Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/05126d-4ab7-4f99-a012-2b788312151d/1/sWrUSceuS9Isau5fvcCCMEL_-Pw.mft
File: sWrUSceuS9Isau5fvcCCMEL_-Pw.mft (raw, json)
Hash identifier: oLY0GTz4L4HOybapjMvYp7J2UAzSU70pbN2z8mI/vCo=
Subject key identifier: 21:B5:9F:F9:EA:3B:2E:88:81:4D:2A:A0:0D:84:6B:5B:FB:C7:32:8B
Authority key identifier: B1:6A:D4:49:C7:AE:4B:D2:2C:6A:EE:5F:BD:C0:82:30:42:FF:F8:FC
Certificate issuer: /CN=b16ad449c7ae4bd22c6aee5fbdc0823042fff8fc
Certificate serial: 019679B2141FF28C4725802EF6E76EDA81BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sWrUSceuS9Isau5fvcCCMEL_-Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/05126d-4ab7-4f99-a012-2b788312151d/1/sWrUSceuS9Isau5fvcCCMEL_-Pw.mft
Manifest number: 0890
Signing time: Mon 28 Apr 2025 00:00:35 +0000
Manifest this update: Mon 28 Apr 2025 00:00:35 +0000
Manifest next update: Tue 29 Apr 2025 00:00:35 +0000
Files and hashes: 1: _KRug4UjC_BJD-8BnustHPPdTrM.roa (hash: 9gRSSq2OhYrBQVFH3hvus35c9k0k20JUe3qcgY8xpt0=)
2: sWrUSceuS9Isau5fvcCCMEL_-Pw.crl (hash: dlecRhTjltRi4Ym0K6aiFnsEM5ngFIwAFdePvw7qjbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/05126d-4ab7-4f99-a012-2b788312151d/1/sWrUSceuS9Isau5fvcCCMEL_-Pw.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/05126d-4ab7-4f99-a012-2b788312151d/1/sWrUSceuS9Isau5fvcCCMEL_-Pw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sWrUSceuS9Isau5fvcCCMEL_-Pw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 00:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:b2:14:1f:f2:8c:47:25:80:2e:f6:e7:6e:da:81:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b16ad449c7ae4bd22c6aee5fbdc0823042fff8fc
Validity
Not Before: Apr 28 00:00:35 2025 GMT
Not After : Apr 29 00:00:35 2025 GMT
Subject: CN=21b59ff9ea3b2e88814d2aa00d846b5bfbc7328b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:3a:8b:65:22:c6:c1:17:c6:6f:9c:83:ed:5b:
32:3c:2d:eb:82:88:d6:88:9e:3e:b7:12:ca:3e:72:
98:06:fb:85:6d:78:a5:b2:75:70:73:0e:ae:c7:32:
3f:26:a9:de:a4:4d:6e:e0:d0:9a:6e:44:12:ff:9e:
f7:28:3b:0c:78:21:b9:d7:2d:03:5c:ad:74:2a:4c:
6f:38:03:71:93:04:fd:3e:96:83:cc:f1:6f:af:0e:
41:ef:9a:8b:0f:fc:6f:c4:8e:84:86:ec:4d:f7:13:
fd:88:af:36:88:65:79:0b:8e:5e:57:d0:c4:b9:41:
61:79:b6:8e:d0:ca:d5:a6:f6:a9:0d:6b:06:ad:7a:
63:53:0f:34:58:a9:5c:71:6b:08:bf:62:75:b8:7f:
13:37:12:a6:0e:60:60:df:11:8b:4c:c7:68:71:32:
d2:8a:09:33:ab:09:0f:08:55:64:60:23:9f:65:83:
4b:3b:34:68:a4:3b:c5:ed:e9:e1:31:2d:c2:f7:e7:
60:b0:09:97:56:3e:a8:2b:eb:e3:14:20:49:86:13:
08:22:84:38:7f:82:dc:bf:36:08:bb:8f:92:67:6b:
1b:e8:c9:1b:16:fc:24:70:62:98:27:6c:78:f4:61:
76:9f:08:17:1a:03:8d:39:36:65:81:8b:d6:17:e1:
39:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:B5:9F:F9:EA:3B:2E:88:81:4D:2A:A0:0D:84:6B:5B:FB:C7:32:8B
X509v3 Authority Key Identifier:
keyid:B1:6A:D4:49:C7:AE:4B:D2:2C:6A:EE:5F:BD:C0:82:30:42:FF:F8:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWrUSceuS9Isau5fvcCCMEL_-Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/05126d-4ab7-4f99-a012-2b788312151d/1/sWrUSceuS9Isau5fvcCCMEL_-Pw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/05126d-4ab7-4f99-a012-2b788312151d/1/sWrUSceuS9Isau5fvcCCMEL_-Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:1f:06:d8:6f:91:36:48:00:35:2b:53:6f:d4:03:87:12:39:
8a:3e:92:d6:4b:54:83:92:19:77:21:b1:fe:59:c6:02:c2:a1:
7e:a3:41:a7:8a:b5:69:67:8f:b6:db:8a:d7:9a:49:88:d6:ba:
25:20:aa:7a:ce:c4:a5:25:e5:3a:70:2a:8e:40:4e:12:c4:cc:
e1:47:27:43:8c:fc:21:e9:14:1a:ea:4c:fa:1b:8b:15:9a:f3:
6c:03:9f:78:8d:45:f7:69:af:fe:84:3f:9d:4e:ac:2a:10:a0:
3e:e3:47:19:38:ac:7f:f5:6b:b3:7f:f6:ca:6a:2e:ed:69:84:
07:da:cc:f1:5f:5d:9b:38:c9:83:9b:52:cb:58:c9:63:e7:61:
3d:4f:94:d3:f5:df:a5:fe:9f:46:d6:5c:a6:16:ce:4e:4a:50:
84:82:93:e7:f2:d6:c1:d1:fc:7c:11:f0:57:be:e1:48:38:80:
51:f9:23:a3:14:95:d7:ba:a2:a2:6a:ce:2a:93:fe:a5:ad:5c:
b7:35:e3:57:61:c9:f3:2b:c6:a3:e7:24:2f:8f:31:e1:32:ba:
51:5f:2a:7b:bc:b1:7b:85:c0:d3:bb:68:ce:fc:ad:fd:d1:e2:
81:23:64:d5:fd:05:b6:eb:40:17:ee:62:17:8a:73:ec:ca:a3:
0b:c9:e7:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:31:25 2025 by rpki-client