Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.mft
File: raXVKzyodFRXW2W3IO74GiYqXzo.mft (raw, json)
Hash identifier: kZIaSNHF0TXP/30zAJYWzj95SfZISVKdvpO33trBOsA=
Subject key identifier: EE:AD:6F:59:B3:2A:89:B1:F9:F5:D4:63:7C:43:0B:03:06:F6:15:FD
Authority key identifier: AD:A5:D5:2B:3C:A8:74:54:57:5B:65:B7:20:EE:F8:1A:26:2A:5F:3A
Certificate issuer: /CN=ada5d52b3ca87454575b65b720eef81a262a5f3a
Certificate serial: 01967A577E1D6EDFC5BC5BBF2C38945AF6CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/raXVKzyodFRXW2W3IO74GiYqXzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.mft
Manifest number: 0E50
Signing time: Mon 28 Apr 2025 03:01:16 +0000
Manifest this update: Mon 28 Apr 2025 03:01:16 +0000
Manifest next update: Tue 29 Apr 2025 03:01:16 +0000
Files and hashes: 1: YkyLNJe8eg5_ZWWXRqgb1FEedCU.roa (hash: yKbeF3cM/odTGzY3J6HPYew0I5seEJaLqL9iFLq9XbY=)
2: raXVKzyodFRXW2W3IO74GiYqXzo.crl (hash: eHXkq9WoJHKYnPRYcWCX5BCX4VbCfvl4YgGzUf8TI0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/raXVKzyodFRXW2W3IO74GiYqXzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:57:7e:1d:6e:df:c5:bc:5b:bf:2c:38:94:5a:f6:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ada5d52b3ca87454575b65b720eef81a262a5f3a
Validity
Not Before: Apr 28 03:01:16 2025 GMT
Not After : Apr 29 03:01:16 2025 GMT
Subject: CN=eead6f59b32a89b1f9f5d4637c430b0306f615fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:63:50:3e:6d:0b:3d:4f:ff:bb:3b:ba:74:05:
c7:c7:e2:a6:22:3e:26:71:c0:e8:44:e5:d5:49:5e:
8b:f9:10:0a:5a:4d:b5:b7:73:5c:43:39:86:3a:c5:
67:b7:20:dd:5f:97:74:99:97:af:16:15:44:46:08:
62:60:b8:07:2b:74:95:cd:45:59:5f:d9:d0:82:46:
f0:67:9a:46:89:3b:f7:df:e7:cd:f3:56:b7:14:bc:
f5:ad:a6:ef:39:8d:26:18:0e:fe:13:87:aa:9c:21:
d3:f4:09:86:63:b7:d4:c4:1e:e6:be:ce:d7:04:d0:
9d:6d:80:35:1f:a4:03:9a:a1:dd:5b:28:65:ac:26:
bf:26:40:ae:8c:3b:81:7d:94:3f:34:a8:41:f0:e1:
aa:f3:dd:02:32:06:a8:ea:e3:72:0a:e6:d4:df:9f:
8f:85:83:32:5e:d0:24:ae:a8:88:09:49:a9:24:44:
ca:aa:22:d0:96:da:b2:eb:ac:11:6d:fa:2f:a1:c1:
4f:c8:56:75:54:5e:bd:64:6a:ab:5c:8d:46:f5:cb:
5a:d7:37:76:5e:4b:9e:75:45:0d:5c:2e:af:86:f9:
b3:0c:64:22:bf:58:ab:50:b6:39:38:9b:1a:cc:21:
b4:22:d5:74:0a:8e:59:09:22:22:82:87:68:59:ba:
2c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:AD:6F:59:B3:2A:89:B1:F9:F5:D4:63:7C:43:0B:03:06:F6:15:FD
X509v3 Authority Key Identifier:
keyid:AD:A5:D5:2B:3C:A8:74:54:57:5B:65:B7:20:EE:F8:1A:26:2A:5F:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raXVKzyodFRXW2W3IO74GiYqXzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:37:55:97:a5:f9:1e:74:7c:3f:89:73:fe:73:a5:d4:01:dc:
02:26:ab:f0:dc:fc:93:d2:33:81:14:41:71:81:d8:80:cf:1c:
de:64:2f:61:67:20:28:a5:d9:c7:ca:d0:9d:7d:96:f3:28:07:
b3:cd:68:90:a1:16:93:7d:ba:49:ea:83:5d:68:68:82:85:67:
d5:bb:45:d3:b0:6f:ca:16:8a:ff:4a:ef:5f:29:ec:d2:85:a9:
b7:26:f4:74:fc:c0:7a:a0:08:77:47:f9:eb:08:83:7e:38:57:
ff:9a:ca:f9:05:d8:d9:08:e0:5b:22:db:4a:3a:c7:9f:25:e0:
18:a8:81:8c:a8:2e:a1:fe:b3:57:a2:ce:0d:ed:ba:b2:bc:1b:
b0:8e:9d:d3:cf:c6:1d:e7:94:25:2c:79:b7:83:e9:ea:ff:f2:
e1:0d:71:96:36:05:4e:72:fd:d1:82:cd:c9:b7:6b:af:2a:4f:
a2:cb:de:71:e5:a1:6a:3c:ad:df:df:88:e7:a7:50:de:8a:bb:
53:c3:f8:93:96:67:e1:72:24:1e:b6:67:e7:6f:4b:29:ed:f9:
83:80:38:1e:74:9b:e1:6e:b0:0a:3c:c5:a0:79:4e:59:43:05:
00:65:16:6f:4c:d7:43:67:63:49:60:09:aa:e0:48:18:61:39:
0e:a7:8c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:46:04 2025 by rpki-client