Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft
File: rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft (raw, json)
Hash identifier: j89O1h+fGmAfB5GtoUct8SsZgqBGYl897uDWdbD6pak=
Subject key identifier: AB:12:65:C5:CD:42:43:EF:EA:29:02:90:8D:9C:D2:10:8A:AF:0D:92
Authority key identifier: AE:0A:5A:1B:38:61:7C:C1:61:F6:06:13:D9:8E:17:9B:53:60:C0:54
Certificate issuer: /CN=ae0a5a1b38617cc161f60613d98e179b5360c054
Certificate serial: 0196D099825107185573EE21662A95A15A6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft
Manifest number: 1558
Signing time: Wed 14 May 2025 21:00:43 +0000
Manifest this update: Wed 14 May 2025 21:00:43 +0000
Manifest next update: Thu 15 May 2025 21:00:43 +0000
Files and hashes: 1: nd7EMYxqZskNG-8RUiwICJeXwqY.roa (hash: mY3khCwzfzEen/6QsaBVskA8rJ9h0QmksXwmEPcvkIM=)
2: oz9BBzN_BuPcGQT11NYYdsxnqjY.roa (hash: nvAXPeVrUMWzLRMYMGEkxTC8HsMJu8Sz1cS7HP/e1xI=)
3: rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.crl (hash: USWH59qKSJrn91dBO72xeJrpd0sEDgoyh4aQ+whUjoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 14:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d0:99:82:51:07:18:55:73:ee:21:66:2a:95:a1:5a:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae0a5a1b38617cc161f60613d98e179b5360c054
Validity
Not Before: May 14 21:00:43 2025 GMT
Not After : May 15 21:00:43 2025 GMT
Subject: CN=ab1265c5cd4243efea2902908d9cd2108aaf0d92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:3a:b5:2f:5b:9c:95:98:1d:3a:0b:70:bf:23:
40:49:b8:8c:4c:b3:90:e1:b6:d5:11:78:29:87:09:
07:7d:3b:58:0d:46:aa:3d:7e:6e:cd:38:e7:4e:94:
f3:97:f6:34:6b:c9:f2:ab:6d:2f:32:49:83:ae:dd:
ff:46:fa:be:f0:2b:a2:76:91:50:4c:74:0e:ca:81:
87:ae:60:e9:28:9a:0f:97:77:4f:e5:d9:45:e0:1f:
be:8b:46:c9:1e:22:5c:71:e3:f6:e4:71:77:64:e7:
bd:00:00:8f:ed:39:2e:02:0f:d4:4e:ea:f2:1d:88:
03:e8:cd:96:1f:02:8f:58:3f:7d:8d:92:79:b2:bf:
a1:46:b0:49:1f:50:1b:b2:d8:6d:dc:c7:d0:28:73:
8e:2b:e6:22:fe:e0:96:75:31:84:34:04:3c:43:15:
67:de:9d:16:a4:72:ca:0a:d5:f4:0c:3b:6a:dc:83:
fa:7e:50:32:99:f6:3c:61:d2:8d:e1:e9:4c:4d:74:
48:bc:dc:81:9d:f4:af:c1:af:7f:90:8d:a9:54:59:
ef:6a:06:47:f7:50:7b:5a:61:79:9a:ab:22:ad:a8:
68:81:2a:7e:9d:61:29:34:d4:65:c2:b0:b6:fe:bb:
e9:10:41:38:2c:52:c8:ea:ea:94:d7:fa:ee:98:f7:
8b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:12:65:C5:CD:42:43:EF:EA:29:02:90:8D:9C:D2:10:8A:AF:0D:92
X509v3 Authority Key Identifier:
keyid:AE:0A:5A:1B:38:61:7C:C1:61:F6:06:13:D9:8E:17:9B:53:60:C0:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:00:d9:f5:69:c9:f9:36:50:00:9a:6a:59:d9:b2:3f:7b:86:
de:53:7e:c3:c4:35:40:4e:af:d9:0d:76:73:57:91:0d:8e:5c:
40:90:c4:53:86:92:a0:ae:b1:c3:00:8d:55:b8:d0:33:5e:2e:
17:af:08:ce:98:c7:3c:ff:98:3a:5d:8e:3e:41:82:ae:7a:73:
72:b0:2d:12:dd:43:f9:4e:19:10:7e:ea:65:57:41:dd:58:93:
83:bd:e3:66:be:52:44:81:ab:50:82:6d:27:2d:17:a8:2d:71:
6c:ee:53:ca:fb:fe:58:b3:32:09:e5:34:da:aa:7a:5b:11:60:
54:01:06:ac:06:af:dc:0e:4d:1e:5d:95:ea:6d:e0:dc:09:98:
4f:e2:c1:88:83:38:50:a1:51:99:52:d5:f7:6b:a4:4c:59:a2:
76:31:97:b7:7e:02:71:b3:ba:2e:a2:b1:35:e6:b3:89:1a:52:
31:20:c1:41:bb:fa:6b:4c:a8:6f:aa:15:d0:f8:36:da:a8:ae:
97:7e:8d:5c:50:95:75:bc:98:8b:db:55:0b:30:0d:5c:6b:88:
b1:0f:bf:40:f5:5a:2a:ab:66:e0:a0:cc:b7:7e:b5:02:08:a0:
8e:0c:7e:83:1e:b8:5c:96:c8:80:29:62:83:4f:00:bf:53:d3:
33:3a:ec:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 23:24:16 2025 by rpki-client