Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/2b83a1-748d-4f55-8b3b-d9df45dbbadf/1/In6Vgaaaz4EZMg4TeYV6UTvSONs.mft
File: In6Vgaaaz4EZMg4TeYV6UTvSONs.mft (raw, json)
Hash identifier: /6Axd4L2QcbtfmUZuJ5KFc4DoeZfoGfGFRv1M9z1LgI=
Subject key identifier: E8:8E:56:8E:F3:CE:65:38:FB:9E:5C:55:9F:0E:1C:EA:F5:0A:0F:D5
Authority key identifier: 22:7E:95:81:A6:9A:CF:81:19:32:0E:13:79:85:7A:51:3B:D2:38:DB
Certificate issuer: /CN=227e9581a69acf8119320e1379857a513bd238db
Certificate serial: 01967A1FAD1A57F8D540E6A8F6C41A402EE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/In6Vgaaaz4EZMg4TeYV6UTvSONs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/2b83a1-748d-4f55-8b3b-d9df45dbbadf/1/In6Vgaaaz4EZMg4TeYV6UTvSONs.mft
Manifest number: 1512
Signing time: Mon 28 Apr 2025 02:00:18 +0000
Manifest this update: Mon 28 Apr 2025 02:00:18 +0000
Manifest next update: Tue 29 Apr 2025 02:00:18 +0000
Files and hashes: 1: In6Vgaaaz4EZMg4TeYV6UTvSONs.crl (hash: jKEdrX6zIjNpTMx5Q9NRtLafDUuXUcxbERhNIttDLPI=)
2: zDiyPljIfQJSHZqDPkKU2sChvrg.roa (hash: y+GAtv4wxCnxVitUPOmEF1JPji3zVCOq+ijeYGfAYfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/2b83a1-748d-4f55-8b3b-d9df45dbbadf/1/In6Vgaaaz4EZMg4TeYV6UTvSONs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/2b83a1-748d-4f55-8b3b-d9df45dbbadf/1/In6Vgaaaz4EZMg4TeYV6UTvSONs.mft
rsync://rpki.ripe.net/repository/DEFAULT/In6Vgaaaz4EZMg4TeYV6UTvSONs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:1f:ad:1a:57:f8:d5:40:e6:a8:f6:c4:1a:40:2e:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=227e9581a69acf8119320e1379857a513bd238db
Validity
Not Before: Apr 28 02:00:18 2025 GMT
Not After : Apr 29 02:00:18 2025 GMT
Subject: CN=e88e568ef3ce6538fb9e5c559f0e1ceaf50a0fd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0d:ee:c2:97:28:28:6b:0a:f5:7e:1a:6c:22:
f8:d3:89:1b:c1:77:d5:b1:b7:e0:94:48:9b:ee:6c:
06:7d:ac:03:ae:ea:09:6a:99:5a:b0:49:af:46:92:
84:3c:61:80:2e:a4:c7:9a:88:6d:82:b3:22:91:99:
7a:ca:45:ee:19:3d:ab:ba:8c:74:aa:bf:56:ba:4e:
d6:65:41:82:c8:f8:0d:ef:b8:04:af:ee:ad:d6:4e:
ae:9e:2a:45:80:52:18:48:26:af:2a:02:49:14:67:
6f:c3:26:29:d0:3b:eb:a3:d2:f1:7a:2c:da:70:74:
a6:2e:5f:62:e6:4c:66:42:73:06:e6:35:58:ba:c5:
98:13:c8:1b:5c:0b:4d:bf:b4:e3:e1:9f:a6:6a:7c:
3b:65:9a:58:50:06:6c:d8:ed:1b:3d:41:e9:46:f4:
ce:7b:71:1f:5b:14:9a:38:0a:be:9a:37:7a:c5:37:
f8:ab:26:eb:5e:8e:b6:79:dd:69:f4:1c:19:21:fe:
4c:08:c8:d5:ab:26:98:f9:3f:06:1a:ca:49:0c:f3:
0c:c5:ca:a5:0c:05:7d:88:3d:0c:b2:9b:68:7c:42:
08:e5:46:76:90:dd:d6:b1:3b:6f:bf:1c:fc:a4:41:
68:64:56:fc:88:18:6d:9d:4e:b4:5e:8b:c0:e8:53:
bb:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:8E:56:8E:F3:CE:65:38:FB:9E:5C:55:9F:0E:1C:EA:F5:0A:0F:D5
X509v3 Authority Key Identifier:
keyid:22:7E:95:81:A6:9A:CF:81:19:32:0E:13:79:85:7A:51:3B:D2:38:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/In6Vgaaaz4EZMg4TeYV6UTvSONs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2b83a1-748d-4f55-8b3b-d9df45dbbadf/1/In6Vgaaaz4EZMg4TeYV6UTvSONs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2b83a1-748d-4f55-8b3b-d9df45dbbadf/1/In6Vgaaaz4EZMg4TeYV6UTvSONs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:59:c7:c5:49:22:6f:a6:9f:f7:54:34:e2:a3:59:74:b9:66:
bb:3e:26:e5:1a:b1:78:89:84:a5:37:91:5a:ee:fb:82:b3:fa:
14:10:37:5c:c9:6f:09:4a:9c:7a:1b:63:96:9f:d7:c3:50:1b:
e3:df:41:86:3a:a8:06:c1:59:06:7e:54:23:66:af:bd:a7:bf:
f3:10:1d:be:09:91:80:d5:d1:95:9a:53:13:b4:1f:0e:18:41:
ab:3f:82:20:fc:0c:88:78:06:27:fe:1d:cf:5e:9d:59:99:26:
da:b6:05:66:54:c4:c0:c7:48:f7:65:70:8d:9e:ec:f2:6d:f1:
8f:57:30:96:56:77:cb:ce:ec:38:a5:cd:73:ff:ae:c9:c3:b7:
04:22:e7:3e:fd:ef:e6:ce:eb:aa:a2:f3:09:47:d8:d0:94:28:
74:4f:6f:fd:d4:ad:4e:47:db:9d:8d:c4:69:3e:e6:73:f3:a8:
29:de:48:97:b9:9a:2c:f2:88:b2:c4:fe:69:dc:b3:f5:8f:d8:
98:1f:1b:97:c4:ac:be:69:66:7b:a2:2c:38:65:8f:21:9a:cd:
df:78:90:16:35:70:78:01:84:ca:76:72:b5:d3:42:81:98:8e:
43:1b:95:84:ac:29:d6:94:3b:f0:6e:30:42:b3:6f:7b:33:23:
0b:33:2b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:52:32 2025 by rpki-client