Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/b3d0d7-e10a-486f-885d-41ab7c872fea/1/stCgxoogOf8MpRQCQRUnHIoEZgg.mft
File: stCgxoogOf8MpRQCQRUnHIoEZgg.mft (raw, json)
Hash identifier: CUCRaOWJtNrYjWjXXwBa+SjdSzSUckYrMkZBHnhBURI=
Subject key identifier: EE:74:0C:D5:C0:84:38:22:32:2D:E7:5E:08:88:A2:7B:1B:F1:D2:4A
Authority key identifier: B2:D0:A0:C6:8A:20:39:FF:0C:A5:14:02:41:15:27:1C:8A:04:66:08
Certificate issuer: /CN=b2d0a0c68a2039ff0ca514024115271c8a046608
Certificate serial: 0196759E5B9D42EBB9E8BF0C1B6153BBF1C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/stCgxoogOf8MpRQCQRUnHIoEZgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/b3d0d7-e10a-486f-885d-41ab7c872fea/1/stCgxoogOf8MpRQCQRUnHIoEZgg.mft
Manifest number: 149E
Signing time: Sun 27 Apr 2025 05:00:34 +0000
Manifest this update: Sun 27 Apr 2025 05:00:34 +0000
Manifest next update: Mon 28 Apr 2025 05:00:34 +0000
Files and hashes: 1: 98pSG03PsWjsaovooO14-BTQ9Vo.roa (hash: Nos0vMcOhKzLe90FJjKrPfa+9LXdDpzz5DlngxI3jBk=)
2: stCgxoogOf8MpRQCQRUnHIoEZgg.crl (hash: Od7JSIrkxFbHlZe4skgB7m+E1jOzxva/Z5ReKg7ZhSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/b3d0d7-e10a-486f-885d-41ab7c872fea/1/stCgxoogOf8MpRQCQRUnHIoEZgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/b3d0d7-e10a-486f-885d-41ab7c872fea/1/stCgxoogOf8MpRQCQRUnHIoEZgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/stCgxoogOf8MpRQCQRUnHIoEZgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:5b:9d:42:eb:b9:e8:bf:0c:1b:61:53:bb:f1:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2d0a0c68a2039ff0ca514024115271c8a046608
Validity
Not Before: Apr 27 05:00:34 2025 GMT
Not After : Apr 28 05:00:34 2025 GMT
Subject: CN=ee740cd5c0843822322de75e0888a27b1bf1d24a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:38:8b:ea:20:46:35:89:c8:04:d1:79:e1:00:
1f:66:17:e4:a7:d1:1c:d0:29:ac:56:19:d9:74:83:
9e:25:bc:1a:53:1e:6a:e2:97:24:f5:71:8b:02:aa:
65:b2:ae:3e:08:2c:05:d0:a8:66:96:18:f1:41:e1:
7b:5c:ce:4c:4b:d8:1b:94:19:17:ac:82:9b:0d:f3:
e7:a8:2b:75:ea:15:9b:3f:ac:85:84:72:e4:49:19:
7f:e0:c1:39:ad:3a:fb:07:45:57:24:df:07:78:82:
4f:da:81:03:e2:5f:85:f9:0d:7a:87:dc:dc:ed:17:
89:4f:3a:cf:9f:cf:c8:d4:29:36:47:37:1c:e2:23:
fc:71:7e:37:3e:fb:78:97:7b:fd:66:da:1f:81:75:
e0:b8:35:44:00:72:e6:77:66:55:60:fd:31:1e:46:
19:fe:96:4b:03:0d:77:cf:c4:d5:5e:96:eb:8a:47:
db:41:ef:40:bd:fe:ed:16:af:c0:7f:e6:a7:55:b8:
37:60:d8:26:e8:03:5d:e1:b3:92:f1:bf:08:da:fe:
66:95:0f:74:76:c1:4b:69:69:53:65:4e:b0:f5:c9:
d0:cb:09:3f:02:e6:06:1a:2d:94:a9:f8:5f:6f:ae:
40:0e:29:0e:b1:b9:21:ff:38:4e:ca:33:0f:6a:35:
6e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:74:0C:D5:C0:84:38:22:32:2D:E7:5E:08:88:A2:7B:1B:F1:D2:4A
X509v3 Authority Key Identifier:
keyid:B2:D0:A0:C6:8A:20:39:FF:0C:A5:14:02:41:15:27:1C:8A:04:66:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/stCgxoogOf8MpRQCQRUnHIoEZgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b3d0d7-e10a-486f-885d-41ab7c872fea/1/stCgxoogOf8MpRQCQRUnHIoEZgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b3d0d7-e10a-486f-885d-41ab7c872fea/1/stCgxoogOf8MpRQCQRUnHIoEZgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:de:93:9b:b2:0b:bd:f4:73:bf:ee:48:15:37:27:22:b1:b2:
f4:1f:0d:54:13:59:13:65:20:e9:33:1d:d5:3c:af:de:bd:e7:
28:0a:fd:18:b3:37:0d:d7:65:b8:9b:74:e5:14:a2:1d:7d:94:
84:df:7b:e7:d1:09:be:b5:56:50:ed:c8:23:fc:76:49:83:a4:
ef:2c:5d:d5:ce:d0:e5:7d:5a:9b:d8:f9:22:25:8a:5b:cd:bd:
a0:42:bf:be:ac:3f:00:26:57:49:cd:3f:93:be:9b:bb:73:9d:
36:46:69:4c:2c:fe:e1:10:75:7c:46:e8:ab:a2:00:06:fe:d4:
d1:9a:7e:8f:2e:67:87:06:e9:76:d6:ad:21:5c:ca:15:a4:09:
c3:ec:86:30:1a:27:2f:47:98:30:2b:d6:f6:05:43:36:87:18:
91:c9:ef:a7:99:22:8f:36:64:50:a3:4e:8d:06:b1:48:ec:c0:
67:4e:60:86:4f:d9:67:62:42:34:e2:d7:5a:5d:8f:0a:ca:09:
6c:3d:08:d0:a0:d4:cd:d4:05:3f:de:7a:37:35:c9:51:48:32:
fe:55:87:cd:ba:30:37:7f:56:6e:8e:f3:95:35:e7:11:83:eb:
a6:7c:c4:9f:9c:f0:ff:a7:55:f9:14:b7:a0:c8:fc:df:21:9a:
4c:84:21:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:20:25 2025 by rpki-client