Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft
File: sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft (raw, json)
Hash identifier: +0xRP1Lp1KEkMSoFT+aJOr2DJjca28435+gJwy2OdHo=
Subject key identifier: BC:63:7A:9D:95:D3:24:B2:CD:A4:C8:5B:2F:A5:8A:6C:E1:68:3E:00
Authority key identifier: B0:BE:ED:6E:DE:9E:B2:85:BD:2A:6A:BB:98:5A:DC:DB:E8:F2:77:9A
Certificate issuer: /CN=b0beed6ede9eb285bd2a6abb985adcdbe8f2779a
Certificate serial: 01968A00994A8777B9E1DCD2732F1C1D4CDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sL7tbt6esoW9Kmq7mFrc2-jyd5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft
Manifest number: 1518
Signing time: Thu 01 May 2025 04:00:17 +0000
Manifest this update: Thu 01 May 2025 04:00:17 +0000
Manifest next update: Fri 02 May 2025 04:00:17 +0000
Files and hashes: 1: 5q_QBExX-iJkMtzTZ_fdW28i38Y.roa (hash: o+vnb00qVUwzoLHaYfEzcLDShc1yhr65w9Ny1ipEj7o=)
2: sL7tbt6esoW9Kmq7mFrc2-jyd5o.crl (hash: Af2dMBgYZJPVNmRSO8ZkfD83bCouCw5Qsorjfmu7Vgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/sL7tbt6esoW9Kmq7mFrc2-jyd5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:00:99:4a:87:77:b9:e1:dc:d2:73:2f:1c:1d:4c:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0beed6ede9eb285bd2a6abb985adcdbe8f2779a
Validity
Not Before: May 1 04:00:17 2025 GMT
Not After : May 2 04:00:17 2025 GMT
Subject: CN=bc637a9d95d324b2cda4c85b2fa58a6ce1683e00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3a:e7:87:52:f6:ba:f3:d5:13:32:28:0b:ca:
5f:7a:b3:36:da:13:31:c8:41:70:e7:79:dc:aa:5d:
15:2f:4f:45:11:fd:eb:db:27:10:28:67:06:c0:8b:
2a:0e:96:3c:94:2b:8f:02:99:a6:bc:90:69:31:66:
d7:ce:08:57:1e:1d:97:9e:86:7b:bd:d5:14:24:94:
88:37:92:dc:c1:c1:62:86:7f:4a:2e:b4:6f:cb:29:
62:89:71:62:40:55:ae:84:aa:8a:ec:2e:4b:fb:68:
2a:9d:30:61:6f:d4:3c:5b:59:54:ce:64:28:e6:4c:
ca:85:64:92:da:ee:12:57:03:77:ef:0e:d8:ca:7f:
28:ca:d3:5b:f0:e3:9a:df:48:26:7d:94:9a:f9:10:
ab:a3:a3:e7:2e:d8:cb:20:b6:30:c0:51:c1:27:6b:
87:f5:74:d1:48:e7:e3:28:f3:14:1e:c5:ef:55:aa:
d3:b8:2d:da:4b:8b:53:6b:75:78:53:3d:7c:fc:0f:
b3:1c:34:db:a7:01:51:97:c6:60:65:5f:27:09:7f:
eb:43:73:51:78:43:ed:97:ad:2f:2f:c4:af:5a:00:
73:f1:d4:17:1f:bd:46:44:ff:55:32:d5:4b:e6:d8:
11:5b:86:99:c3:54:4a:2b:5f:1d:9a:10:1c:da:fa:
f9:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:63:7A:9D:95:D3:24:B2:CD:A4:C8:5B:2F:A5:8A:6C:E1:68:3E:00
X509v3 Authority Key Identifier:
keyid:B0:BE:ED:6E:DE:9E:B2:85:BD:2A:6A:BB:98:5A:DC:DB:E8:F2:77:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL7tbt6esoW9Kmq7mFrc2-jyd5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:83:d7:39:82:cf:96:1b:12:f1:5a:10:8d:d5:9c:3f:79:64:
85:3a:0c:da:31:30:ce:e2:92:44:2f:b5:bb:c7:4b:55:50:b4:
aa:f8:2f:a1:9f:90:7d:76:c2:6b:01:37:50:ac:8f:40:c4:4b:
0e:0e:d5:5b:0d:53:bf:06:18:84:df:f0:ce:dd:10:b9:35:6f:
f5:50:4c:bb:a7:f6:53:d0:7d:3a:26:ec:4e:7f:14:59:5d:0d:
ff:55:6b:4f:6c:a6:16:5a:2c:1a:5f:48:da:99:0e:de:7a:f3:
38:8c:ce:17:54:28:b8:0b:94:5a:f1:94:22:73:b0:af:b4:f6:
ac:be:85:80:65:25:c9:f0:51:7d:84:8f:f3:e5:4c:e8:41:1c:
a9:d1:1e:9c:d5:de:6d:0f:d7:4e:b2:b7:57:06:57:9a:35:78:
76:38:c4:c2:26:02:65:96:65:03:7b:f8:80:47:98:4f:84:fe:
e5:ea:a7:5f:70:5d:44:97:f5:c4:d9:53:08:f8:ff:55:7e:cd:
ea:fe:b4:52:b2:2f:ae:9f:14:00:a0:1c:4b:72:da:8c:ef:cd:
04:60:b2:12:9e:c3:7d:cb:ea:59:74:eb:f3:73:be:96:16:78:
63:f7:3f:59:99:06:35:14:34:a2:85:8e:a4:91:c7:a9:84:e2:
64:b6:59:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:32:18 2025 by rpki-client