Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.mft
File: B47RoBU3Yqki5V4PlIzRpUEceok.mft (raw, json)
Hash identifier: qNTto83z5xPAaxUMc2Z4PA/f+hpmtsNWNWTPF1d+nj4=
Subject key identifier: 2D:38:08:71:E5:89:33:AB:6C:E5:22:1C:6B:1D:3A:08:37:B0:9D:74
Authority key identifier: 07:8E:D1:A0:15:37:62:A9:22:E5:5E:0F:94:8C:D1:A5:41:1C:7A:89
Certificate issuer: /CN=078ed1a0153762a922e55e0f948cd1a5411c7a89
Certificate serial: 01967868D61E92C841839C326672E521BCDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B47RoBU3Yqki5V4PlIzRpUEceok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.mft
Manifest number: 1080
Signing time: Sun 27 Apr 2025 18:00:58 +0000
Manifest this update: Sun 27 Apr 2025 18:00:58 +0000
Manifest next update: Mon 28 Apr 2025 18:00:58 +0000
Files and hashes: 1: B47RoBU3Yqki5V4PlIzRpUEceok.crl (hash: ct/av6L957VzGa/bdZdOUbHIQiVuYnBfWJYoSuRedS4=)
2: c4TFBL4EL5IADMniHZ0GVJJb_4Q.roa (hash: ZOFMhPaK+bFDPt6Ze8LlHlzvSqEu3m14aAhhA1S86RQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.mft
rsync://rpki.ripe.net/repository/DEFAULT/B47RoBU3Yqki5V4PlIzRpUEceok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:68:d6:1e:92:c8:41:83:9c:32:66:72:e5:21:bc:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=078ed1a0153762a922e55e0f948cd1a5411c7a89
Validity
Not Before: Apr 27 18:00:58 2025 GMT
Not After : Apr 28 18:00:58 2025 GMT
Subject: CN=2d380871e58933ab6ce5221c6b1d3a0837b09d74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d0:3f:a5:d5:40:54:d1:8b:55:63:32:c7:b6:
00:8f:de:6b:3d:f9:5a:0e:98:ec:4a:b4:e3:7e:ed:
96:91:ad:09:ab:4f:48:75:57:d7:54:1e:11:5d:51:
0f:f1:e2:21:fb:5e:46:aa:60:3f:39:72:8b:78:2b:
f6:cd:80:de:31:e7:8b:8a:ab:6f:65:ac:50:87:93:
5d:7b:a0:ef:ac:03:71:ba:e1:92:2e:2a:1d:3d:80:
ab:90:db:dc:c6:c8:f1:db:4f:6a:88:b5:ee:c5:94:
3e:28:fd:21:a1:eb:86:c0:ed:17:73:b7:db:c2:4d:
bd:c1:94:a2:2f:a8:86:52:d6:a6:34:dd:14:e0:dd:
28:5e:7e:16:9e:a2:24:ed:46:39:39:1d:9a:83:78:
c1:59:b7:8d:69:a2:53:48:9c:bd:a5:4d:3a:4a:73:
0b:5c:29:77:ce:ad:09:26:3f:70:c2:36:7e:b2:55:
87:4f:cd:5b:ac:ea:af:d7:07:44:93:71:b2:b5:f4:
48:82:a2:9a:cb:5a:fc:95:44:04:3a:6d:d3:87:23:
68:7c:50:cc:75:cc:25:e0:6a:84:8e:4e:d7:bb:e9:
ae:c0:c7:23:5a:ae:b5:1d:a4:e1:e1:78:ac:f2:ea:
83:e8:3f:1f:05:73:c9:36:24:52:ad:3e:29:b3:61:
e9:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:38:08:71:E5:89:33:AB:6C:E5:22:1C:6B:1D:3A:08:37:B0:9D:74
X509v3 Authority Key Identifier:
keyid:07:8E:D1:A0:15:37:62:A9:22:E5:5E:0F:94:8C:D1:A5:41:1C:7A:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B47RoBU3Yqki5V4PlIzRpUEceok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:67:ec:db:e2:51:02:08:52:58:80:99:ea:49:be:18:5e:82:
b7:6e:d9:20:5a:34:87:16:38:dd:b4:97:fc:6c:50:06:a2:68:
10:e6:cd:2a:2a:fe:52:78:12:bd:72:1c:41:02:a9:ac:f1:c7:
3a:1d:59:b4:83:1c:97:a0:60:d0:32:5a:aa:d9:7c:ed:ff:f8:
de:ed:87:f2:7f:55:b2:45:e9:0a:05:42:3f:0a:e4:12:11:64:
d1:7d:22:46:62:5a:62:c1:5d:7b:7e:1b:a5:6f:ef:d0:68:4a:
c2:14:35:c2:3f:fe:a1:80:f0:d9:a0:e1:84:cd:95:36:5a:f5:
fb:93:ed:2f:11:c4:db:79:49:6c:7c:75:7b:3d:2c:b1:4a:20:
09:c6:d3:dc:56:90:2a:07:41:2f:a5:84:ea:06:d8:9d:e3:35:
f0:1f:ee:7a:0f:c7:57:7e:82:a5:1b:69:c5:4b:52:05:ea:9b:
77:db:33:5a:ca:37:cc:b6:f5:88:5d:93:29:f6:5f:65:bd:7d:
fc:19:c7:12:4c:c1:b5:34:9c:2f:b3:c9:6d:99:c2:0f:60:3b:
75:94:64:39:c3:83:6e:70:06:e9:c0:0a:ff:d5:11:1a:5c:4a:
77:b4:9b:f5:b4:1e:8c:a3:0f:fc:49:a8:e0:9c:fe:12:37:f1:
b9:a1:d9:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:37:03 2025 by rpki-client