Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.mft
File: rSzwPkTaKLcxnqe3tbEQubjLenA.mft (raw, json)
Hash identifier: TvNaWqAV7gdgHSiObvBVK49JN9jIXNDoWD/p1H9WYbo=
Subject key identifier: 06:12:B8:CF:E2:AB:BC:11:75:FA:C0:18:48:FA:0E:9F:D7:6B:BB:10
Authority key identifier: AD:2C:F0:3E:44:DA:28:B7:31:9E:A7:B7:B5:B1:10:B9:B8:CB:7A:70
Certificate issuer: /CN=ad2cf03e44da28b7319ea7b7b5b110b9b8cb7a70
Certificate serial: 0196759E3A43214F860DEBBCD872C5277BE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSzwPkTaKLcxnqe3tbEQubjLenA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.mft
Manifest number: 1513
Signing time: Sun 27 Apr 2025 05:00:25 +0000
Manifest this update: Sun 27 Apr 2025 05:00:25 +0000
Manifest next update: Mon 28 Apr 2025 05:00:25 +0000
Files and hashes: 1: XH6XsDF8vVMB4yLkTc4gmvEkmhY.roa (hash: BZ//lXT/BiGxDhs4SPUIq0AZAxNe5OpvjPNDUL8DbFg=)
2: rSzwPkTaKLcxnqe3tbEQubjLenA.crl (hash: mdu44b0z0fhfIKNsYpPqPyNtGxiosG8ByFdql7ZXnvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rSzwPkTaKLcxnqe3tbEQubjLenA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:3a:43:21:4f:86:0d:eb:bc:d8:72:c5:27:7b:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad2cf03e44da28b7319ea7b7b5b110b9b8cb7a70
Validity
Not Before: Apr 27 05:00:25 2025 GMT
Not After : Apr 28 05:00:25 2025 GMT
Subject: CN=0612b8cfe2abbc1175fac01848fa0e9fd76bbb10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fb:30:fb:c5:77:af:f1:bf:e4:5c:16:3e:47:
67:c0:30:76:de:cf:3c:4d:b1:7b:2f:3b:af:5c:a6:
d8:34:88:2a:ee:57:2c:84:79:a9:65:72:bf:ae:76:
02:8c:63:34:3e:4e:5c:d1:66:0e:85:c9:d5:b6:12:
53:1d:08:e1:c6:6b:f7:ab:17:54:cb:23:32:bf:c9:
3b:3c:cc:7c:88:55:3e:cb:14:2f:ef:ca:a6:51:ed:
f1:34:42:39:51:7b:09:46:a5:12:c3:3d:0a:45:fc:
3c:db:ff:b3:1c:2d:12:be:89:af:c2:b4:59:27:08:
84:00:d0:13:71:75:c6:71:b5:35:0f:03:f9:48:86:
be:37:5d:5d:84:b5:47:6b:f7:d5:cd:04:ff:7b:f8:
af:6b:d1:88:e7:df:df:8a:16:c2:75:87:1d:8c:37:
00:0b:f1:2f:c9:fa:86:6d:42:6a:9d:1f:fd:2b:bf:
57:73:ba:7d:ca:f4:a0:ef:5c:6d:9c:d0:c9:38:7f:
a6:05:1e:15:f8:2a:c9:7e:03:61:c5:1a:f1:16:4e:
6a:d1:31:0b:dc:5f:10:91:1a:ad:f5:7f:2e:47:8d:
35:ea:09:73:ec:c6:a8:4c:2b:7b:f3:66:1c:f4:3e:
76:da:85:0c:82:02:45:4d:d0:50:3f:5c:5d:00:42:
5c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:12:B8:CF:E2:AB:BC:11:75:FA:C0:18:48:FA:0E:9F:D7:6B:BB:10
X509v3 Authority Key Identifier:
keyid:AD:2C:F0:3E:44:DA:28:B7:31:9E:A7:B7:B5:B1:10:B9:B8:CB:7A:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSzwPkTaKLcxnqe3tbEQubjLenA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:43:30:58:79:17:96:1a:7e:e4:85:ea:7e:c9:38:31:32:e5:
5b:80:5c:78:77:bb:61:23:24:01:82:92:67:de:87:54:8d:82:
e4:8c:91:a0:93:c2:d9:d1:c4:7e:bf:6e:1e:db:c6:58:5a:ff:
6b:5d:39:af:f7:b2:7e:ce:4a:44:15:75:5d:92:1a:09:8f:42:
c2:85:5e:fd:51:de:65:09:b6:3d:bf:1f:e8:ad:35:c5:b7:40:
0c:49:0f:0e:c7:02:7f:b9:92:83:d1:20:8a:75:ef:86:37:91:
b5:66:37:51:11:6f:46:0a:23:9a:0c:7c:e2:47:1c:54:ae:44:
b8:00:13:df:29:5d:e1:83:0a:ed:1f:e0:ba:d8:4b:8c:32:69:
7d:88:4e:46:15:c0:64:a7:97:96:33:c0:35:71:25:ae:0d:d8:
64:ec:c2:85:73:95:15:13:61:17:4a:c1:5b:29:ab:ca:55:df:
66:98:6c:44:a7:fb:88:9b:31:5b:14:e6:33:62:a4:ff:d0:7c:
fb:3d:d4:ce:dc:18:c6:3d:f3:61:be:99:1e:7f:a9:b8:4a:be:
d0:e3:13:c2:fb:06:fe:3b:43:dd:9f:b0:de:fe:3f:bb:23:cc:
4d:85:03:92:a2:bc:b0:db:19:ee:ed:78:d8:db:c1:6e:de:8b:
2c:a6:5f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:03:02 2025 by rpki-client