Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/51000d-7801-4aeb-8d54-77fb79ebe5b4/1/sLWuDPJ1JiQ7I3b-2QwWDdc4IWA.mft
File: sLWuDPJ1JiQ7I3b-2QwWDdc4IWA.mft (raw, json)
Hash identifier: vTXuq3MMZpUZLFn6vomX3t6NNnuk9rFFB1LHgoFSeWw=
Subject key identifier: 19:AA:AE:E6:17:15:03:94:01:AE:B8:07:90:DA:B7:39:6E:23:A8:B6
Authority key identifier: B0:B5:AE:0C:F2:75:26:24:3B:23:76:FE:D9:0C:16:0D:D7:38:21:60
Certificate issuer: /CN=b0b5ae0cf27526243b2376fed90c160dd7382160
Certificate serial: 01967A8E0DFA8C8E7C51494354C2B64780F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLWuDPJ1JiQ7I3b-2QwWDdc4IWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/51000d-7801-4aeb-8d54-77fb79ebe5b4/1/sLWuDPJ1JiQ7I3b-2QwWDdc4IWA.mft
Manifest number: 0310
Signing time: Mon 28 Apr 2025 04:00:52 +0000
Manifest this update: Mon 28 Apr 2025 04:00:52 +0000
Manifest next update: Tue 29 Apr 2025 04:00:52 +0000
Files and hashes: 1: sLWuDPJ1JiQ7I3b-2QwWDdc4IWA.crl (hash: hfjtv696smEsTuCgAUxSMuJRX8k4reAox/zNzWBG1bI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/51000d-7801-4aeb-8d54-77fb79ebe5b4/1/sLWuDPJ1JiQ7I3b-2QwWDdc4IWA.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/51000d-7801-4aeb-8d54-77fb79ebe5b4/1/sLWuDPJ1JiQ7I3b-2QwWDdc4IWA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sLWuDPJ1JiQ7I3b-2QwWDdc4IWA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:8e:0d:fa:8c:8e:7c:51:49:43:54:c2:b6:47:80:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0b5ae0cf27526243b2376fed90c160dd7382160
Validity
Not Before: Apr 28 04:00:52 2025 GMT
Not After : Apr 29 04:00:52 2025 GMT
Subject: CN=19aaaee61715039401aeb80790dab7396e23a8b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:81:48:ba:2e:d4:93:40:ac:71:1a:ca:1b:ab:
d9:99:d9:43:b6:8a:32:9e:d6:49:37:59:9c:46:c1:
e2:46:4f:d2:51:81:7d:16:be:db:12:e3:a0:1d:9b:
39:33:fe:9f:3a:e1:e8:db:14:b4:2d:1f:22:5d:64:
07:7b:42:3d:66:8d:91:84:6f:40:ae:ce:f6:29:14:
2b:c4:67:17:e2:2a:a2:5c:fe:fd:11:88:bd:35:e9:
f9:03:c3:a6:ff:e7:78:27:f7:30:4b:19:9b:a8:a1:
48:04:3b:ba:bf:cb:23:37:a6:fd:71:5c:b4:96:d3:
93:0a:ca:d3:93:aa:1f:2a:6e:56:83:fe:d0:aa:5f:
59:c3:02:30:21:6d:f9:cd:d3:bd:dc:37:23:6d:e6:
8c:ad:60:69:93:10:8e:ef:b5:87:07:b3:7c:de:cc:
54:72:79:7d:7d:7e:ae:d6:66:47:58:9a:dc:e7:aa:
50:10:61:f2:ba:86:60:d1:61:b7:ae:fe:c1:51:8f:
06:da:a6:1a:48:9c:96:cb:16:32:72:05:2d:07:1f:
c9:9c:75:40:da:6b:3c:bd:c2:7c:45:0d:4b:69:04:
15:a4:56:61:e7:6b:1f:64:a3:50:a6:fb:34:13:87:
65:13:81:e6:bc:3b:c7:77:b3:6d:d8:55:aa:9b:1e:
ae:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:AA:AE:E6:17:15:03:94:01:AE:B8:07:90:DA:B7:39:6E:23:A8:B6
X509v3 Authority Key Identifier:
keyid:B0:B5:AE:0C:F2:75:26:24:3B:23:76:FE:D9:0C:16:0D:D7:38:21:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLWuDPJ1JiQ7I3b-2QwWDdc4IWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/51000d-7801-4aeb-8d54-77fb79ebe5b4/1/sLWuDPJ1JiQ7I3b-2QwWDdc4IWA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/51000d-7801-4aeb-8d54-77fb79ebe5b4/1/sLWuDPJ1JiQ7I3b-2QwWDdc4IWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:2b:44:dd:74:40:89:ec:2c:2e:4d:01:c9:43:b8:4c:37:47:
9e:e5:de:87:e5:2f:36:f1:c2:e7:45:b6:53:64:54:95:96:87:
cc:46:5d:a9:3f:4f:7c:34:31:6d:71:d5:d7:84:28:1f:8f:72:
f2:e5:be:53:e9:14:f8:1d:43:73:f0:a4:d8:a8:74:cc:b8:58:
1a:36:13:ff:91:89:1b:dc:87:22:6f:d8:35:40:97:c2:e4:2e:
c4:1c:52:dd:9a:5d:37:5a:34:f2:32:23:ab:0a:0b:d2:2f:d9:
91:50:7f:36:6c:bf:80:8a:c0:1c:b0:2d:b3:3e:36:f5:21:29:
d2:c5:fa:c9:3c:1f:8e:ea:5f:cb:3b:3d:e4:21:31:b0:67:65:
d1:10:7d:7c:6b:f2:43:a8:8c:d6:53:4f:54:be:86:23:f4:eb:
bd:87:22:91:74:d8:a1:cf:02:95:fa:57:79:6c:7f:16:d5:ed:
0e:37:2a:4d:45:3d:b7:46:89:b0:a0:60:bc:88:c3:09:e9:ee:
c6:0d:d9:42:3f:c9:92:73:15:b3:0b:2c:69:1b:1d:81:2d:ad:
73:45:20:58:42:13:3b:e1:5f:c3:61:5c:ac:52:77:e7:4d:d4:
1e:a9:c4:bf:31:6d:ec:85:ad:35:be:f9:e1:79:d1:24:62:bd:
47:f3:24:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:51:27 2025 by rpki-client