Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/slLdonImonXj55s3TI8mPNLY7NE.mft
File: slLdonImonXj55s3TI8mPNLY7NE.mft (raw, json)
Hash identifier: obs2KcXh5qCWWZwORuVFVir/6epMkLkzz1NZ8cGM2D0=
Subject key identifier: 0D:87:1E:06:98:67:E0:04:94:90:20:DD:6C:AD:EF:F3:D1:8C:B4:C5
Authority key identifier: B2:52:DD:A2:72:26:A2:75:E3:E7:9B:37:4C:8F:26:3C:D2:D8:EC:D1
Certificate issuer: /CN=b252dda27226a275e3e79b374c8f263cd2d8ecd1
Certificate serial: 019678312DC43931F4D861347F0F82F6F34B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/slLdonImonXj55s3TI8mPNLY7NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/slLdonImonXj55s3TI8mPNLY7NE.mft
Manifest number: 1513
Signing time: Sun 27 Apr 2025 17:00:10 +0000
Manifest this update: Sun 27 Apr 2025 17:00:10 +0000
Manifest next update: Mon 28 Apr 2025 17:00:10 +0000
Files and hashes: 1: 7QMuMfRcubM7Dw9mRD9Oeleudm0.roa (hash: 34yr97BhHkN5u8FjcTkMX2e6CbJy1pgn7SWZTkyU8GQ=)
2: slLdonImonXj55s3TI8mPNLY7NE.crl (hash: foLhfYMQhEBgK8IxIEAEibrF/Ej1uv3z/7WaBSHnZ6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/slLdonImonXj55s3TI8mPNLY7NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/slLdonImonXj55s3TI8mPNLY7NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/slLdonImonXj55s3TI8mPNLY7NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:31:2d:c4:39:31:f4:d8:61:34:7f:0f:82:f6:f3:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b252dda27226a275e3e79b374c8f263cd2d8ecd1
Validity
Not Before: Apr 27 17:00:10 2025 GMT
Not After : Apr 28 17:00:10 2025 GMT
Subject: CN=0d871e069867e004949020dd6cadeff3d18cb4c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0b:6f:53:2f:f1:0c:7c:be:18:17:e8:33:ee:
c7:07:ca:b7:22:1b:e6:b0:51:db:73:32:5f:73:aa:
50:b3:8e:78:fb:bb:3b:5b:7e:6d:2e:56:6e:14:f6:
7c:77:79:8b:ed:98:9d:dd:22:e8:80:e5:86:db:71:
20:ae:13:b5:b4:dc:2d:8c:f0:d6:ef:d0:0e:06:dc:
ad:dc:8a:49:eb:8b:a8:21:73:37:cd:3f:d8:c7:1b:
c6:1c:8f:ee:1a:3c:96:d1:a4:18:eb:a0:28:8a:ea:
be:e6:b8:25:91:ff:e4:7f:f4:5a:cb:cf:cf:ae:a3:
a2:27:62:59:4d:79:e0:61:4b:5b:a6:c3:25:94:ef:
cd:74:48:2a:aa:e8:22:76:f3:d4:fa:e0:ff:ef:a3:
8b:75:66:71:20:4b:bd:9e:2b:92:a8:c0:e8:bd:4b:
33:f7:19:e2:01:1b:0c:94:0e:f1:af:53:6a:1c:cb:
57:5c:a2:a1:7d:e2:7e:86:82:02:05:0c:6e:a6:d4:
ef:6b:18:84:01:21:b9:a8:ce:e7:f7:78:68:39:86:
28:6e:4f:c5:63:4d:21:15:29:3b:91:d3:45:ac:c4:
bb:de:9e:3f:df:23:12:03:72:90:ac:99:57:05:16:
45:a7:c2:a6:2f:a2:a6:b8:48:58:bf:54:d8:2f:5d:
09:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:87:1E:06:98:67:E0:04:94:90:20:DD:6C:AD:EF:F3:D1:8C:B4:C5
X509v3 Authority Key Identifier:
keyid:B2:52:DD:A2:72:26:A2:75:E3:E7:9B:37:4C:8F:26:3C:D2:D8:EC:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/slLdonImonXj55s3TI8mPNLY7NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/slLdonImonXj55s3TI8mPNLY7NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/slLdonImonXj55s3TI8mPNLY7NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:42:2b:80:72:78:48:fb:a8:1e:89:9d:40:88:49:88:75:96:
f5:d5:1e:54:fd:b1:26:d6:be:28:08:d2:b2:9d:b0:4c:67:a8:
ad:bd:f9:9e:42:d7:dd:5f:ce:90:ea:18:55:ae:c3:c9:43:92:
52:71:19:6e:89:96:9b:2a:09:43:59:62:62:90:45:12:25:76:
27:ef:9f:43:02:c1:72:fc:1c:b5:eb:a8:78:ec:39:ec:5c:54:
fb:03:1f:72:9d:33:25:7e:6d:0a:75:b7:84:f4:49:cd:b2:cd:
e5:f1:19:27:62:b1:1e:fb:86:d7:e6:6c:06:e1:91:60:29:55:
db:e3:48:58:93:56:b7:ab:bd:99:b7:b8:64:57:eb:a7:8a:13:
2a:7d:ae:c4:b4:b8:ea:7a:90:08:1f:e0:6e:e9:7c:02:ee:13:
7a:06:9b:95:fa:fe:24:bd:d6:7b:65:b6:06:b3:f7:61:bd:41:
d4:22:2e:26:87:11:96:68:fb:af:e0:d9:79:df:b5:d9:ef:c0:
2d:e4:4b:75:33:03:e3:24:5b:fa:a4:37:31:ce:36:c5:34:fa:
b5:1e:fd:58:77:76:a5:b9:b6:c0:c3:bc:22:71:6a:8d:8e:80:
19:d2:39:37:07:07:ba:05:a5:33:8a:44:de:9b:8d:3b:f7:18:
01:07:1f:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:17:44 2025 by rpki-client