Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/627c4c-f881-484f-b07b-d6df6b795dea/1/B0ATUfw89zNwoeMi4FJ-Vp7wV5c.mft
File: B0ATUfw89zNwoeMi4FJ-Vp7wV5c.mft (raw, json)
Hash identifier: MwarHzADDmHUcupb76yQ9+Ow7PbY7yTn/JFQ1V9BaNA=
Subject key identifier: D2:4A:34:0F:07:CA:8F:89:63:0B:5A:3B:48:CF:6F:2F:F4:44:B4:12
Authority key identifier: 07:40:13:51:FC:3C:F7:33:70:A1:E3:22:E0:52:7E:56:9E:F0:57:97
Certificate issuer: /CN=07401351fc3cf73370a1e322e0527e569ef05797
Certificate serial: 0196767A1DE221F774862D4F8EEA4AA66057
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B0ATUfw89zNwoeMi4FJ-Vp7wV5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/627c4c-f881-484f-b07b-d6df6b795dea/1/B0ATUfw89zNwoeMi4FJ-Vp7wV5c.mft
Manifest number: 04B8
Signing time: Sun 27 Apr 2025 09:00:36 +0000
Manifest this update: Sun 27 Apr 2025 09:00:36 +0000
Manifest next update: Mon 28 Apr 2025 09:00:36 +0000
Files and hashes: 1: 5ze_5LXqTepNW7Je4Ym8zEitXnY.roa (hash: tyryO1Qhdqt2btJPStJg69B7TfysrsFnQZfSGcB4W94=)
2: B0ATUfw89zNwoeMi4FJ-Vp7wV5c.crl (hash: 07rEVr6BeGkron69QYanMz9GOQtdXDkLMe0e3yp+X68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/627c4c-f881-484f-b07b-d6df6b795dea/1/B0ATUfw89zNwoeMi4FJ-Vp7wV5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/627c4c-f881-484f-b07b-d6df6b795dea/1/B0ATUfw89zNwoeMi4FJ-Vp7wV5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/B0ATUfw89zNwoeMi4FJ-Vp7wV5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:1d:e2:21:f7:74:86:2d:4f:8e:ea:4a:a6:60:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07401351fc3cf73370a1e322e0527e569ef05797
Validity
Not Before: Apr 27 09:00:36 2025 GMT
Not After : Apr 28 09:00:36 2025 GMT
Subject: CN=d24a340f07ca8f89630b5a3b48cf6f2ff444b412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a5:3f:bf:28:b4:40:50:7d:cb:1b:03:15:00:
07:a2:9f:b8:5b:e4:cc:ea:c1:3d:cc:7d:7e:03:04:
1c:52:f2:ad:13:26:cc:c0:6b:3b:1b:a1:93:7a:d0:
9d:f1:25:19:3b:a9:45:82:84:a7:38:52:98:af:3d:
9c:2b:64:bb:50:32:5b:f5:bb:f8:d8:6e:aa:df:ef:
4d:ad:03:d9:d1:06:b7:21:f5:c1:d3:5c:68:fa:aa:
34:8f:06:ab:cc:d1:e9:3e:99:66:5d:0c:cc:15:95:
d8:45:cd:5a:39:3e:2e:84:94:77:f1:eb:3d:5c:29:
51:19:b2:91:63:41:1a:2c:29:d3:51:ef:9a:e7:7b:
8e:5c:9c:ae:e4:1e:cc:19:e0:65:3b:5f:67:cc:a4:
54:3d:e5:a8:9b:39:e7:bc:ee:11:d7:99:71:e3:dc:
53:d3:80:db:07:c8:f5:80:59:d0:95:00:17:1c:a4:
78:72:05:f8:5a:e0:4f:15:4a:74:31:d2:2f:c6:2c:
31:e9:00:76:0d:35:a1:96:3f:06:4a:80:18:89:a4:
34:f3:95:38:e4:3e:81:74:f1:31:0f:59:f3:91:f1:
10:74:c3:24:3d:94:41:ac:4d:f0:0b:19:ed:7d:81:
fb:7d:b4:6f:89:34:66:07:09:7c:65:cb:e7:f6:56:
5d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:4A:34:0F:07:CA:8F:89:63:0B:5A:3B:48:CF:6F:2F:F4:44:B4:12
X509v3 Authority Key Identifier:
keyid:07:40:13:51:FC:3C:F7:33:70:A1:E3:22:E0:52:7E:56:9E:F0:57:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B0ATUfw89zNwoeMi4FJ-Vp7wV5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/627c4c-f881-484f-b07b-d6df6b795dea/1/B0ATUfw89zNwoeMi4FJ-Vp7wV5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/627c4c-f881-484f-b07b-d6df6b795dea/1/B0ATUfw89zNwoeMi4FJ-Vp7wV5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:52:d0:30:bf:98:a2:1f:94:de:8c:19:55:77:2b:b7:e8:3a:
4a:08:30:1d:ca:55:1b:e4:99:50:96:79:f0:2d:49:9a:88:6b:
ba:7e:a6:31:da:e0:ac:c1:af:30:0d:31:f9:98:3e:6b:73:cb:
de:2e:1b:67:7e:c9:2a:55:11:3f:59:ea:71:e4:54:f8:f3:d2:
bc:47:27:fa:30:f7:62:52:47:5c:be:bc:d3:34:51:ad:d2:57:
c2:71:fd:34:88:2a:d2:c7:90:0a:d8:3d:31:2f:7e:ca:93:21:
05:69:a9:06:d7:2a:ba:e7:08:db:9c:c0:1a:96:29:24:2b:45:
a4:65:77:01:ba:92:72:88:73:0b:2d:02:ab:35:ea:7e:18:18:
63:07:1e:2e:90:db:8f:2b:50:4f:9f:ea:ae:ec:8b:1e:19:ba:
bd:85:f9:13:83:48:7b:8c:31:95:2b:9b:5c:26:6a:a3:0c:62:
22:80:b3:1c:34:12:45:f1:31:ad:45:f4:4f:36:d5:2e:c9:14:
5b:7f:7c:2a:e9:88:34:9d:b1:26:7f:24:d2:94:40:91:9e:8c:
67:48:d3:a4:aa:f4:e9:64:c3:49:df:02:7d:53:53:40:0a:f5:
97:5b:b9:68:69:62:c8:d7:19:4f:f4:37:ab:f3:59:36:bc:53:
4a:31:e7:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:09:40 2025 by rpki-client