Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
File: po_5Ip79jRK0Jz80b4xkVOpYfsw.mft (raw, json)
Hash identifier: LfIm1LBVyE1+7P9aNeuR+X+ErctTmcp8Dlihp8nVi/s=
Subject key identifier: 02:32:6D:0B:EF:17:B1:C9:AA:B1:F6:E0:30:B9:11:CF:ED:8C:36:AB
Authority key identifier: A6:8F:F9:22:9E:FD:8D:12:B4:27:3F:34:6F:8C:64:54:EA:58:7E:CC
Certificate issuer: /CN=a68ff9229efd8d12b4273f346f8c6454ea587ecc
Certificate serial: 019673421C4FDF7A00A833E63763ED728C9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
Manifest number: 1511
Signing time: Sat 26 Apr 2025 18:00:34 +0000
Manifest this update: Sat 26 Apr 2025 18:00:34 +0000
Manifest next update: Sun 27 Apr 2025 18:00:34 +0000
Files and hashes: 1: NvB3sbtKygBuV_bHy4ubiaP6jUc.roa (hash: QHR99wgFE0npSuCrsPzML6fCQB1JMr/5JCdaknSW7aY=)
2: mkpPO0iUB-Trjc2yot_MhVuYzeI.roa (hash: bl4jbnOxpRldBgzWUbIAjtNRBkTTSgb/YiMXDC223qY=)
3: po_5Ip79jRK0Jz80b4xkVOpYfsw.crl (hash: riu02Y4VdQZw+FO1JgYmq917Ob03cxKvBayT0h533+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 17:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:42:1c:4f:df:7a:00:a8:33:e6:37:63:ed:72:8c:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a68ff9229efd8d12b4273f346f8c6454ea587ecc
Validity
Not Before: Apr 26 18:00:34 2025 GMT
Not After : Apr 27 18:00:34 2025 GMT
Subject: CN=02326d0bef17b1c9aab1f6e030b911cfed8c36ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ac:62:ba:b7:58:38:ab:f4:b2:62:94:97:4d:
75:f0:4d:20:4d:9b:fc:52:9a:50:cf:5f:45:91:8d:
37:70:60:9d:2f:22:4e:13:9c:fd:cb:35:7f:0a:17:
c4:60:9b:2f:a6:64:28:de:98:ef:0b:20:63:4d:63:
17:e4:44:9c:a9:fa:c0:52:c2:ff:e6:02:bd:b5:39:
00:97:6c:50:95:23:42:2d:3e:35:df:bc:ae:c6:7a:
09:c0:15:83:85:c9:de:44:f9:51:7c:16:4d:11:7d:
4d:91:b1:5a:c5:9d:f1:c2:ae:a2:e2:92:89:f8:32:
d7:30:c0:80:85:90:3e:83:af:62:cc:13:c8:cd:94:
19:44:3f:7c:b0:80:fc:41:74:ba:3d:09:65:b3:3c:
4c:78:cc:93:c5:f1:37:a9:32:bd:d8:ba:57:83:24:
ef:b4:b5:30:3e:69:c1:00:13:3f:ea:1f:0f:b4:c0:
7f:f0:7b:5d:16:22:ea:c0:b5:78:ab:56:5a:f1:05:
11:02:17:32:d6:12:16:42:16:e3:8b:61:73:b5:09:
c3:6f:6f:f2:8a:23:11:eb:5a:15:b1:74:44:99:a7:
02:38:a6:25:ca:4c:ec:4a:fb:c1:3f:05:8d:c6:89:
8b:d8:cb:ee:50:30:9f:a2:43:51:ca:b6:64:f6:3e:
24:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:32:6D:0B:EF:17:B1:C9:AA:B1:F6:E0:30:B9:11:CF:ED:8C:36:AB
X509v3 Authority Key Identifier:
keyid:A6:8F:F9:22:9E:FD:8D:12:B4:27:3F:34:6F:8C:64:54:EA:58:7E:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:67:11:24:24:5c:d4:0e:ce:bb:aa:18:a0:d2:71:3c:ca:a2:
bd:4f:d6:37:c4:cd:66:b7:34:a1:d0:9b:22:48:46:59:e5:1e:
15:01:f8:04:56:14:97:d3:14:d5:fa:db:88:aa:17:bc:d8:e4:
03:ec:99:05:c0:5e:19:c4:f2:1d:57:e2:af:55:31:20:62:aa:
a7:86:1a:13:5e:b4:f4:a4:4a:c2:a9:7e:e3:d3:68:43:24:6d:
49:d9:02:c1:6b:18:82:a5:03:22:e9:97:69:1f:41:eb:ec:f3:
e6:b0:bc:a9:19:6a:0b:cf:b5:2b:d4:e6:01:15:cd:cd:33:ba:
f5:aa:fb:66:80:03:d0:78:f2:c1:32:70:ce:03:bc:f7:c1:3c:
0e:e9:e4:36:64:0a:29:ce:36:e9:32:91:34:d2:ee:c6:83:99:
70:41:79:f7:16:6b:51:11:03:19:18:c1:2a:8f:4b:2f:87:a7:
83:bc:32:55:3f:9e:4a:f8:49:ac:ce:36:12:6a:7a:7c:85:20:
73:16:82:cc:4a:87:29:64:93:f4:06:a5:84:9c:ce:61:eb:6f:
9d:9f:6f:16:95:46:41:ef:51:ae:1b:6d:7e:6a:e5:cd:ff:83:
9e:5b:26:6c:3d:0d:34:e6:73:74:12:ca:52:41:c0:a6:6e:61:
69:42:88:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:49:30 2025 by rpki-client