Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/POsgUJhzLLkIgjBF79XXQCUMayc.mft
File: POsgUJhzLLkIgjBF79XXQCUMayc.mft (raw, json)
Hash identifier: /jw+bNU1wHbHfLunad0zR+lKiJX8MW6o5uhchnOwJJk=
Subject key identifier: 40:47:79:AB:5A:1D:11:7F:39:B6:EC:FE:82:7B:B3:8D:FB:FB:CC:9C
Authority key identifier: 3C:EB:20:50:98:73:2C:B9:08:82:30:45:EF:D5:D7:40:25:0C:6B:27
Certificate issuer: /CN=3ceb205098732cb908823045efd5d740250c6b27
Certificate serial: 019683FEEE27CEE0296265E5E952023E53AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/POsgUJhzLLkIgjBF79XXQCUMayc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/POsgUJhzLLkIgjBF79XXQCUMayc.mft
Manifest number: 1516
Signing time: Wed 30 Apr 2025 00:00:44 +0000
Manifest this update: Wed 30 Apr 2025 00:00:44 +0000
Manifest next update: Thu 01 May 2025 00:00:44 +0000
Files and hashes: 1: POsgUJhzLLkIgjBF79XXQCUMayc.crl (hash: YnEhF2MmyzlIZHr3YdBzS676k0pTa+fC9rVhC9QaBOw=)
2: glhaGjYvz9mGirczYGxMS81rRfI.roa (hash: cPBvD492Ea2g7PNrZgsOnSXH4CPshMieJYjaq9P+dD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/POsgUJhzLLkIgjBF79XXQCUMayc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/POsgUJhzLLkIgjBF79XXQCUMayc.mft
rsync://rpki.ripe.net/repository/DEFAULT/POsgUJhzLLkIgjBF79XXQCUMayc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:fe:ee:27:ce:e0:29:62:65:e5:e9:52:02:3e:53:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ceb205098732cb908823045efd5d740250c6b27
Validity
Not Before: Apr 30 00:00:44 2025 GMT
Not After : May 1 00:00:44 2025 GMT
Subject: CN=404779ab5a1d117f39b6ecfe827bb38dfbfbcc9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:35:3f:e6:a2:53:02:68:d5:2e:a9:16:b1:f4:
38:20:88:29:ea:d4:07:22:17:dd:a7:52:26:c9:38:
e9:e4:7f:47:71:7b:55:a4:43:21:3a:e3:bc:84:31:
12:73:98:3b:92:f6:0d:b0:7a:74:9c:c2:86:f2:ae:
3b:44:d9:43:f0:29:e9:46:78:d6:97:d1:1e:7d:c3:
42:45:8c:d7:70:d3:42:8e:a9:41:9f:99:a9:d9:10:
f8:0a:b2:fb:86:5d:c6:70:3e:c2:29:84:f9:81:1b:
fc:a8:22:a9:3b:7b:ea:a6:b6:81:7e:f3:05:0f:3e:
1d:e5:31:0f:90:66:76:06:4a:91:c2:b8:be:2e:36:
1c:5c:a2:16:69:a2:b6:a6:c1:57:81:15:09:af:51:
27:d9:69:ae:fd:8e:93:68:e7:f5:2e:8d:5c:9b:34:
9f:ab:0d:83:02:e2:1d:fe:52:ca:e1:12:fe:11:29:
08:6d:d3:5e:ab:2e:f6:9a:1d:ee:13:3c:02:89:01:
55:13:7d:2a:16:44:fa:81:8d:dd:e1:c4:52:b5:6f:
c1:a5:a8:6e:5b:79:37:65:03:b0:ec:2e:5c:d5:1c:
cb:77:01:89:1d:27:99:93:34:10:80:4f:c8:46:6a:
7b:db:ed:63:6f:22:7a:7e:ca:e4:42:19:42:b7:cb:
3b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:47:79:AB:5A:1D:11:7F:39:B6:EC:FE:82:7B:B3:8D:FB:FB:CC:9C
X509v3 Authority Key Identifier:
keyid:3C:EB:20:50:98:73:2C:B9:08:82:30:45:EF:D5:D7:40:25:0C:6B:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POsgUJhzLLkIgjBF79XXQCUMayc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/POsgUJhzLLkIgjBF79XXQCUMayc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/POsgUJhzLLkIgjBF79XXQCUMayc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:7d:38:ac:f3:c6:00:b0:0e:17:e9:49:cb:78:d9:f4:a0:51:
97:75:f8:b4:c9:e4:e0:e5:b6:eb:fa:d6:b8:ad:e3:36:db:b0:
d0:44:d0:45:04:d4:39:0d:10:e3:26:45:c1:9f:a3:ae:ff:3c:
4c:c6:e9:4d:d6:a2:fd:1f:a7:98:34:82:80:5f:21:02:c1:11:
c5:ec:ec:53:8f:ac:bc:52:6b:fc:de:d8:c9:02:ef:95:60:47:
57:ff:c1:03:d8:60:7e:8c:f4:1d:e6:ab:78:8e:a6:5f:46:99:
db:97:e0:10:f0:77:f1:45:8f:8b:fd:a6:db:d4:d7:c1:87:ec:
3f:74:35:12:fc:2a:ca:66:5a:9f:4a:1e:a1:01:08:65:5b:16:
08:e1:d6:1a:00:38:da:1c:5c:54:b4:48:fe:8e:14:8a:87:be:
26:83:d1:35:44:ce:7a:4a:c3:f1:09:71:22:46:9e:8e:33:cb:
27:a9:29:e8:8b:cb:cd:69:0b:93:c2:2f:73:63:03:f7:5c:7a:
27:0b:b0:00:2d:ff:ff:59:43:dd:68:13:ac:e0:ac:f5:42:e6:
38:38:64:d6:30:ed:99:d0:c8:1b:c3:7e:1b:5e:34:87:8b:c8:
6f:65:dd:b4:b4:99:88:5b:fe:02:2c:66:80:01:0e:07:52:23:
53:45:28:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 02:53:05 2025 by rpki-client