Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft
File: 20GLzzGUMXucKIEZMZb-tZj9nu4.mft (raw, json)
Hash identifier: L9KppUarjDJShWur0fqzhL3lj376fS92A/fg0pqdVXE=
Subject key identifier: 10:37:27:D1:20:1C:21:7A:37:3D:25:9E:3A:C1:9B:7F:56:6E:A1:D8
Authority key identifier: DB:41:8B:CF:31:94:31:7B:9C:28:81:19:31:96:FE:B5:98:FD:9E:EE
Certificate issuer: /CN=db418bcf3194317b9c2881193196feb598fd9eee
Certificate serial: 0196760C4BF2AD52C59A2DEFEE7E727ACA22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/20GLzzGUMXucKIEZMZb-tZj9nu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft
Manifest number: 150E
Signing time: Sun 27 Apr 2025 07:00:39 +0000
Manifest this update: Sun 27 Apr 2025 07:00:39 +0000
Manifest next update: Mon 28 Apr 2025 07:00:39 +0000
Files and hashes: 1: 20GLzzGUMXucKIEZMZb-tZj9nu4.crl (hash: XGZ/tplRmr2U76DLb6WzsuCwthRbfmeSajgcEnNjNbk=)
2: y4Dr14LmLQXVPFrGXXshyx64j84.roa (hash: 1bzHGlABR0e65obFVowAu77APqKznVv88s6eHNbebiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/20GLzzGUMXucKIEZMZb-tZj9nu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:4b:f2:ad:52:c5:9a:2d:ef:ee:7e:72:7a:ca:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db418bcf3194317b9c2881193196feb598fd9eee
Validity
Not Before: Apr 27 07:00:39 2025 GMT
Not After : Apr 28 07:00:39 2025 GMT
Subject: CN=103727d1201c217a373d259e3ac19b7f566ea1d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:26:87:b0:98:e3:22:a1:58:5c:94:5c:9b:64:
e6:b0:b1:36:91:d5:f6:13:a2:a4:e8:c5:26:43:23:
de:00:a5:e9:ea:7f:a0:82:95:ce:40:1a:e2:e1:12:
74:0f:be:b1:c4:03:76:4d:92:0a:23:79:a2:38:40:
85:8d:bf:dc:2b:96:a4:54:d0:4f:04:21:72:41:b7:
ca:33:a3:e7:6a:23:2f:7a:34:41:30:7d:1b:cc:11:
6f:3e:a1:88:30:e5:a1:34:46:6e:f4:9a:a0:bd:7a:
7b:40:4c:c6:bf:20:90:e0:16:85:dd:df:ea:1d:d1:
20:78:0f:06:05:1a:6d:6f:40:06:02:8d:03:45:be:
c6:a5:e2:d0:b7:25:de:74:6d:ee:0c:01:25:86:0c:
04:4c:93:9c:76:09:94:c6:ee:14:e0:e0:2b:08:8e:
8f:9a:be:ff:12:cd:f3:f8:91:df:fa:24:69:ee:c5:
37:80:ac:b3:1c:ab:49:d1:08:d0:8a:3d:49:a7:cf:
f0:87:db:e0:78:91:07:dc:0f:09:9e:be:e1:3b:23:
27:0b:15:ab:61:37:3d:29:58:b9:4d:60:59:0e:bd:
1b:d4:59:6e:ed:77:15:00:7c:28:c6:f4:73:50:d2:
fc:d7:d3:30:7a:35:f8:f0:2e:0e:2d:a7:2d:bf:72:
d1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:37:27:D1:20:1C:21:7A:37:3D:25:9E:3A:C1:9B:7F:56:6E:A1:D8
X509v3 Authority Key Identifier:
keyid:DB:41:8B:CF:31:94:31:7B:9C:28:81:19:31:96:FE:B5:98:FD:9E:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20GLzzGUMXucKIEZMZb-tZj9nu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:e5:89:26:8e:8e:69:15:a5:97:86:75:eb:9d:5e:ba:b8:f8:
40:8e:4c:58:8a:fb:17:55:18:36:a4:2c:ae:ba:28:81:ba:c8:
dd:f3:9f:ba:e6:0e:54:84:6c:21:c2:d0:70:9b:c4:87:01:21:
4b:b2:76:4c:34:6f:03:f5:5c:e4:20:e3:f9:2c:64:e8:57:9b:
4d:f4:3e:95:c2:ee:bc:a6:32:fd:66:23:9a:34:a1:b4:44:c6:
4d:53:99:1f:61:49:66:a4:fc:e6:42:ba:c9:c8:2a:36:32:61:
03:78:4d:ce:d2:6b:7b:4a:6b:1c:ef:94:bb:0b:96:be:41:0e:
94:cd:84:8f:95:0f:ca:0d:bd:5b:de:ba:85:1b:a7:f4:5a:63:
35:61:e7:a8:96:0c:e5:f7:bc:0c:4b:8d:5b:3d:95:92:d1:27:
9f:ef:a9:d6:b0:83:0c:d9:5c:38:1b:ac:12:9e:1c:9c:77:ba:
58:15:36:d6:f9:47:df:a0:84:a1:27:47:9c:fd:7c:d7:ec:e0:
1f:49:cf:ff:86:32:8c:02:4f:37:9d:60:66:f1:14:f6:44:c9:
a5:b9:4d:e9:84:87:76:93:84:ae:9a:b6:ae:fa:08:17:a5:0a:
ee:96:26:fa:09:2d:84:35:55:e3:49:84:e6:14:bb:5f:e7:20:
4b:a2:f5:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:32:31 2025 by rpki-client