Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.mft
File: 4saBbgo6L2FsOqd6NrTK96kiQDQ.mft (raw, json)
Hash identifier: o+eduC8osH0oXNQ2z6EBd3jxjMWJqRZUp1I8HUgijSc=
Subject key identifier: 9E:05:C1:74:02:1D:9F:D4:46:35:6D:D1:7D:78:59:33:14:15:28:F9
Authority key identifier: E2:C6:81:6E:0A:3A:2F:61:6C:3A:A7:7A:36:B4:CA:F7:A9:22:40:34
Certificate issuer: /CN=e2c6816e0a3a2f616c3aa77a36b4caf7a9224034
Certificate serial: 01967869067A7CCF98170D12ABC2DAA3EF59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4saBbgo6L2FsOqd6NrTK96kiQDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.mft
Manifest number: 1510
Signing time: Sun 27 Apr 2025 18:01:10 +0000
Manifest this update: Sun 27 Apr 2025 18:01:10 +0000
Manifest next update: Mon 28 Apr 2025 18:01:10 +0000
Files and hashes: 1: 4saBbgo6L2FsOqd6NrTK96kiQDQ.crl (hash: nzApe/GndYRro5SfRf9sr68g+Dr//xaCxtaFYxeQbQc=)
2: ulLbtOc6Qp1yKXQQUOt_f70BmFE.roa (hash: YXCw2FZd5PginHPRvRNBgQK3YOd2UnylrB+hjikSz1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4saBbgo6L2FsOqd6NrTK96kiQDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:69:06:7a:7c:cf:98:17:0d:12:ab:c2:da:a3:ef:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c6816e0a3a2f616c3aa77a36b4caf7a9224034
Validity
Not Before: Apr 27 18:01:10 2025 GMT
Not After : Apr 28 18:01:10 2025 GMT
Subject: CN=9e05c174021d9fd446356dd17d785933141528f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e5:03:a8:33:bd:a0:3e:d9:8f:72:96:a9:bc:
c2:09:9c:16:c2:37:c4:35:01:c3:80:1e:25:37:47:
ac:f9:29:02:9c:68:da:4f:87:79:24:78:e3:72:63:
bf:98:ec:f3:25:05:76:07:63:4f:8c:83:1d:af:4e:
84:b0:03:78:1e:9c:61:1d:85:e2:4b:b6:c7:f3:31:
5b:0a:c9:8c:a8:b9:56:ed:02:ef:6a:f1:70:dc:12:
70:90:a5:33:86:b8:31:fb:4b:97:34:7b:63:e2:f6:
84:41:38:af:06:24:7c:4a:db:9f:cb:08:99:41:e2:
e7:23:08:20:3f:2d:1c:53:75:06:87:31:e6:da:6a:
7c:a8:7d:12:af:14:b6:c0:63:47:e4:b1:d6:c6:b7:
d4:7f:a7:a0:9c:21:1c:0a:8c:ae:75:24:58:fe:03:
a9:2d:56:29:4b:3a:02:28:fe:69:0f:30:cb:b3:99:
98:fa:97:42:97:a2:7f:45:a9:58:4c:b6:17:07:1c:
75:b7:56:2f:61:22:7b:e9:b5:4a:c2:5e:32:d4:da:
4a:41:e8:5d:f1:2f:cd:af:62:f0:95:28:e2:3d:9a:
10:5c:9e:76:b4:f1:e7:69:41:ee:8b:7a:21:00:2f:
5c:f4:ce:e8:45:d5:b1:ab:e7:60:c1:93:d6:64:ba:
86:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:05:C1:74:02:1D:9F:D4:46:35:6D:D1:7D:78:59:33:14:15:28:F9
X509v3 Authority Key Identifier:
keyid:E2:C6:81:6E:0A:3A:2F:61:6C:3A:A7:7A:36:B4:CA:F7:A9:22:40:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4saBbgo6L2FsOqd6NrTK96kiQDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:6b:7c:57:d2:cb:6b:97:3c:f1:ff:24:43:bb:21:4b:bb:c9:
eb:e2:5e:12:45:09:db:09:78:e2:ed:05:a2:34:b9:a5:b7:de:
c1:56:e9:38:aa:ce:3d:43:29:8d:c9:f0:2c:ad:9b:fd:65:14:
5b:38:67:f4:12:ba:53:da:46:77:2b:b9:16:14:8f:e2:d8:98:
e0:7d:7a:f9:68:78:98:bb:69:d5:d4:f6:14:12:fa:59:79:43:
c4:32:e8:6a:a0:13:23:cd:83:f8:32:f6:f3:d0:e4:49:c5:3e:
45:bb:14:22:55:8b:88:1a:91:be:19:26:3e:a2:bd:86:a0:99:
ad:a4:c8:c1:de:6b:df:c8:1b:fa:77:6b:bb:7f:2d:5c:63:59:
e4:aa:be:7d:6e:8a:7e:bc:ae:05:17:0a:85:9d:26:c4:a0:ec:
c4:8b:41:10:35:a8:4f:8f:f6:92:79:9a:6d:a5:ae:51:26:ae:
7b:67:6d:c7:58:12:b2:74:9c:64:fd:10:a6:11:43:da:3a:bc:
2f:68:4c:bb:f1:5c:53:ad:72:24:ae:7b:7c:e2:45:f2:4e:93:
ed:b7:db:35:f2:d5:ca:10:e0:dd:46:17:43:49:db:d0:b5:79:
57:12:51:66:b2:af:ab:cf:8f:e7:af:ab:8a:06:43:6a:14:2d:
e6:27:23:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:58:11 2025 by rpki-client