Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft
File: t2AdfMgg3HGRXqkwZz70fyQaccg.mft (raw, json)
Hash identifier: zZB4bv9rURj9OdeX1DQGOKtOsWzwXM0nbFodZlEAD5g=
Subject key identifier: BF:95:08:97:7C:CB:21:8B:9E:E5:56:D5:0C:FF:DC:BA:15:71:7C:83
Authority key identifier: B7:60:1D:7C:C8:20:DC:71:91:5E:A9:30:67:3E:F4:7F:24:1A:71:C8
Certificate issuer: /CN=b7601d7cc820dc71915ea930673ef47f241a71c8
Certificate serial: 019685ED8571AA2B7CE2BF164A7DE236FE23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2AdfMgg3HGRXqkwZz70fyQaccg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft
Manifest number: 1519
Signing time: Wed 30 Apr 2025 09:00:57 +0000
Manifest this update: Wed 30 Apr 2025 09:00:57 +0000
Manifest next update: Thu 01 May 2025 09:00:57 +0000
Files and hashes: 1: ZNMzjjkFFCJrxYZiC5T2F1nqQDU.roa (hash: rGbLswIcyxa+1jkQx4Wrs/b9SYRw1Mpy8w7MsaUIH3o=)
2: ohEC152Hca1Ntq7nlqBdCdwaSRY.roa (hash: 6I66H5Yi7FovibHLFZRxrabwWnIKD8LHhYRvvFOUxww=)
3: t2AdfMgg3HGRXqkwZz70fyQaccg.crl (hash: s9lR6mmYvE9p0gG1BmFIDF5hZHKysTnYYvScH2kIgss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft
rsync://rpki.ripe.net/repository/DEFAULT/t2AdfMgg3HGRXqkwZz70fyQaccg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:ed:85:71:aa:2b:7c:e2:bf:16:4a:7d:e2:36:fe:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7601d7cc820dc71915ea930673ef47f241a71c8
Validity
Not Before: Apr 30 09:00:57 2025 GMT
Not After : May 1 09:00:57 2025 GMT
Subject: CN=bf9508977ccb218b9ee556d50cffdcba15717c83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:25:45:5b:a1:b1:ba:5f:43:fe:ad:6c:30:46:
3a:99:5b:1a:c5:5d:2b:b0:5f:d7:72:ee:2d:2f:3c:
b0:aa:96:8d:b0:ae:2a:10:3d:67:d1:be:55:ca:66:
cb:ea:8a:12:4e:92:e4:69:a3:8e:b1:09:f8:a2:a7:
82:b6:94:d4:7f:7b:20:c0:9b:21:01:0c:6b:24:84:
f5:8b:40:23:c2:4a:b8:2f:f4:1f:d3:7d:28:57:76:
5a:15:20:bf:e4:95:a1:4b:15:d0:f6:ab:c0:d8:1d:
59:a6:2c:94:2b:c5:5c:4d:ba:45:d8:9f:6b:a3:47:
60:67:bc:e6:5b:4d:ea:6c:cb:ef:55:c5:cd:cd:89:
ab:f8:1c:75:2a:52:4b:bc:da:d9:aa:1a:1b:da:42:
90:12:5f:59:10:2a:5e:3f:b3:3c:7c:28:a7:a7:32:
16:8d:bc:c7:b1:82:c7:8c:19:e7:c1:7d:60:96:a4:
3c:0a:ec:6e:d3:db:b6:7f:f4:6a:14:d9:2e:80:90:
7a:67:cb:32:8e:0b:f1:5e:38:31:f2:ac:94:17:4b:
ad:39:b2:90:82:f0:f9:ff:98:23:56:fc:a8:0e:4a:
02:c5:5f:f7:fb:5c:83:00:08:1e:a3:fc:3a:0d:14:
2c:9d:cb:9c:a2:a0:65:b8:7b:9e:6b:1e:44:da:f3:
d2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:95:08:97:7C:CB:21:8B:9E:E5:56:D5:0C:FF:DC:BA:15:71:7C:83
X509v3 Authority Key Identifier:
keyid:B7:60:1D:7C:C8:20:DC:71:91:5E:A9:30:67:3E:F4:7F:24:1A:71:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2AdfMgg3HGRXqkwZz70fyQaccg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:b8:43:58:14:54:64:43:43:2a:2f:30:d6:2d:59:16:a8:3b:
45:47:45:ce:29:a7:76:81:27:2f:6a:12:b7:a0:5c:41:83:63:
2f:cf:e2:1c:f0:cd:8f:40:cd:98:b7:a9:a7:03:03:b5:54:20:
0e:1a:1e:77:49:fe:1b:40:61:c1:e7:f6:d0:6e:14:be:5f:d9:
39:bf:69:58:ce:b8:5b:cf:bd:44:92:5b:fa:af:23:3c:db:91:
59:44:d8:1e:69:07:91:15:61:d9:b0:8b:a5:58:81:0b:2a:e7:
d7:d0:a2:d9:39:d1:56:a6:97:42:5c:d0:03:ff:68:db:2c:5b:
23:b5:69:7e:71:53:71:ed:24:76:f9:80:57:f7:d7:80:80:d2:
69:ae:b3:fd:42:cb:65:16:5a:d5:ea:7c:d0:28:bf:4c:3c:d0:
74:08:3b:81:16:ad:19:34:76:56:d6:70:c8:b2:91:49:58:9f:
2f:e6:27:fb:cc:4d:10:3d:b9:7d:0c:94:80:77:4d:05:3d:97:
5b:ca:8a:67:c3:f5:86:c9:4a:f9:a7:ae:84:08:8d:23:e1:ea:
cb:9c:e4:24:4e:77:da:ca:de:cf:52:a5:c0:b2:6f:4b:1f:de:
d7:b7:c0:5c:69:c5:16:25:fc:15:7a:be:92:3a:3f:73:90:02:
2e:2d:ad:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 14:18:01 2025 by rpki-client