Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.mft
File: pOeg0vxXpnuyt-hcPo14GSvKDxg.mft (raw, json)
Hash identifier: XR5tEL62OR9miQUXlWfuIJ9TKIVlJlEie0l8FJM8sX4=
Subject key identifier: 7E:53:DC:6E:FA:2E:84:FD:CF:11:A7:D5:10:C5:C7:95:67:92:72:D0
Authority key identifier: A4:E7:A0:D2:FC:57:A6:7B:B2:B7:E8:5C:3E:8D:78:19:2B:CA:0F:18
Certificate issuer: /CN=a4e7a0d2fc57a67bb2b7e85c3e8d78192bca0f18
Certificate serial: 0196748B6DCFABA15E65EC8879D355B05D55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOeg0vxXpnuyt-hcPo14GSvKDxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.mft
Manifest number: 098E
Signing time: Sun 27 Apr 2025 00:00:16 +0000
Manifest this update: Sun 27 Apr 2025 00:00:16 +0000
Manifest next update: Mon 28 Apr 2025 00:00:16 +0000
Files and hashes: 1: AdJqJvlWVSQ_2sjUlxPnhKVvXgE.roa (hash: rvwXexvACQ2KWhkVUmfkFIN6qH1hFBVmtLOZa/tj5cA=)
2: pOeg0vxXpnuyt-hcPo14GSvKDxg.crl (hash: 5u0Xb+Buw0rTUpuUeOfuGBMs+AhqvGPTFvDbZTbIcj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pOeg0vxXpnuyt-hcPo14GSvKDxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8b:6d:cf:ab:a1:5e:65:ec:88:79:d3:55:b0:5d:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4e7a0d2fc57a67bb2b7e85c3e8d78192bca0f18
Validity
Not Before: Apr 27 00:00:16 2025 GMT
Not After : Apr 28 00:00:16 2025 GMT
Subject: CN=7e53dc6efa2e84fdcf11a7d510c5c795679272d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d9:93:84:0f:c2:2f:2c:bf:66:08:de:b8:20:
46:27:d0:00:57:44:23:1c:9e:11:d9:83:97:e6:ca:
32:15:f2:40:11:74:0b:37:16:dc:ee:fd:db:09:7a:
44:7d:eb:cf:aa:54:7b:9b:d0:9e:5a:ec:6b:a3:ff:
43:b6:c1:b2:6f:2c:3d:75:33:53:94:56:fb:bf:a4:
2b:a5:8c:96:05:07:70:df:97:80:ec:5e:32:ef:17:
80:99:3a:ab:e9:ac:a1:0e:b3:dc:5d:13:6e:e2:0d:
8e:9f:8d:51:db:cf:66:b8:07:a2:89:8f:76:c7:35:
be:ca:80:c6:64:c9:0f:ae:76:13:c9:a9:3f:f9:20:
20:7b:70:2a:b6:3e:1c:15:50:c3:b0:db:32:3d:fe:
c5:ab:31:c2:dd:7e:37:05:bb:3c:d2:7c:79:e2:4c:
6e:9f:9f:c5:55:64:ab:18:a1:ff:d0:df:1e:47:2d:
1e:54:d4:75:e4:15:76:64:d3:45:df:98:46:62:a8:
a2:93:11:d5:ab:d2:15:2e:79:a7:1d:90:e0:34:dc:
90:bb:8b:69:09:76:2a:78:43:f5:54:c8:dd:5a:eb:
26:74:b3:d2:5a:b3:6f:8d:f4:c9:cb:bd:aa:c1:ae:
a9:36:41:e1:7f:06:b5:1e:b8:58:1c:cc:04:09:bd:
58:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:53:DC:6E:FA:2E:84:FD:CF:11:A7:D5:10:C5:C7:95:67:92:72:D0
X509v3 Authority Key Identifier:
keyid:A4:E7:A0:D2:FC:57:A6:7B:B2:B7:E8:5C:3E:8D:78:19:2B:CA:0F:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOeg0vxXpnuyt-hcPo14GSvKDxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:15:9f:db:8c:68:eb:05:de:4c:5e:77:34:fb:8b:57:7b:fc:
d1:6b:30:dd:c7:2d:24:4f:ae:63:00:3f:86:9d:2f:a4:72:39:
29:94:74:89:f0:ab:85:50:4e:5c:e1:9c:5c:da:be:c8:a5:af:
56:f1:ae:68:37:ac:dc:25:24:81:81:fa:57:5a:94:95:fd:43:
79:d8:81:31:8a:65:a0:e5:c3:ab:92:e4:ca:c8:5e:a5:e7:16:
9d:84:50:7e:9f:be:85:6c:a0:11:22:ab:00:55:3f:5e:eb:ea:
9b:81:11:f2:46:54:75:b3:77:06:9c:79:d5:f1:d1:4d:4d:d6:
59:b9:0c:a4:d6:72:8b:cb:d9:3b:a7:65:7a:db:14:9e:df:af:
76:86:15:f8:14:5e:ec:b1:8c:d8:2e:66:01:db:56:b8:d9:1c:
f7:98:1b:61:58:3e:0f:9d:74:d4:24:58:ae:fc:38:12:c5:cd:
14:cf:f7:48:c8:51:09:28:2a:07:b6:f3:03:d6:f3:36:52:4c:
af:be:8c:b3:b8:be:1c:05:e0:06:88:c6:7a:08:b3:67:47:53:
3a:de:ba:4c:73:1a:bc:07:30:43:1f:6c:ca:22:3d:65:99:19:
88:ca:4f:8f:1c:72:e0:70:f5:35:13:75:f9:b1:c4:c2:90:c0:
84:33:dd:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:26:23 2025 by rpki-client