Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
File: A15Shd7cNatjUnBIs2buVTgGzgQ.mft (raw, json)
Hash identifier: T9th+yEZJ70QSePDvAThmGNvplk9OICqUG4oeQFraVw=
Subject key identifier: 8B:E0:A4:F9:7F:39:41:E6:3C:B6:B8:FD:14:FE:2A:98:B4:DC:EB:E9
Authority key identifier: 03:5E:52:85:DE:DC:35:AB:63:52:70:48:B3:66:EE:55:38:06:CE:04
Certificate issuer: /CN=035e5285dedc35ab63527048b366ee553806ce04
Certificate serial: 01967679BE8F11F32910559F2BC09F82A4B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A15Shd7cNatjUnBIs2buVTgGzgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
Manifest number: 150F
Signing time: Sun 27 Apr 2025 09:00:12 +0000
Manifest this update: Sun 27 Apr 2025 09:00:12 +0000
Manifest next update: Mon 28 Apr 2025 09:00:12 +0000
Files and hashes: 1: A15Shd7cNatjUnBIs2buVTgGzgQ.crl (hash: YBVbRygQwFQBCzl9KKPdeiDPKWrGQoDuVNkGCnkCIrc=)
2: QaI9DSrZz7ee9hIU4DnZspjDIV0.roa (hash: Z9nnRdcq5IZHSc4H5xkykoFIJ1oSyMHuKk3P+4Nf+Ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/A15Shd7cNatjUnBIs2buVTgGzgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:79:be:8f:11:f3:29:10:55:9f:2b:c0:9f:82:a4:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=035e5285dedc35ab63527048b366ee553806ce04
Validity
Not Before: Apr 27 09:00:12 2025 GMT
Not After : Apr 28 09:00:12 2025 GMT
Subject: CN=8be0a4f97f3941e63cb6b8fd14fe2a98b4dcebe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:98:8b:f1:e1:c1:fa:63:31:ec:41:66:53:4b:
26:28:8a:41:e6:90:9c:9a:92:77:bd:2f:11:9a:b7:
f9:c2:b9:25:07:ce:61:9b:0b:db:39:f0:f4:d1:4e:
dd:e1:d0:f0:97:d4:f7:a3:a8:1c:13:69:1a:b7:13:
96:cc:db:ed:c6:ba:38:8d:74:73:e0:cb:13:28:d3:
aa:bf:18:db:58:d0:32:d2:2a:7f:dc:76:27:b4:90:
2f:61:4d:bf:7f:36:ac:90:cd:57:39:62:09:3a:47:
19:78:fb:a3:62:6b:33:4d:b9:7f:93:47:94:3e:8e:
c9:bf:0b:4c:28:76:f9:b3:9c:e1:03:85:14:21:37:
09:1e:81:23:30:5c:27:98:ed:41:0f:ef:30:3b:88:
5b:ba:99:e9:2e:5f:f2:c9:14:62:ec:a0:15:3e:74:
21:86:f6:7b:4e:5b:d1:47:73:bc:77:cc:f5:a0:72:
f1:64:35:b2:89:2b:7f:8e:19:77:95:c0:96:79:86:
ab:82:64:56:72:ed:72:f0:90:58:78:1e:79:c0:78:
70:8b:67:3b:91:ae:bd:8d:c4:3d:db:38:60:7c:d7:
0a:eb:26:9e:53:44:12:ae:98:d9:14:52:5c:6e:c5:
fb:02:8d:23:c0:26:73:e6:57:73:f9:00:2d:d1:39:
3d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:E0:A4:F9:7F:39:41:E6:3C:B6:B8:FD:14:FE:2A:98:B4:DC:EB:E9
X509v3 Authority Key Identifier:
keyid:03:5E:52:85:DE:DC:35:AB:63:52:70:48:B3:66:EE:55:38:06:CE:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A15Shd7cNatjUnBIs2buVTgGzgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:d4:2e:d4:bc:8e:c4:26:29:c6:c2:14:82:41:56:d4:71:87:
f4:ee:1c:cb:55:e0:bb:8d:57:dd:71:1a:cc:77:75:2f:47:6c:
33:f4:77:25:4e:cc:4e:4c:2c:18:a2:a7:0e:ae:71:cd:00:68:
ac:ff:15:20:b2:b5:28:be:d6:5b:d4:40:34:1d:a5:ac:5b:4b:
71:23:74:8b:fa:2b:30:80:dd:8d:51:81:a1:d7:bc:d2:49:e0:
41:71:f9:bc:f1:aa:54:1e:97:b7:91:e5:9b:38:04:b0:33:41:
7d:23:88:0b:14:f8:29:2d:a9:9f:81:55:c1:5c:1d:84:90:3e:
de:cf:61:eb:c0:8f:11:96:1e:6d:36:d8:48:84:d4:0a:b7:4f:
f0:90:03:5d:39:46:49:16:96:f3:0e:44:22:55:5e:c4:e1:f5:
7c:f0:f1:de:81:ca:7b:65:3d:18:33:6e:0e:a3:ef:5e:82:8c:
0f:17:59:61:b2:6a:38:9b:91:1f:78:de:5e:ca:b1:30:25:f8:
5a:e1:5c:0c:f2:26:e0:b6:85:ef:21:1b:04:de:7a:cf:f7:b7:
45:f6:ea:38:ed:5c:89:75:2d:0b:f1:95:18:cf:f8:e5:4b:89:
94:eb:b9:d5:9f:18:a8:53:09:2d:31:35:52:d4:b8:0b:68:4a:
8b:06:7b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:15:01 2025 by rpki-client