Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/zSaUgromG4gAVgjsULe5CdPz_U4.mft
File: zSaUgromG4gAVgjsULe5CdPz_U4.mft (raw, json)
Hash identifier: ESXHGRlv5sRI9SbQn8Akdrju2B3ajZm7xuIWjl5b9YI=
Subject key identifier: 22:2F:00:D4:B7:1C:CC:F3:16:BF:E3:A9:FA:4A:04:B9:66:A4:DC:F6
Authority key identifier: CD:26:94:82:BA:26:1B:88:00:56:08:EC:50:B7:B9:09:D3:F3:FD:4E
Certificate issuer: /CN=cd269482ba261b88005608ec50b7b909d3f3fd4e
Certificate serial: 019677558445A95A2AB0B3654510CBE3DCB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zSaUgromG4gAVgjsULe5CdPz_U4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/zSaUgromG4gAVgjsULe5CdPz_U4.mft
Manifest number: 150E
Signing time: Sun 27 Apr 2025 13:00:15 +0000
Manifest this update: Sun 27 Apr 2025 13:00:15 +0000
Manifest next update: Mon 28 Apr 2025 13:00:15 +0000
Files and hashes: 1: 4bVZoUiCbJaTBG7aA0p9xBgeM94.roa (hash: MzCfFVB6xbhIQC2ta/MEsIETvDrpIdsUhLGtVjRSeig=)
2: zSaUgromG4gAVgjsULe5CdPz_U4.crl (hash: PDrWDXK3bdDpN3MTvdbEiNprKFwG7U+oucjMrtR1V+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/zSaUgromG4gAVgjsULe5CdPz_U4.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/zSaUgromG4gAVgjsULe5CdPz_U4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zSaUgromG4gAVgjsULe5CdPz_U4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 13:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:55:84:45:a9:5a:2a:b0:b3:65:45:10:cb:e3:dc:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd269482ba261b88005608ec50b7b909d3f3fd4e
Validity
Not Before: Apr 27 13:00:15 2025 GMT
Not After : Apr 28 13:00:15 2025 GMT
Subject: CN=222f00d4b71cccf316bfe3a9fa4a04b966a4dcf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:cb:98:5d:59:0f:66:cc:dd:c3:44:cb:cc:56:
24:e1:bb:89:51:cc:52:d4:d3:5c:b9:00:84:66:bb:
1f:8c:a6:45:3c:aa:8e:44:06:eb:d7:54:4a:9c:be:
00:69:42:7b:39:81:41:7b:66:b6:a6:a7:2b:73:88:
a7:c3:db:a5:cc:ff:8e:da:2b:a0:d0:88:16:a0:7d:
4e:55:22:04:fa:0d:2a:96:ec:b8:84:b7:56:60:a0:
49:f0:21:0f:43:55:4e:4a:ec:d1:70:11:c2:c3:a3:
f1:c5:de:fd:9e:a0:7f:3f:60:2b:cc:11:b0:42:b7:
4a:a5:22:8c:24:2f:30:d0:9e:a8:1b:8d:1c:be:12:
36:2d:59:04:99:ab:0e:b4:dc:06:d6:90:79:16:ac:
f2:3f:7a:b5:f7:a7:1f:c5:45:b2:59:cc:2a:37:17:
b3:b7:2e:d6:d8:5f:93:e9:64:f3:00:92:53:1e:0f:
78:fe:85:1a:66:71:ff:56:eb:c0:1c:fc:b7:bb:26:
10:b3:12:59:c1:07:52:3f:15:9f:b0:11:fc:df:bc:
65:01:19:a7:c9:75:3c:5a:9f:d6:6c:ce:12:57:d5:
91:b4:e6:fa:e6:ed:fd:db:e1:86:44:0f:4d:2a:a0:
16:24:e7:92:3c:8f:27:b9:c4:b7:d3:57:20:ea:e4:
3b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:2F:00:D4:B7:1C:CC:F3:16:BF:E3:A9:FA:4A:04:B9:66:A4:DC:F6
X509v3 Authority Key Identifier:
keyid:CD:26:94:82:BA:26:1B:88:00:56:08:EC:50:B7:B9:09:D3:F3:FD:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zSaUgromG4gAVgjsULe5CdPz_U4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/zSaUgromG4gAVgjsULe5CdPz_U4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/zSaUgromG4gAVgjsULe5CdPz_U4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:f7:4c:f4:70:6d:0a:a5:ba:b2:99:f0:5e:40:d1:1d:99:88:
71:49:14:2a:85:b3:78:fa:6d:71:61:ef:20:52:7e:af:a6:e7:
6d:06:f3:3e:c2:22:17:5d:5e:d5:44:a8:16:a5:d2:cd:39:3b:
5e:7f:0d:fe:fc:a9:76:9c:2b:c0:10:98:36:0b:3c:76:43:3b:
a9:08:04:39:08:e3:08:dd:e5:5b:4d:1d:b7:34:8e:f2:38:0a:
9f:89:18:14:b1:b3:e7:30:8b:f0:29:28:5f:87:58:ee:48:10:
e9:c2:8e:fe:9b:ad:99:03:4a:52:b4:af:e4:6b:4a:8e:81:81:
3c:21:ec:61:f3:e4:b2:6b:c2:95:29:1a:07:b1:d1:7d:1d:1c:
4e:4a:03:ea:8f:f3:68:68:ab:be:2e:85:c0:8d:38:6b:26:d6:
9f:74:3f:12:a8:a9:83:f4:54:24:4e:5f:4c:ce:8f:fa:52:0f:
57:36:65:9e:cc:af:e3:0c:9a:38:5e:81:cf:80:b9:b1:c1:bd:
90:28:fd:43:72:bb:04:39:cc:55:a8:88:b6:03:e0:77:52:a5:
00:99:e3:1e:60:2a:b7:e4:f6:d8:da:93:4a:cc:60:dd:6a:aa:
95:c3:89:d6:7d:d5:35:7e:b7:5d:92:fc:bc:eb:37:0f:c8:36:
9a:f2:27:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 18:34:05 2025 by rpki-client