Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/rF6twAMoUCNv7nVutY-_BeExa14.mft
File: rF6twAMoUCNv7nVutY-_BeExa14.mft (raw, json)
Hash identifier: yYZQHYKhCitvHSI3pwNMC7vkeCxvnDwVE1qRIECS6yA=
Subject key identifier: 30:3F:84:05:28:FF:42:5E:DF:5C:E2:6D:8A:F9:FD:3A:5B:63:E2:D8
Authority key identifier: AC:5E:AD:C0:03:28:50:23:6F:EE:75:6E:B5:8F:BF:05:E1:31:6B:5E
Certificate issuer: /CN=ac5eadc0032850236fee756eb58fbf05e1316b5e
Certificate serial: 019676E8067258882F91648E74F3E4B5BC12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rF6twAMoUCNv7nVutY-_BeExa14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/rF6twAMoUCNv7nVutY-_BeExa14.mft
Manifest number: 1513
Signing time: Sun 27 Apr 2025 11:00:39 +0000
Manifest this update: Sun 27 Apr 2025 11:00:39 +0000
Manifest next update: Mon 28 Apr 2025 11:00:39 +0000
Files and hashes: 1: 6DiQrdbcJOqBfsf9QDEXeVd2izY.roa (hash: 31oYv9nrHSwIdd+Bdi1r8AvslvZ9845lRIm+bAJz/OQ=)
2: rF6twAMoUCNv7nVutY-_BeExa14.crl (hash: FJ76z21wHfatloSiWCt5FJRBEygbLMlJmd2tRXe9hsM=)
3: vgAzovenVoSsD0vS8yfVFQ_iX5s.roa (hash: aSEm6wkVsveq0EzZjvN/ovL0lIBGsYGZzYlJEOjMlhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/rF6twAMoUCNv7nVutY-_BeExa14.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/rF6twAMoUCNv7nVutY-_BeExa14.mft
rsync://rpki.ripe.net/repository/DEFAULT/rF6twAMoUCNv7nVutY-_BeExa14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:e8:06:72:58:88:2f:91:64:8e:74:f3:e4:b5:bc:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac5eadc0032850236fee756eb58fbf05e1316b5e
Validity
Not Before: Apr 27 11:00:39 2025 GMT
Not After : Apr 28 11:00:39 2025 GMT
Subject: CN=303f840528ff425edf5ce26d8af9fd3a5b63e2d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:78:c3:8b:df:45:05:cb:84:59:ce:c5:cf:6a:
b7:de:15:5b:aa:0a:0b:25:48:f2:75:de:2b:75:69:
93:ea:08:54:a8:84:8a:73:5a:0c:c4:d0:66:ac:0b:
f3:1e:01:e9:8d:02:cc:17:45:97:fc:0b:27:86:04:
e9:69:c5:56:00:33:49:d9:2e:d2:49:30:39:a7:f0:
37:05:73:3f:43:ec:c4:e6:6b:45:09:f7:d3:dd:20:
4e:2f:fb:21:53:b7:da:ab:7b:48:2f:76:fc:c4:de:
21:f1:1a:67:5f:98:6e:26:78:9e:85:6b:7b:5e:00:
99:8f:22:d5:32:c9:56:d0:b9:09:e9:8a:38:e9:56:
56:c6:43:6e:dd:5f:ed:98:bc:f6:16:0b:f0:52:56:
fe:7f:25:49:6b:fa:53:61:b3:fa:f7:f2:d9:b1:45:
2e:28:33:43:1a:e8:71:72:d7:24:48:f8:29:84:99:
11:20:c6:8a:89:db:33:e7:b7:a8:40:43:88:f1:75:
5b:e6:1a:10:3a:b0:83:eb:45:3c:88:78:39:7d:f0:
78:58:d8:03:7e:f1:4b:d7:16:34:32:63:1a:8a:09:
94:02:1a:ad:18:e9:f2:58:75:1f:73:f0:e4:b5:c2:
f7:ac:e9:5d:89:06:05:3d:7e:39:4e:46:69:15:b7:
3d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:3F:84:05:28:FF:42:5E:DF:5C:E2:6D:8A:F9:FD:3A:5B:63:E2:D8
X509v3 Authority Key Identifier:
keyid:AC:5E:AD:C0:03:28:50:23:6F:EE:75:6E:B5:8F:BF:05:E1:31:6B:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rF6twAMoUCNv7nVutY-_BeExa14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/rF6twAMoUCNv7nVutY-_BeExa14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/rF6twAMoUCNv7nVutY-_BeExa14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:63:14:a0:70:e3:e8:ae:43:5d:52:e0:d5:f9:23:2b:33:40:
98:e2:6d:24:40:07:fb:6e:c6:c6:51:20:0b:90:e5:54:ae:bf:
f9:cc:ff:36:8a:fb:97:2d:56:e1:17:9c:cb:47:50:b1:9e:fd:
12:67:31:10:20:71:d5:c4:e5:ff:1f:63:58:c8:c0:e7:26:f3:
a7:5c:b3:7c:32:0b:e8:23:d5:5b:31:66:09:d5:c2:fe:f5:0b:
e0:69:47:15:21:ae:be:4a:e7:33:a6:20:c5:8c:7a:4c:62:8c:
5a:a4:0f:9a:00:ed:3b:b1:64:63:3d:a4:30:17:b3:ae:d1:e2:
40:60:44:ce:42:0f:2f:d4:4b:25:b8:75:5d:14:17:2e:cd:0b:
fa:f5:12:f0:56:4d:cd:9d:29:6c:65:c2:97:a0:06:e5:18:d3:
a6:2e:8b:8f:53:4c:dc:4a:46:97:3f:a2:62:6f:7c:47:30:2e:
96:c9:18:86:60:17:26:cf:46:c9:9e:6a:e0:f9:69:19:da:c9:
a8:84:40:6a:6a:72:d6:fc:2e:89:4c:0c:bf:22:c0:79:9f:ee:
59:8a:30:54:8a:9e:d5:12:1b:9c:9d:00:0a:82:73:06:3f:b2:
48:d7:e0:5c:a9:83:02:1c:b8:cc:63:ae:6e:e3:e5:45:a5:c7:
1c:28:89:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:15:02 2025 by rpki-client