Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.mft
File: rSzfJ9neZesk5c_J0xDkyKAwFGA.mft (raw, json)
Hash identifier: rHiAhxoXq0//mKZMEBezlm4xxeoNUtvrGb0SLOCqUpE=
Subject key identifier: A5:12:7E:05:8D:04:25:D2:58:7C:44:34:2D:FD:E3:F2:84:7E:76:16
Authority key identifier: AD:2C:DF:27:D9:DE:65:EB:24:E5:CF:C9:D3:10:E4:C8:A0:30:14:60
Certificate issuer: /CN=ad2cdf27d9de65eb24e5cfc9d310e4c8a0301460
Certificate serial: 0196771F1296E6C1699D7A61513AF474F3E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSzfJ9neZesk5c_J0xDkyKAwFGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.mft
Manifest number: 0B18
Signing time: Sun 27 Apr 2025 12:00:46 +0000
Manifest this update: Sun 27 Apr 2025 12:00:46 +0000
Manifest next update: Mon 28 Apr 2025 12:00:46 +0000
Files and hashes: 1: Zp_o_Avy64dimsDN37AJZ_vsvNw.roa (hash: w725AD9grVqnjs1N3X5smX0OnVgWb9b37Wpm1j4UCoQ=)
2: rSzfJ9neZesk5c_J0xDkyKAwFGA.crl (hash: g/bzXGFXn8L81e3OLiM0xp207RoNmyAFFvTHlDFkfs8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rSzfJ9neZesk5c_J0xDkyKAwFGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:1f:12:96:e6:c1:69:9d:7a:61:51:3a:f4:74:f3:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad2cdf27d9de65eb24e5cfc9d310e4c8a0301460
Validity
Not Before: Apr 27 12:00:46 2025 GMT
Not After : Apr 28 12:00:46 2025 GMT
Subject: CN=a5127e058d0425d2587c44342dfde3f2847e7616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:1e:b2:7a:b4:c2:94:1e:c9:c3:9f:f0:fd:23:
0c:57:54:08:21:14:db:a8:5b:dd:90:d3:73:af:c3:
e6:5a:20:52:87:d7:6e:27:24:8b:4e:80:63:4a:5c:
f0:c5:04:51:dd:a1:b2:41:6f:a1:cc:65:ca:66:b6:
09:79:32:0d:9f:a5:ed:64:9a:94:99:95:35:53:e3:
43:75:1e:4b:d0:a4:c1:48:4e:cd:11:0b:c9:80:12:
cb:d3:cf:7c:ce:53:94:7f:28:50:2b:27:de:d4:7b:
58:ed:8a:03:4d:35:34:60:93:17:12:1b:a8:8b:27:
40:3e:cf:23:64:28:6f:4e:5c:f6:6a:e1:d2:34:a0:
a4:79:87:9c:67:4e:bd:ab:cb:39:b0:41:b8:7b:1f:
e9:f8:ce:bc:34:b4:1d:38:8d:c6:46:3d:14:b9:a6:
a5:ea:d3:77:21:4c:4a:40:9f:75:47:49:f8:15:52:
f2:ee:f1:35:3b:00:67:76:39:a1:85:5f:fe:88:04:
f6:da:62:2e:b9:06:4f:78:2f:37:88:17:86:4d:24:
a7:3d:60:81:af:5d:7a:02:af:9b:7d:79:73:87:9e:
75:eb:ab:28:a3:29:3f:79:62:3b:a8:e5:68:ac:b5:
ce:b1:ea:04:c4:f2:d4:5c:16:67:4b:10:9f:f1:d6:
7a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:12:7E:05:8D:04:25:D2:58:7C:44:34:2D:FD:E3:F2:84:7E:76:16
X509v3 Authority Key Identifier:
keyid:AD:2C:DF:27:D9:DE:65:EB:24:E5:CF:C9:D3:10:E4:C8:A0:30:14:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSzfJ9neZesk5c_J0xDkyKAwFGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:8f:c0:59:62:31:dc:1e:3a:be:8d:fc:a4:7f:00:c8:89:38:
90:32:4e:8f:dd:57:61:e5:57:fe:46:ef:ae:91:16:d5:f2:86:
55:08:20:2c:5d:49:1d:7b:61:b1:0c:2d:07:91:1f:06:51:6a:
fe:d0:60:46:e9:9f:c7:0b:aa:a2:84:c8:f4:5a:40:63:43:6c:
80:4f:1c:09:7d:76:64:e2:3d:05:65:ad:18:73:b1:54:bc:7b:
48:a8:be:9a:66:b6:d4:0d:13:6f:2f:2b:45:de:c8:94:af:05:
21:28:68:d4:7d:99:c9:26:b6:e6:7d:f8:6d:de:6b:29:47:b6:
3a:13:2a:81:94:ac:59:75:18:fd:d2:e1:39:d5:f1:f6:4b:0c:
70:b6:4a:68:bf:e9:da:2f:19:95:b3:d9:39:14:8b:31:06:ea:
1b:4f:4f:04:7a:1b:29:a7:0a:43:09:02:55:ed:4e:04:7c:e5:
29:cc:7d:af:6a:4a:64:fe:e9:83:f4:ed:d5:18:0d:b8:68:9d:
89:24:94:73:7a:b7:1e:c1:64:d3:d0:cd:1d:ba:31:d3:2c:35:
32:af:a3:52:32:71:ce:93:1e:2f:85:01:b6:81:21:ca:17:c8:
38:20:d1:16:ae:55:a0:98:22:6f:ea:75:26:cb:cd:49:12:be:
ad:10:96:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:10:52 2025 by rpki-client