Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/imAdLqH5SMoBjDNb7actvsB51uY.mft
File: imAdLqH5SMoBjDNb7actvsB51uY.mft (raw, json)
Hash identifier: zoWviv7NRB1dgNJPNARjck6wRy7dh6GNOSiWUTYbIA4=
Subject key identifier: E1:E5:02:E0:EC:1B:4C:E6:87:E7:8A:1B:4E:7B:12:A4:C3:4E:BD:66
Authority key identifier: 8A:60:1D:2E:A1:F9:48:CA:01:8C:33:5B:ED:A7:2D:BE:C0:79:D6:E6
Certificate issuer: /CN=8a601d2ea1f948ca018c335beda72dbec079d6e6
Certificate serial: 0196753065F7BA631F3D27447040F1DBE9E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imAdLqH5SMoBjDNb7actvsB51uY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/imAdLqH5SMoBjDNb7actvsB51uY.mft
Manifest number: 03FA
Signing time: Sun 27 Apr 2025 03:00:28 +0000
Manifest this update: Sun 27 Apr 2025 03:00:28 +0000
Manifest next update: Mon 28 Apr 2025 03:00:28 +0000
Files and hashes: 1: gBpXU6HMs3EdVnZKM3W9dtj0eWk.roa (hash: /5HDlgNXt08tmw8LTatvLunizw0Atkb/+jC9ix7IJ4k=)
2: imAdLqH5SMoBjDNb7actvsB51uY.crl (hash: /M9tYPuDoYCBvNlTUYg7bW0crsDPBTF5VrVtoPYw4Bo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/imAdLqH5SMoBjDNb7actvsB51uY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/imAdLqH5SMoBjDNb7actvsB51uY.mft
rsync://rpki.ripe.net/repository/DEFAULT/imAdLqH5SMoBjDNb7actvsB51uY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:30:65:f7:ba:63:1f:3d:27:44:70:40:f1:db:e9:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a601d2ea1f948ca018c335beda72dbec079d6e6
Validity
Not Before: Apr 27 03:00:28 2025 GMT
Not After : Apr 28 03:00:28 2025 GMT
Subject: CN=e1e502e0ec1b4ce687e78a1b4e7b12a4c34ebd66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:4a:41:46:86:83:c7:ff:42:e5:50:64:70:17:
5e:e2:af:47:e8:aa:fe:0e:14:e0:77:c9:1c:b4:95:
da:92:14:47:cb:63:26:4d:ed:c4:a3:a4:76:cd:f3:
6c:46:be:98:15:d3:c7:d6:7f:34:c9:41:cf:c4:79:
59:ab:b5:41:aa:26:57:40:86:9b:a9:ee:a4:a7:83:
65:11:66:b3:37:e7:98:8c:1a:2c:f0:74:e3:b5:3d:
a1:50:b2:18:64:0e:9a:bf:c8:e5:7d:06:cb:c1:4d:
21:84:c2:16:c4:cf:c0:9c:e3:80:ff:45:82:89:30:
8a:d6:22:6c:d7:0a:b0:a9:6c:1f:19:3d:1d:52:4a:
d6:e0:c2:e2:6c:7b:b2:49:a2:11:8e:53:33:65:ab:
ab:e8:bb:b6:f2:eb:08:5f:da:91:02:ec:38:d5:b2:
9a:6f:ad:ee:0b:32:29:74:fc:97:77:77:21:50:f4:
db:f7:a7:a2:e0:6c:5a:69:73:6a:5a:3f:34:bf:9a:
11:e5:da:d2:f3:84:48:aa:77:04:97:cc:8f:bd:33:
12:d8:8b:3c:d1:8b:3d:d7:3e:02:c4:9f:d6:74:53:
58:7a:36:27:24:af:ea:9e:06:b1:d8:1f:b2:a1:06:
66:0d:23:ed:e9:8f:03:b9:83:84:68:08:3c:ca:08:
da:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:E5:02:E0:EC:1B:4C:E6:87:E7:8A:1B:4E:7B:12:A4:C3:4E:BD:66
X509v3 Authority Key Identifier:
keyid:8A:60:1D:2E:A1:F9:48:CA:01:8C:33:5B:ED:A7:2D:BE:C0:79:D6:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imAdLqH5SMoBjDNb7actvsB51uY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/imAdLqH5SMoBjDNb7actvsB51uY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/imAdLqH5SMoBjDNb7actvsB51uY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:86:1a:22:1b:16:6a:1b:6e:c2:7d:06:cd:3f:67:be:4f:ee:
ea:ed:c2:92:cf:c4:f9:f3:77:88:46:8c:b4:69:4a:cb:7d:b1:
c9:4e:32:c6:b4:cb:76:44:9d:ea:46:c9:fe:c2:b3:bc:5d:4f:
b6:d7:4d:79:f8:0a:4a:5d:f1:74:02:85:7c:eb:7f:f7:21:c3:
7e:c9:db:c6:63:85:8a:ab:7b:7d:5d:93:7a:b0:f0:e4:20:b1:
fb:25:d6:a4:14:bd:75:c4:fa:a2:43:b3:75:b1:f8:97:63:83:
29:21:88:7d:6a:4a:ee:9c:45:c9:83:19:15:29:a4:d1:06:d1:
f9:b8:6f:ac:5f:50:52:fa:86:d4:9f:09:86:b8:f3:4f:0d:b2:
ee:3f:1e:82:20:22:0e:2d:fe:d6:c4:e8:86:ac:55:d4:f8:7c:
f8:00:a2:05:e1:8b:50:3c:e7:96:3e:0b:40:88:22:ca:cb:06:
63:cc:41:bd:a4:9a:ce:3f:92:51:14:77:eb:69:0e:45:d5:a4:
1b:06:7b:9c:99:5b:7c:4d:f8:0a:46:b5:91:7b:ab:95:f2:3c:
91:ad:14:3e:77:79:2a:40:5b:2b:75:de:c7:c5:b6:bb:f1:bb:
b8:3c:52:95:53:f8:a6:6d:0f:35:ab:b5:90:1e:02:af:af:83:
a8:ab:5f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:08:00 2025 by rpki-client