Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/imAdLqH5SMoBjDNb7actvsB51uY.mft
File: imAdLqH5SMoBjDNb7actvsB51uY.mft (raw, json)
Hash identifier: 16cXyegc8RstFcq021zh1DOatskQslGFke7jy+amUWY=
Subject key identifier: 2F:26:18:BA:43:F0:07:72:C7:D3:FF:FD:FB:B2:D6:8C:15:F9:18:C1
Authority key identifier: 8A:60:1D:2E:A1:F9:48:CA:01:8C:33:5B:ED:A7:2D:BE:C0:79:D6:E6
Certificate issuer: /CN=8a601d2ea1f948ca018c335beda72dbec079d6e6
Certificate serial: 0196B2FCDC9FE6E2929BCC3D370223FCD5D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imAdLqH5SMoBjDNb7actvsB51uY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/imAdLqH5SMoBjDNb7actvsB51uY.mft
Manifest number: 041A
Signing time: Fri 09 May 2025 03:00:37 +0000
Manifest this update: Fri 09 May 2025 03:00:37 +0000
Manifest next update: Sat 10 May 2025 03:00:37 +0000
Files and hashes: 1: gBpXU6HMs3EdVnZKM3W9dtj0eWk.roa (hash: /5HDlgNXt08tmw8LTatvLunizw0Atkb/+jC9ix7IJ4k=)
2: imAdLqH5SMoBjDNb7actvsB51uY.crl (hash: I7e0H+csyMXAcY8RKk6+KGMDPAJT9Yo2knn7SWkITjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/imAdLqH5SMoBjDNb7actvsB51uY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/imAdLqH5SMoBjDNb7actvsB51uY.mft
rsync://rpki.ripe.net/repository/DEFAULT/imAdLqH5SMoBjDNb7actvsB51uY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 03:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b2:fc:dc:9f:e6:e2:92:9b:cc:3d:37:02:23:fc:d5:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a601d2ea1f948ca018c335beda72dbec079d6e6
Validity
Not Before: May 9 03:00:37 2025 GMT
Not After : May 10 03:00:37 2025 GMT
Subject: CN=2f2618ba43f00772c7d3fffdfbb2d68c15f918c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7b:c8:9e:d1:d5:ba:82:df:63:29:fd:32:a5:
bd:f1:14:56:aa:6c:c1:01:de:b3:5b:44:bf:2c:64:
e1:62:9a:43:2b:bd:6b:e3:65:81:01:4a:06:4f:d6:
7e:cb:ce:75:10:4e:96:f2:26:5e:4a:00:ec:45:9c:
56:6a:e3:a6:5e:ad:c4:e7:dd:ff:5a:e5:96:02:b4:
9c:6e:dd:03:3a:fb:e5:d5:ef:0d:0f:d2:1a:c9:64:
3f:ef:f2:7a:d1:d7:67:73:0f:05:c1:cf:6a:1a:ea:
86:0f:12:aa:95:62:70:b6:f9:73:1d:6e:ad:cf:58:
0d:39:88:50:b2:aa:ea:32:37:96:f3:d1:97:5d:4f:
e6:ee:80:fd:bd:e2:f9:18:03:46:69:50:67:95:c3:
2d:e2:e0:34:e1:44:a1:0e:fa:54:49:3a:d9:a3:a8:
6f:54:64:19:f1:f1:9d:a5:cb:a8:d8:b7:1e:52:92:
82:28:5a:a1:91:71:ca:86:70:fd:6a:7d:92:e2:a1:
43:22:e8:38:52:f5:61:79:bc:f8:09:a0:64:fc:58:
8f:82:27:45:f7:66:51:3a:67:ac:5d:87:90:7f:c6:
61:8d:02:8a:a1:11:6e:ff:64:90:f5:62:b6:4c:eb:
fc:ab:42:79:91:1c:86:89:8e:35:5e:c0:6a:44:4b:
87:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:26:18:BA:43:F0:07:72:C7:D3:FF:FD:FB:B2:D6:8C:15:F9:18:C1
X509v3 Authority Key Identifier:
keyid:8A:60:1D:2E:A1:F9:48:CA:01:8C:33:5B:ED:A7:2D:BE:C0:79:D6:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imAdLqH5SMoBjDNb7actvsB51uY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/imAdLqH5SMoBjDNb7actvsB51uY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/imAdLqH5SMoBjDNb7actvsB51uY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:02:d3:0c:25:31:cf:fb:93:9e:48:27:ed:be:c8:29:51:c4:
4e:63:9a:29:92:20:d8:87:77:cf:0a:bf:ea:ef:5e:6b:e8:d8:
85:bb:b7:65:50:53:66:ac:65:70:08:7c:ec:be:41:7f:2f:8d:
f3:65:cc:be:91:85:95:05:41:71:d7:1d:36:04:77:b2:52:10:
5a:ec:d1:01:fb:31:4a:a5:76:06:75:29:1c:67:23:e0:63:c9:
d1:e3:3d:d8:74:00:45:d1:21:b2:f6:b0:1a:87:f6:48:70:9c:
59:79:4b:7d:96:a1:90:b6:7a:54:7f:71:e8:9f:32:d7:95:90:
68:4b:22:68:ad:59:c5:99:ad:23:0e:eb:35:cb:62:1f:47:db:
4d:35:b8:39:f5:44:d9:c6:bc:c3:89:0c:69:8a:c2:e6:c7:bd:
66:15:24:49:dd:d4:41:55:8a:18:41:01:0d:42:a6:ad:3e:ac:
5f:c7:e1:2a:f3:bd:11:12:8a:70:dc:b7:16:9e:2b:d9:fa:53:
15:4e:f2:25:eb:03:f8:64:85:b6:1f:5b:9e:f0:b5:75:4a:1f:
9b:19:d9:58:92:43:cd:e7:5c:ca:86:8b:fc:7a:aa:ed:57:cc:
94:c5:4f:59:a6:49:be:cd:d8:3c:f3:de:8a:0d:f9:cd:da:f7:
e8:24:87:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:18:05 2025 by rpki-client