Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/084d33-9fed-4620-b46c-88a63148026f/1/_l28QbEed7xEvSxzVVS1tCWNDDM.mft
File: _l28QbEed7xEvSxzVVS1tCWNDDM.mft (raw, json)
Hash identifier: jB9fmH9/gFpNiKT5Q0QbzgSILjEO6aCxtgxC9VFaDqc=
Subject key identifier: 84:0B:C9:04:85:9F:B2:2E:62:F0:A2:65:2F:2B:CB:83:41:15:31:3E
Authority key identifier: FE:5D:BC:41:B1:1E:77:BC:44:BD:2C:73:55:54:B5:B4:25:8D:0C:33
Certificate issuer: /CN=fe5dbc41b11e77bc44bd2c735554b5b4258d0c33
Certificate serial: 019678316EEF5675CB17C68D7C5EF1357ED4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_l28QbEed7xEvSxzVVS1tCWNDDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/084d33-9fed-4620-b46c-88a63148026f/1/_l28QbEed7xEvSxzVVS1tCWNDDM.mft
Manifest number: 1511
Signing time: Sun 27 Apr 2025 17:00:27 +0000
Manifest this update: Sun 27 Apr 2025 17:00:27 +0000
Manifest next update: Mon 28 Apr 2025 17:00:27 +0000
Files and hashes: 1: QQYnKZZEKh0t39rLRqceu8xA4vU.roa (hash: PxxqnNy49Cu4ltRHNTmmrI+SwKZQqPOvx1a9kq3y6xs=)
2: _l28QbEed7xEvSxzVVS1tCWNDDM.crl (hash: a22LEzThXtMz93sBGyxOc95blitaJRecn7bacsYAiHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/084d33-9fed-4620-b46c-88a63148026f/1/_l28QbEed7xEvSxzVVS1tCWNDDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/084d33-9fed-4620-b46c-88a63148026f/1/_l28QbEed7xEvSxzVVS1tCWNDDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_l28QbEed7xEvSxzVVS1tCWNDDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:31:6e:ef:56:75:cb:17:c6:8d:7c:5e:f1:35:7e:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe5dbc41b11e77bc44bd2c735554b5b4258d0c33
Validity
Not Before: Apr 27 17:00:27 2025 GMT
Not After : Apr 28 17:00:27 2025 GMT
Subject: CN=840bc904859fb22e62f0a2652f2bcb834115313e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:6e:de:1c:ec:0c:ec:fa:83:06:e8:40:9f:83:
e5:b9:dc:c1:a2:66:64:cf:58:75:e5:99:db:93:c7:
3e:31:ae:e2:5c:88:d4:b5:d8:e8:01:80:e3:41:5c:
3d:64:64:b6:be:39:a7:ca:85:81:cf:a1:d5:f5:c7:
1e:4d:dc:c4:1d:07:7d:a2:38:5d:c3:ee:d5:f7:b9:
1d:df:59:0a:76:a9:7b:b8:67:71:37:6f:10:7e:27:
55:6a:3b:24:2b:5a:ed:bb:78:80:e2:c0:04:cc:91:
98:7b:84:3a:57:5a:8b:7d:b4:06:0d:c1:56:82:6c:
d5:63:d5:05:c9:0c:ca:be:48:ab:c1:83:f9:c3:ac:
b8:ca:cc:90:04:25:39:50:cc:c8:26:42:b0:f8:d4:
8d:48:f0:cb:b2:ed:4e:2f:d9:52:95:60:1e:54:32:
b0:47:e7:71:1d:1f:f0:87:91:66:1e:ef:db:ab:34:
fe:15:b4:4e:6b:83:74:0c:37:a8:7b:0a:ec:5f:f9:
15:b9:76:b7:cc:d6:20:59:c0:b4:d8:e7:1a:e0:8c:
c2:38:d8:05:8a:26:59:f7:77:74:78:da:f7:f0:43:
ea:f7:4c:cd:b1:33:9a:52:d6:8c:d4:a7:1f:0b:46:
af:87:23:75:94:28:79:4c:8c:40:3d:84:b2:73:a9:
c3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:0B:C9:04:85:9F:B2:2E:62:F0:A2:65:2F:2B:CB:83:41:15:31:3E
X509v3 Authority Key Identifier:
keyid:FE:5D:BC:41:B1:1E:77:BC:44:BD:2C:73:55:54:B5:B4:25:8D:0C:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_l28QbEed7xEvSxzVVS1tCWNDDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/084d33-9fed-4620-b46c-88a63148026f/1/_l28QbEed7xEvSxzVVS1tCWNDDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/084d33-9fed-4620-b46c-88a63148026f/1/_l28QbEed7xEvSxzVVS1tCWNDDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:44:89:13:db:a2:f5:3a:6b:64:5b:8c:8f:88:ec:f7:b1:c3:
6b:c1:37:35:3a:6d:64:32:d5:49:c7:db:68:5f:7b:a1:99:1d:
bf:7a:cf:a9:22:14:cd:3b:9a:26:67:97:20:6b:b5:42:0d:d3:
6d:bf:8d:ba:9b:b7:7a:d6:fc:85:47:85:5e:79:e0:97:00:3e:
6d:2a:69:db:85:a8:3b:af:23:ca:42:3d:50:c5:5f:6a:b0:76:
91:7f:c6:d2:69:cf:21:e8:30:d2:cd:fb:83:2e:b9:bf:ee:b3:
a2:92:13:d1:e4:2f:7e:53:33:0f:33:53:21:86:c5:0e:92:09:
dd:da:ec:5e:48:c4:99:99:07:93:87:b7:c9:05:48:76:35:c3:
12:10:8c:26:ce:9b:8d:39:ab:94:a0:c4:b2:12:a0:2f:d0:32:
6c:27:e9:0c:34:4f:0f:e3:47:9c:bf:3f:29:9d:30:1c:10:a0:
42:5b:73:fc:09:ea:24:f8:cf:17:56:41:b6:ba:6a:06:7e:98:
9f:b4:9f:14:73:7c:17:2c:f1:27:49:89:14:32:cd:a2:e2:bd:
22:25:6f:92:b7:12:79:d2:90:e5:21:76:8d:05:4b:c0:02:89:
27:f1:f6:db:a0:8e:d2:f2:7c:f1:32:85:f9:51:19:72:c2:ef:
13:69:70:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:14:11 2025 by rpki-client