Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.mft
File: 0l8s0anw2kNfLjs-5w5k_a9LYSE.mft (raw, json)
Hash identifier: aCvB6JDqXGEJXJc6eEttGgMYbALwaXij2gAx/fuPiRY=
Subject key identifier: CA:21:3F:7C:44:EE:75:1E:B8:D0:14:46:1D:11:FE:11:68:82:D9:39
Authority key identifier: D2:5F:2C:D1:A9:F0:DA:43:5F:2E:3B:3E:E7:0E:64:FD:AF:4B:61:21
Certificate issuer: /CN=d25f2cd1a9f0da435f2e3b3ee70e64fdaf4b6121
Certificate serial: 0196767A7CB75DEB77F22637E41962CB5B7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0l8s0anw2kNfLjs-5w5k_a9LYSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.mft
Manifest number: 1511
Signing time: Sun 27 Apr 2025 09:01:00 +0000
Manifest this update: Sun 27 Apr 2025 09:01:00 +0000
Manifest next update: Mon 28 Apr 2025 09:01:00 +0000
Files and hashes: 1: 0l8s0anw2kNfLjs-5w5k_a9LYSE.crl (hash: mv4hSs0qf5RpG4Pl5LbQon/GeUiFyDLTxheo4ivF7tg=)
2: PUu9JBqT0q_kMegzLpokDy8FZpg.roa (hash: GZSimUwCl58YJS+NoDvHAGPvWk0bb2fLNY1EJxjHl3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0l8s0anw2kNfLjs-5w5k_a9LYSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:7c:b7:5d:eb:77:f2:26:37:e4:19:62:cb:5b:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d25f2cd1a9f0da435f2e3b3ee70e64fdaf4b6121
Validity
Not Before: Apr 27 09:01:00 2025 GMT
Not After : Apr 28 09:01:00 2025 GMT
Subject: CN=ca213f7c44ee751eb8d014461d11fe116882d939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2e:1a:3d:57:8c:19:cb:85:32:2f:a0:f7:a5:
29:a6:ef:d5:a4:e6:c1:d6:56:69:4f:2d:cc:0d:fa:
79:b9:bf:bf:54:45:e0:60:41:42:23:90:f2:bd:4b:
61:e7:ae:27:56:5d:a7:3d:6b:f1:42:c6:29:80:25:
14:18:ff:35:72:c4:0f:bc:a0:ab:b2:42:41:dc:3c:
59:46:ae:2e:b3:f0:41:f6:fc:3b:b5:e0:9f:5c:e9:
27:4d:54:b0:86:81:2a:a1:84:dd:ba:a7:9d:2a:ea:
92:7f:62:1a:fb:f5:ae:c4:37:a5:16:37:31:8e:e4:
0c:50:e0:64:a6:54:e6:c5:f7:fe:48:58:24:b8:d3:
54:8b:cd:3d:c4:d8:d0:ca:73:de:d2:2b:cb:e4:41:
11:2f:0c:a7:0e:ff:e7:f7:5d:e0:96:af:e0:c5:2c:
58:d4:30:3c:55:88:63:3a:32:08:6e:a1:ed:04:4c:
79:89:d2:a8:a1:21:c1:cb:a0:c1:1e:47:f2:2e:ee:
47:9f:09:e7:50:15:73:38:38:ef:3d:d1:e9:1e:3d:
45:30:2e:8a:eb:e7:1f:cf:e2:c0:96:e6:49:f9:51:
82:18:fa:ee:d5:c9:f2:b8:77:c0:1c:a7:ba:02:6c:
9a:cb:87:ac:e5:eb:a4:85:2e:e8:97:49:36:35:f1:
92:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:21:3F:7C:44:EE:75:1E:B8:D0:14:46:1D:11:FE:11:68:82:D9:39
X509v3 Authority Key Identifier:
keyid:D2:5F:2C:D1:A9:F0:DA:43:5F:2E:3B:3E:E7:0E:64:FD:AF:4B:61:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0l8s0anw2kNfLjs-5w5k_a9LYSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:c9:6c:08:b1:62:2f:ee:1b:01:18:30:7a:5f:04:a4:b0:61:
24:1d:06:7b:70:6c:cf:74:f0:86:a3:96:03:7f:48:f5:9e:2b:
81:df:87:26:b1:df:cd:7b:14:5d:8b:35:6a:9b:07:21:27:2b:
a5:7a:7e:50:2e:b5:a4:0d:97:1b:06:c2:e7:2a:a6:1e:70:c4:
b2:82:a1:c3:8d:7f:e2:bd:d9:21:b4:82:7f:e4:e9:3f:17:ad:
5b:e0:2a:ea:ab:89:9f:d4:e7:98:77:f5:ce:5c:23:93:2b:54:
ef:37:d0:7c:65:3e:ee:49:2c:e2:83:04:5e:3f:8e:55:49:56:
5c:e2:70:48:e9:48:21:bc:bc:e9:08:bf:4e:7c:b6:92:1a:eb:
c6:dc:57:87:0f:1b:23:50:ae:4b:03:79:f8:f7:35:d0:c9:d4:
31:97:f4:05:ac:28:e3:a2:1a:2b:18:20:19:da:19:fc:f8:12:
cc:1c:6d:ac:4b:2b:29:30:9e:f1:18:f5:52:bd:72:32:56:9c:
7f:f7:53:af:cc:39:a0:1b:15:2e:a3:51:2d:97:4d:1b:23:20:
29:7b:bc:7d:67:e8:91:ad:e8:b2:17:2f:62:12:72:11:72:f3:
b8:3c:ae:13:fa:48:2b:29:9a:17:ed:90:22:ad:a3:94:da:25:
60:33:fb:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:05:47 2025 by rpki-client