Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.mft
File: rSRk7MlG8pLkBPLDUZIuz0xZD9g.mft (raw, json)
Hash identifier: KJg6uvP+Ic8thz5WQcpgXIv9BBQVCRo3Tnuqu097+aA=
Subject key identifier: FD:30:3D:BD:FB:20:65:3B:4F:2C:F3:22:35:0B:01:A2:55:9E:10:94
Authority key identifier: AD:24:64:EC:C9:46:F2:92:E4:04:F2:C3:51:92:2E:CF:4C:59:0F:D8
Certificate issuer: /CN=ad2464ecc946f292e404f2c351922ecf4c590fd8
Certificate serial: 0196789F71325807C050B33506CEA26997A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSRk7MlG8pLkBPLDUZIuz0xZD9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.mft
Manifest number: 06BB
Signing time: Sun 27 Apr 2025 19:00:37 +0000
Manifest this update: Sun 27 Apr 2025 19:00:37 +0000
Manifest next update: Mon 28 Apr 2025 19:00:37 +0000
Files and hashes: 1: rSRk7MlG8pLkBPLDUZIuz0xZD9g.crl (hash: 5EoBQttlm41DEQJTA7RFDIAED/6i+ZriFLdmycSvCIQ=)
2: saC2CSGHzjfoqz_AyeGRfbO_Z4c.roa (hash: evXXOhKr0k/9XMT8MxumeZizzHV0YoG5/EuRYGW5sl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/rSRk7MlG8pLkBPLDUZIuz0xZD9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 19:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:9f:71:32:58:07:c0:50:b3:35:06:ce:a2:69:97:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad2464ecc946f292e404f2c351922ecf4c590fd8
Validity
Not Before: Apr 27 19:00:37 2025 GMT
Not After : Apr 28 19:00:37 2025 GMT
Subject: CN=fd303dbdfb20653b4f2cf322350b01a2559e1094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:39:0c:bc:56:46:7d:1c:18:20:af:df:8f:ee:
f6:ac:7c:18:30:b5:76:41:76:7a:51:1b:73:fa:e5:
42:fa:0b:d8:b5:7d:b5:90:be:ca:a2:38:d0:ed:b6:
7b:13:63:cf:3a:25:7a:51:8c:85:f1:df:1a:90:8e:
e4:74:57:9f:ce:75:af:9a:87:bb:8b:5e:bf:cd:d6:
17:fc:b7:c7:9d:bd:92:25:8b:1f:67:37:a2:9f:73:
b3:c5:d4:31:77:72:ff:af:5e:77:58:a4:fb:b6:cb:
33:9d:9f:9c:e0:1d:ac:2c:fb:90:28:3c:db:5a:b6:
72:f0:9e:28:87:74:af:b6:a9:18:7d:e4:30:35:7e:
89:e4:35:03:31:3a:e8:58:c2:38:8d:f7:49:38:11:
bf:9c:59:e4:45:33:bc:f3:81:b9:ed:ec:eb:a2:86:
07:96:28:2c:49:9e:3e:da:e1:92:b2:96:2b:65:c4:
31:17:c5:d3:c0:37:08:a7:bc:15:69:4c:5b:6b:0e:
f5:1e:cc:9b:8f:62:2f:36:94:02:f6:01:ea:76:24:
b8:c9:2c:51:42:ba:68:53:10:db:06:61:05:43:ee:
33:d6:41:8d:df:b8:cf:b3:b7:3b:74:03:5e:ab:a0:
c3:29:12:50:90:cc:a0:75:79:2d:d6:9a:47:1c:88:
46:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:30:3D:BD:FB:20:65:3B:4F:2C:F3:22:35:0B:01:A2:55:9E:10:94
X509v3 Authority Key Identifier:
keyid:AD:24:64:EC:C9:46:F2:92:E4:04:F2:C3:51:92:2E:CF:4C:59:0F:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSRk7MlG8pLkBPLDUZIuz0xZD9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:92:62:28:65:a1:84:3b:39:5e:b3:5f:0e:85:63:2a:c2:bb:
85:8c:98:b8:ad:29:e9:6a:cc:97:c4:28:2c:b9:14:70:c9:37:
26:2e:91:36:51:c0:f8:00:f9:eb:2f:23:c7:64:59:5e:d6:d3:
bd:b8:b1:95:19:a4:14:69:e0:a6:7c:71:b1:26:a8:03:3e:72:
15:64:47:4a:2b:b6:cd:5f:77:f6:9d:09:aa:66:ac:ce:22:af:
75:9e:e6:a8:ca:24:84:36:47:77:6a:e5:30:e5:14:bb:e7:a6:
5e:e8:59:c6:15:1f:80:5c:40:22:e6:31:86:10:4e:a2:a7:de:
f8:2c:34:67:47:aa:5a:c0:9c:d3:31:fc:03:b3:43:ed:f1:5d:
54:14:a8:b1:5b:ea:f7:bf:1f:91:35:bb:e7:c6:4a:2a:02:c6:
2d:6a:7f:db:99:88:e1:30:d8:16:5a:7a:ce:0b:3f:e6:5b:96:
a3:4f:6e:0b:bc:45:88:1c:dd:b2:e5:4b:3f:ce:65:da:51:e8:
dd:97:3c:a1:cb:ac:a0:27:64:be:55:f8:06:9b:d5:49:85:3b:
41:36:c8:3c:76:9e:a6:ae:ea:1f:36:6f:83:94:4b:66:92:1c:
99:3a:29:3f:76:e9:df:a5:95:95:fe:8b:ab:9f:ed:94:8f:65:
65:ba:77:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 04:29:17 2025 by rpki-client