Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.mft
File: StHpGF6qi1xxyJ-r5vvirPfqmCQ.mft (raw, json)
Hash identifier: 2ihbuGq1K3E3J8DMrX8MIyLVIbozHuqCOPNMsoLbb5k=
Subject key identifier: 53:0C:2F:16:A6:03:85:F9:70:C3:58:CC:8C:FB:F5:E5:97:AB:90:A0
Authority key identifier: 4A:D1:E9:18:5E:AA:8B:5C:71:C8:9F:AB:E6:FB:E2:AC:F7:EA:98:24
Certificate issuer: /CN=4ad1e9185eaa8b5c71c89fabe6fbe2acf7ea9824
Certificate serial: 019673AFDCB77C47833649759AD580B38364
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/StHpGF6qi1xxyJ-r5vvirPfqmCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.mft
Manifest number: 150E
Signing time: Sat 26 Apr 2025 20:00:27 +0000
Manifest this update: Sat 26 Apr 2025 20:00:27 +0000
Manifest next update: Sun 27 Apr 2025 20:00:27 +0000
Files and hashes: 1: StHpGF6qi1xxyJ-r5vvirPfqmCQ.crl (hash: FeHzwLL1ovJfVJP3jTSAx4xtB6GbdvuqsXKZzkjZeI8=)
2: aRNIY9aPisPsPJEyhtJc_m061Zk.roa (hash: ah5G0cArNKCIsOUw2/tpkDwad97MIaUDok+u/s4pKjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/StHpGF6qi1xxyJ-r5vvirPfqmCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:af:dc:b7:7c:47:83:36:49:75:9a:d5:80:b3:83:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ad1e9185eaa8b5c71c89fabe6fbe2acf7ea9824
Validity
Not Before: Apr 26 20:00:27 2025 GMT
Not After : Apr 27 20:00:27 2025 GMT
Subject: CN=530c2f16a60385f970c358cc8cfbf5e597ab90a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:34:ae:79:d4:11:3b:f5:96:1b:49:73:0d:da:
8c:48:99:6a:ea:10:2a:dc:ce:0e:05:d1:23:51:a8:
f6:07:f4:93:f0:3b:59:b5:c3:be:19:83:1e:de:d4:
fa:59:17:65:e4:db:91:8d:65:1e:34:e3:3a:d8:10:
cd:8e:f7:5a:5c:c4:33:d6:b6:3f:4d:a5:73:3e:f4:
a6:2c:01:13:ef:de:c6:6b:a9:41:7f:0f:0d:d6:75:
54:c9:bf:f5:a3:79:49:02:98:4d:6a:53:72:fc:9a:
c3:eb:66:a4:bc:c2:e4:c4:48:2b:42:d9:2b:4a:f4:
6b:31:ee:6c:a5:3b:3f:d8:6c:8a:69:cc:14:fb:9b:
76:9e:04:61:c6:3f:ea:02:ee:ac:67:34:77:84:73:
93:29:32:1a:98:2d:0e:02:b9:e8:a0:45:6d:53:fd:
95:51:e0:00:33:54:b3:4b:75:64:ec:45:c0:2f:72:
fa:cd:79:52:11:43:e5:62:de:ee:71:29:e9:6e:23:
7c:a5:36:76:a0:3c:60:ab:96:85:41:1a:2e:1b:03:
05:26:f1:31:71:7a:0e:bb:c6:8d:b9:b2:d2:7f:78:
96:20:75:a7:6c:68:a4:00:f3:8d:5c:95:d8:32:ab:
51:68:2e:94:cc:dd:f1:4e:29:5f:90:b7:8e:16:7e:
07:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:0C:2F:16:A6:03:85:F9:70:C3:58:CC:8C:FB:F5:E5:97:AB:90:A0
X509v3 Authority Key Identifier:
keyid:4A:D1:E9:18:5E:AA:8B:5C:71:C8:9F:AB:E6:FB:E2:AC:F7:EA:98:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/StHpGF6qi1xxyJ-r5vvirPfqmCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:a8:d1:f4:68:9a:4e:a8:82:0b:67:ff:2b:2e:a0:3e:36:8d:
f1:33:25:ec:fa:42:d5:5e:d2:ff:f0:21:d3:e8:6d:c3:c1:4e:
f7:83:00:2b:13:66:2c:b7:2e:4b:c8:98:af:63:11:c8:b4:2c:
af:9d:a3:45:bd:fd:12:23:6e:17:48:76:40:6b:85:6f:a7:fb:
fe:3d:e5:d5:3b:43:6a:5f:1b:7c:ab:da:6d:6e:7a:47:76:5b:
29:0b:19:c0:2b:d5:d1:06:a2:5a:6f:3f:19:bb:7e:fc:46:4a:
2d:1d:46:e7:08:c9:fe:d6:ca:51:6d:f8:75:6d:98:97:72:57:
aa:8e:de:92:80:06:36:de:44:5b:9f:38:74:d3:5c:45:4e:3d:
14:0b:80:20:12:2e:4c:eb:71:58:48:4b:ae:10:54:48:64:a5:
58:7b:4e:63:a2:f0:3e:d1:f0:13:3e:de:41:b0:7c:ea:d3:1f:
db:57:41:9f:bb:76:72:a9:d4:36:31:47:48:64:b6:3f:0b:cb:
37:0d:fd:23:3b:ca:88:47:04:af:61:85:c8:4e:89:80:c5:5c:
05:e8:80:2a:0f:87:a0:63:50:d9:73:63:d0:4b:b9:81:df:13:
e3:47:04:dc:53:73:da:1f:af:f5:05:a9:a3:32:a1:84:82:d9:
d3:b9:45:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:44:40 2025 by rpki-client