7:04:73:44:b8:e3:3a:e2:5c:
63:02:8d:72:fa:fd:b8:d9:c6:72:0c:f0:db:b1:42:d6:a7:89:
20:a8:b0:0a:13:a8:15:20:37:a1:51:e1:2b:61:42:06:3f:f3:
30:ce:15:49:3b:0c:ec:a2:cd:f6:69:17:2c:00:e5:a0:5a:47:
5b:6b:f5:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:22:17 2025 by rpki-client