Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
File: rIpp7LeHzOmJLcZUgEY_sIi2E98.mft (raw, json)
Hash identifier: wH1sc3ZiHo/fIcG2aw5/JwlVtPNvtIeNF/AV4aiPzI0=
Subject key identifier: C1:B6:90:DF:EE:68:FF:E9:9C:29:5E:DD:A0:AE:B8:B3:4E:7A:FF:B7
Authority key identifier: AC:8A:69:EC:B7:87:CC:E9:89:2D:C6:54:80:46:3F:B0:88:B6:13:DF
Certificate issuer: /CN=ac8a69ecb787cce9892dc65480463fb088b613df
Certificate serial: 01967DFC851DABE617B8353A88BB2958B612
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rIpp7LeHzOmJLcZUgEY_sIi2E98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
Manifest number: 1515
Signing time: Mon 28 Apr 2025 20:00:23 +0000
Manifest this update: Mon 28 Apr 2025 20:00:23 +0000
Manifest next update: Tue 29 Apr 2025 20:00:23 +0000
Files and hashes: 1: 697cAJc5ww3rq8-l1VuLwBpxIdc.roa (hash: btaRkUjrugna/WWsgPD4k728P+M+Z1FNlrq9vxtZCME=)
2: DaeyFZIVOpaKJnrrdp8I8XkKfsw.roa (hash: K2abCfRZZHcX+YntqkfA1f/D7lChaJuQZeWDdJ7QE9s=)
3: rIpp7LeHzOmJLcZUgEY_sIi2E98.crl (hash: dMehjr6IosBwEskHMzmgUWgmY+Pvp2JOS/ogpnBwU3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
rsync://rpki.ripe.net/repository/DEFAULT/rIpp7LeHzOmJLcZUgEY_sIi2E98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 20:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:fc:85:1d:ab:e6:17:b8:35:3a:88:bb:29:58:b6:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac8a69ecb787cce9892dc65480463fb088b613df
Validity
Not Before: Apr 28 20:00:23 2025 GMT
Not After : Apr 29 20:00:23 2025 GMT
Subject: CN=c1b690dfee68ffe99c295edda0aeb8b34e7affb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d3:aa:f2:a2:34:b6:83:03:20:f5:b9:0c:9a:
5a:d4:c6:d1:50:df:d3:b9:39:b7:04:d4:d9:e0:3e:
0f:f0:2b:5a:30:7c:3f:52:de:ed:d8:25:e3:d7:94:
ee:e8:a9:8f:64:8e:04:7d:e4:c7:42:07:9c:ed:db:
01:5e:3b:24:ab:e0:32:17:29:ba:63:53:1f:af:bd:
9e:79:0a:8f:29:36:b1:42:1b:fb:cd:5c:ab:5e:7e:
48:3f:e3:58:58:dc:25:0f:4b:e0:e6:de:2c:a4:6c:
b7:17:bd:df:0a:0c:97:c2:ce:b4:b0:49:00:37:8f:
c4:b4:f8:61:19:66:c6:38:7b:9d:a3:f2:9b:a9:95:
dd:e0:59:de:16:77:e8:5a:d2:14:35:47:1b:9e:fb:
04:a8:ce:1b:b9:03:aa:ae:80:4d:56:79:21:dc:62:
59:31:31:e7:c8:f4:a8:1a:d6:1b:98:dc:21:3e:f3:
88:aa:a1:9a:16:31:b3:8b:21:db:8f:62:04:77:5b:
ee:41:cc:7c:14:95:8b:c6:05:04:10:f3:01:0d:5b:
62:11:c5:9b:9a:cb:51:77:4b:92:d8:d3:b9:10:b2:
48:10:70:2a:4b:99:c8:90:52:1a:6d:25:b2:8c:d2:
27:c7:bb:00:22:e2:70:0a:46:e7:bc:ab:1e:70:9a:
7a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:B6:90:DF:EE:68:FF:E9:9C:29:5E:DD:A0:AE:B8:B3:4E:7A:FF:B7
X509v3 Authority Key Identifier:
keyid:AC:8A:69:EC:B7:87:CC:E9:89:2D:C6:54:80:46:3F:B0:88:B6:13:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rIpp7LeHzOmJLcZUgEY_sIi2E98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:92:cc:8d:f4:d4:53:97:52:14:a0:ba:20:46:25:70:82:b4:
27:2a:d1:db:93:73:7a:77:ec:10:f3:be:37:0e:b1:2f:84:5b:
74:24:b1:ca:90:a8:64:00:76:45:99:ae:e3:ab:d1:98:32:39:
47:99:ab:35:fe:3b:0a:2b:af:4c:37:fd:ab:54:c2:bb:0f:0a:
44:9f:f2:a1:d1:f6:2f:43:87:af:09:90:cc:29:dc:45:67:7f:
80:e5:4c:df:d9:7c:fc:fd:2c:b0:cf:fe:07:ee:f8:4d:eb:3b:
c6:9d:48:e7:ad:95:cb:00:c9:94:54:f2:a6:4e:40:95:b1:85:
fa:5c:00:c4:c7:8e:00:90:43:dc:4e:ae:c9:80:21:9e:97:aa:
15:eb:7d:a8:f1:63:14:ab:ae:8b:e9:47:30:a5:26:87:c7:39:
be:38:b2:2a:74:cd:d9:3f:58:4a:26:ca:66:9a:70:f4:32:84:
8e:d5:99:09:b8:44:01:9b:6c:88:44:a2:25:50:c5:55:b6:e7:
6b:9c:2d:91:60:3c:a7:9f:6a:1b:ff:99:39:c2:f7:39:ab:57:
e7:ae:c8:a9:e0:58:68:7c:aa:1c:4a:ce:d9:ec:6d:5b:93:c7:
c2:ae:62:2d:ea:80:c8:be:88:42:5a:bf:7f:42:eb:f5:c3:ad:
dc:df:b1:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 02:29:38 2025 by rpki-client