Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.mft
File: 0sgbHQKPKvYeqbQiZ5pfjekFcuc.mft (raw, json)
Hash identifier: A8V9D0OF+b0ldd1iItsAlu4AEpdI7MUD/FEC+2hfaXA=
Subject key identifier: 5D:5D:F3:3A:EC:3E:17:13:46:13:60:85:B4:3B:3B:69:D8:B9:7F:D1
Authority key identifier: D2:C8:1B:1D:02:8F:2A:F6:1E:A9:B4:22:67:9A:5F:8D:E9:05:72:E7
Certificate issuer: /CN=d2c81b1d028f2af61ea9b422679a5f8de90572e7
Certificate serial: 0196760C24239BEE45E37DC54ACC3A4921DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sgbHQKPKvYeqbQiZ5pfjekFcuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.mft
Manifest number: 150E
Signing time: Sun 27 Apr 2025 07:00:29 +0000
Manifest this update: Sun 27 Apr 2025 07:00:29 +0000
Manifest next update: Mon 28 Apr 2025 07:00:29 +0000
Files and hashes: 1: 0sgbHQKPKvYeqbQiZ5pfjekFcuc.crl (hash: Cra+Kz9RByAd/XMrq8WeQk6AFCbJhHZJ15OeAofq6RA=)
2: KzJRm4blhpQ22QWdKYNtwSo9hec.roa (hash: VvdDpNHANgnzHXSd6NFNAPGvygHgdOqLpMuWRNVTc78=)
3: baZe32PKXIeppnY8Yaja4T-a3tY.roa (hash: tWsZkF/TWyoJvpRhiK8XSrqOZGwxm+EMQruE+7kHGHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0sgbHQKPKvYeqbQiZ5pfjekFcuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:24:23:9b:ee:45:e3:7d:c5:4a:cc:3a:49:21:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2c81b1d028f2af61ea9b422679a5f8de90572e7
Validity
Not Before: Apr 27 07:00:29 2025 GMT
Not After : Apr 28 07:00:29 2025 GMT
Subject: CN=5d5df33aec3e171346136085b43b3b69d8b97fd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c4:34:41:91:d1:91:84:59:e4:eb:4a:fa:ef:
97:32:3f:2b:35:97:c9:66:8e:a7:ed:53:9d:80:c3:
0f:da:15:35:52:dd:9a:2d:51:06:e3:9f:1c:7b:a4:
76:cb:a4:17:8a:04:7c:44:b2:d5:49:06:e8:0e:2f:
1e:61:4d:74:73:62:2a:c2:ef:53:f8:cb:0c:b1:c5:
7a:88:4f:60:f9:4b:4f:22:5e:48:3f:de:75:ce:ea:
83:69:2e:40:2f:a9:44:85:9f:d6:7f:cf:f2:54:d3:
55:17:22:df:0a:a3:10:5c:58:06:4c:e6:aa:2d:cd:
8e:c3:9e:cf:08:c9:e8:ea:f8:87:ee:b4:31:59:b0:
25:04:b0:93:cf:4f:e0:86:4c:c1:62:39:ad:8a:c0:
d7:e8:cd:b9:11:13:ee:78:a8:e0:cb:55:30:06:f1:
d4:07:fb:06:09:a2:4d:df:73:01:1a:38:83:90:d9:
53:48:a6:7e:e4:e1:e4:0b:17:c6:8b:e1:82:8d:7c:
77:22:d8:87:02:cf:76:45:d6:eb:96:89:36:f6:dd:
e1:3f:2b:ae:5a:7b:3d:48:7f:83:da:41:62:fb:ef:
1e:ff:50:e4:12:a0:63:86:ed:8b:63:82:64:2e:fd:
3f:ff:34:07:43:57:fb:e4:c2:20:30:9f:e0:11:d4:
df:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:5D:F3:3A:EC:3E:17:13:46:13:60:85:B4:3B:3B:69:D8:B9:7F:D1
X509v3 Authority Key Identifier:
keyid:D2:C8:1B:1D:02:8F:2A:F6:1E:A9:B4:22:67:9A:5F:8D:E9:05:72:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sgbHQKPKvYeqbQiZ5pfjekFcuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:e3:e7:df:b2:b2:9e:d4:f3:29:ad:c7:10:bc:6a:e2:79:8e:
75:06:ae:d3:36:19:68:ae:1c:4f:da:88:b0:57:d3:f4:d1:78:
a4:4b:7d:06:f3:e3:a4:2b:ea:6f:c5:70:09:58:33:8b:95:eb:
0b:bb:8d:7e:01:00:96:7c:2d:23:47:8d:82:a3:d2:22:11:09:
e7:ed:9b:49:39:24:b7:32:da:ce:29:46:be:43:11:34:e2:96:
a8:63:0d:c9:19:33:14:65:1c:7d:3c:1f:2b:bf:3f:e7:05:b9:
a3:f3:06:33:c0:c2:a6:c3:01:4e:1c:20:cb:e5:46:6e:29:af:
90:dc:1c:7d:fc:a0:4c:91:fc:0d:a8:6c:07:af:02:bd:f3:55:
44:7a:7b:35:f7:c8:af:7a:d5:75:79:41:8e:01:26:73:ba:ad:
e3:23:79:9b:87:4d:ef:ec:c0:9c:17:08:8f:14:da:85:03:30:
e6:4e:47:ae:67:0e:4a:ed:27:ec:c0:67:ad:fa:d9:40:ed:59:
24:7f:30:8c:9d:ac:05:dd:43:a1:10:03:05:6a:b7:46:a4:e2:
24:8a:3a:06:8a:c4:1d:53:05:f9:5f:ee:2e:61:3a:fe:77:e1:
94:9c:4e:66:dd:03:c0:3b:5d:4d:b9:dd:e7:ab:c1:1f:ad:d4:
e9:82:56:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:22:14 2025 by rpki-client