Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.mft
File: CrONq5DGFFDcitZrSF1TbLr54Pk.mft (raw, json)
Hash identifier: 4gYN6SoitpHrlN197AgymoJW7vC9CfsTsF8VM8bbRJ8=
Subject key identifier: 58:C1:9B:C1:38:38:67:A1:78:D3:55:D1:65:AF:D1:8E:01:45:C3:02
Authority key identifier: 0A:B3:8D:AB:90:C6:14:50:DC:8A:D6:6B:48:5D:53:6C:BA:F9:E0:F9
Certificate issuer: /CN=0ab38dab90c61450dc8ad66b485d536cbaf9e0f9
Certificate serial: 019682B4FE6B45661E80574FF8611E6BFC17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CrONq5DGFFDcitZrSF1TbLr54Pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.mft
Manifest number: 1516
Signing time: Tue 29 Apr 2025 18:00:21 +0000
Manifest this update: Tue 29 Apr 2025 18:00:21 +0000
Manifest next update: Wed 30 Apr 2025 18:00:21 +0000
Files and hashes: 1: CrONq5DGFFDcitZrSF1TbLr54Pk.crl (hash: LPVweRcEFLcjROxaaRvd/RIpodYDCk6DjKyHRICclA8=)
2: dsMTPLjfaNvTqQpdbtuvGWvm6Hk.roa (hash: l6/M/n3EBumhBbie3xlIG6P/vZga7KGXHStNkbnqQXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CrONq5DGFFDcitZrSF1TbLr54Pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:b4:fe:6b:45:66:1e:80:57:4f:f8:61:1e:6b:fc:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ab38dab90c61450dc8ad66b485d536cbaf9e0f9
Validity
Not Before: Apr 29 18:00:21 2025 GMT
Not After : Apr 30 18:00:21 2025 GMT
Subject: CN=58c19bc1383867a178d355d165afd18e0145c302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a6:d0:04:ca:4e:a0:32:3a:29:2c:ea:b4:0c:
10:cd:8e:e4:fe:57:63:f1:74:67:4e:47:9a:d2:cc:
6d:6e:6a:18:aa:da:03:7f:27:31:3a:0a:27:0a:66:
00:bb:ff:14:c4:92:ce:70:5a:7d:7d:fe:09:b8:27:
ed:6f:d0:f3:ad:17:3d:71:4e:ee:d1:0c:ae:4e:65:
73:84:36:ec:92:01:ae:3c:e4:b6:85:a1:39:d6:a9:
67:06:ce:7d:ef:47:35:54:d1:9b:3b:fe:35:b9:73:
78:4c:8f:1f:61:ee:51:81:cb:8b:ff:61:22:e8:a2:
72:71:74:77:63:03:e6:e7:c8:04:a0:0b:3b:16:30:
26:3b:fe:04:fd:46:d4:00:17:8a:b3:c5:c2:21:86:
d9:86:63:67:0c:fc:b4:6f:cc:e5:84:63:97:cd:05:
03:95:30:b5:96:3d:0d:25:d3:68:e5:20:ed:ab:91:
90:1b:97:3b:00:84:76:5c:bc:e0:9d:a2:34:58:e6:
f0:7f:31:a5:9e:51:44:21:bf:ad:4b:a7:3d:00:4e:
1e:f9:31:20:0c:dc:b6:20:06:14:9d:29:42:3a:98:
4f:d3:f3:7f:d5:c2:8a:23:3c:48:f5:45:6d:d3:0c:
18:b7:9f:e4:24:e4:94:74:86:6a:f5:0c:1a:b0:3c:
3e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:C1:9B:C1:38:38:67:A1:78:D3:55:D1:65:AF:D1:8E:01:45:C3:02
X509v3 Authority Key Identifier:
keyid:0A:B3:8D:AB:90:C6:14:50:DC:8A:D6:6B:48:5D:53:6C:BA:F9:E0:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CrONq5DGFFDcitZrSF1TbLr54Pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:c5:81:1e:53:9b:32:78:73:bc:2a:74:b7:b5:a6:dd:5a:97:
fd:a8:f0:b4:27:44:aa:2c:29:46:55:b1:e1:48:83:4f:81:7c:
a6:84:0f:85:4c:20:49:55:76:9e:0e:8e:a5:99:43:fb:08:5e:
15:50:3b:0a:59:9d:fb:b9:9b:8a:bb:be:5c:05:f3:98:ff:1b:
9f:13:ab:9c:da:a2:46:3e:2d:6a:fe:ef:aa:8f:45:d6:4a:73:
65:e4:e3:8d:e8:9a:4c:d3:e7:ef:ed:25:5e:e2:74:ed:43:e7:
7a:6c:a4:22:7d:e2:ef:2f:f8:95:16:c4:3a:8d:8c:56:66:76:
0d:78:1d:dd:f6:7b:d6:d5:da:90:a5:20:ad:d9:2b:7a:1b:91:
53:d0:6e:10:74:f3:b3:b1:98:78:c3:bd:27:49:9d:6d:c6:7f:
a8:19:7c:68:c8:3f:a7:6c:01:8c:58:ea:e5:e0:e0:cc:80:a8:
ac:ba:7f:eb:a1:70:e2:50:da:a0:33:07:65:6f:6a:d9:29:97:
7e:6d:82:ec:00:c1:e9:3c:ce:41:4a:5e:a9:b5:5f:af:8f:3a:
3e:19:2b:e8:34:0f:7d:b9:a0:46:2d:75:0e:84:99:1a:aa:7b:
90:33:5d:eb:3e:2d:bd:56:69:32:d3:fe:a4:bf:38:47:6c:42:
82:21:c4:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 21:42:50 2025 by rpki-client