Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
File: 25r5Hp6xW2dqlvCvZUzAMogVSho.mft (raw, json)
Hash identifier: NK2JE/k4B8n/aBWzoMk7ogUH7nCSutvjO+zlGp0ecAM=
Subject key identifier: 53:71:3C:2A:FB:27:45:E2:9C:75:3B:26:63:62:BC:83:76:45:71:4D
Authority key identifier: DB:9A:F9:1E:9E:B1:5B:67:6A:96:F0:AF:65:4C:C0:32:88:15:4A:1A
Certificate issuer: /CN=db9af91e9eb15b676a96f0af654cc03288154a1a
Certificate serial: 019683C7A8D1AD0512E48530A1594CE525FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25r5Hp6xW2dqlvCvZUzAMogVSho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
Manifest number: 0924
Signing time: Tue 29 Apr 2025 23:00:22 +0000
Manifest this update: Tue 29 Apr 2025 23:00:22 +0000
Manifest next update: Wed 30 Apr 2025 23:00:22 +0000
Files and hashes: 1: 25r5Hp6xW2dqlvCvZUzAMogVSho.crl (hash: ed1dy13o8wj/u6O8y0Oz3+24+8NFuUTGESDW6/CUK10=)
2: TO36gbkW8COMg60JGW_q2Qlywo0.roa (hash: 2OdoAiYhktu2AQ1JAmSAkg5zx91Aj8ZuNYg+AMvWEQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
rsync://rpki.ripe.net/repository/DEFAULT/25r5Hp6xW2dqlvCvZUzAMogVSho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 23:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:c7:a8:d1:ad:05:12:e4:85:30:a1:59:4c:e5:25:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9af91e9eb15b676a96f0af654cc03288154a1a
Validity
Not Before: Apr 29 23:00:22 2025 GMT
Not After : Apr 30 23:00:22 2025 GMT
Subject: CN=53713c2afb2745e29c753b266362bc837645714d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:cd:51:53:e4:01:84:75:12:ac:a8:0d:23:09:
4f:32:83:61:82:86:cd:b6:70:10:78:c7:4f:ae:35:
fa:52:68:2f:f3:43:e9:c0:83:95:63:09:85:b1:53:
fe:25:ac:90:bb:97:6c:f3:15:36:4c:e2:71:b9:66:
e4:22:92:99:6d:62:e3:30:05:bf:11:06:f6:d2:de:
53:45:d7:44:60:bc:45:22:3a:40:96:e2:0f:6b:be:
6a:6d:48:68:12:fc:85:de:33:e5:d3:3b:8b:91:e2:
7e:c1:14:e0:27:5c:ee:89:78:c7:07:12:8c:94:b2:
43:9d:09:fd:52:28:83:bd:f6:86:9b:80:6a:48:a1:
0e:80:c6:75:92:13:e3:70:90:b1:97:a4:32:3a:89:
98:66:a7:ad:02:27:71:3b:8c:f2:f9:e7:56:d8:3a:
a4:ab:d3:f8:3b:51:4e:2b:a9:ff:cf:fe:1c:89:8b:
06:b7:82:31:19:06:49:2a:f5:95:4a:87:fc:54:60:
5c:3c:38:42:e3:60:bb:a4:1b:da:1d:7a:b4:a0:a7:
fa:ca:3e:58:26:08:04:69:33:9e:0f:ff:70:e8:14:
b2:ef:63:8c:8f:0c:4b:27:aa:74:68:5d:dd:32:6c:
fc:28:8e:66:6f:81:f9:f6:ff:2a:17:ab:37:7a:1b:
89:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:71:3C:2A:FB:27:45:E2:9C:75:3B:26:63:62:BC:83:76:45:71:4D
X509v3 Authority Key Identifier:
keyid:DB:9A:F9:1E:9E:B1:5B:67:6A:96:F0:AF:65:4C:C0:32:88:15:4A:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25r5Hp6xW2dqlvCvZUzAMogVSho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:cc:7a:c0:ae:28:7b:e0:76:df:45:79:30:72:64:c6:67:3c:
36:66:f5:10:ca:78:15:aa:12:1f:52:80:9f:86:fe:77:b4:95:
89:73:80:f4:54:f2:3f:6f:99:2a:ec:c6:05:7a:8e:b4:2a:d7:
8b:8c:d2:81:ba:a7:54:bf:e0:1d:8b:f0:8c:b1:d8:94:d4:f7:
c0:e3:b5:21:9e:0c:44:1b:b1:ed:aa:23:c5:62:bd:cc:2a:28:
1d:2e:48:ff:42:8a:b9:08:25:a1:ed:8b:7f:14:dc:2a:f4:1c:
64:7d:e3:4d:5f:15:8b:b2:52:a2:c1:d7:22:2f:61:61:e3:db:
eb:e8:d5:b4:55:a0:82:2e:fc:a2:f2:f2:5d:a4:5a:41:5e:83:
8d:13:fb:b0:71:38:5c:ee:70:99:f9:4e:ec:9b:d9:17:58:87:
e8:66:d9:4a:09:8d:4a:14:6e:a0:74:c5:65:a7:79:41:49:55:
06:8d:ba:a4:4f:bd:7b:95:33:03:ef:35:c4:00:50:39:89:3a:
6e:95:9f:0e:79:56:aa:00:63:45:7c:d8:18:ec:8a:ba:37:a3:
a0:fb:fd:a4:5c:c6:fb:45:6b:90:94:48:c4:31:af:e9:67:bb:
bd:8e:93:13:01:8c:91:c1:41:07:e0:c6:b1:df:b1:d4:cf:82:
9e:5a:a8:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:23:08 2025 by rpki-client