Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft
File: insJq1RYUceJ0sqolCujnOoT6T4.mft (raw, json)
Hash identifier: bZaN+HESadXEUBmej/kJOze88Fcx5rB+3icb141V3DQ=
Subject key identifier: 08:F5:FE:8D:15:60:43:B0:08:E7:61:B2:B4:CB:66:42:DE:26:07:54
Authority key identifier: 8A:7B:09:AB:54:58:51:C7:89:D2:CA:A8:94:2B:A3:9C:EA:13:E9:3E
Certificate issuer: /CN=8a7b09ab545851c789d2caa8942ba39cea13e93e
Certificate serial: 01969DBEA3E923F066D8B5507F7EBD1C73E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/insJq1RYUceJ0sqolCujnOoT6T4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft
Manifest number: 1524
Signing time: Mon 05 May 2025 00:00:38 +0000
Manifest this update: Mon 05 May 2025 00:00:38 +0000
Manifest next update: Tue 06 May 2025 00:00:38 +0000
Files and hashes: 1: GSXQP-yJ0oWFWG7SiFPS52SpSgY.roa (hash: yWv48sy81gH1KSMrgFDXRAC5wY8B4250+tW5tBvtQ4E=)
2: TZjDxa0WLxZ4-HRGPSFJK9LraZg.roa (hash: mYc2KZGGYZLCnNBNUhGV4DJVMUhPM50/TitGKZaaJPU=)
3: insJq1RYUceJ0sqolCujnOoT6T4.crl (hash: lDTZNzFyW+B7JksLcTQufaVH5lexu3/E/zjVi2HddSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft
rsync://rpki.ripe.net/repository/DEFAULT/insJq1RYUceJ0sqolCujnOoT6T4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:be:a3:e9:23:f0:66:d8:b5:50:7f:7e:bd:1c:73:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a7b09ab545851c789d2caa8942ba39cea13e93e
Validity
Not Before: May 5 00:00:38 2025 GMT
Not After : May 6 00:00:38 2025 GMT
Subject: CN=08f5fe8d156043b008e761b2b4cb6642de260754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:79:30:2f:c2:54:16:8d:57:5d:06:b0:40:98:
3f:fc:77:aa:cd:66:62:9b:fb:17:04:2c:56:c8:1e:
5c:be:f5:35:5a:d2:f6:00:42:96:c5:ab:3e:dd:6c:
46:29:f3:1f:ab:28:64:4d:c3:54:94:86:b7:6a:68:
49:9e:0e:e3:e8:27:98:35:0c:22:1d:1a:10:f7:b5:
93:36:2d:87:83:e5:3c:3b:cc:33:35:46:ad:1b:ce:
61:87:65:f7:ef:84:ba:38:fc:3d:ef:24:cb:4a:ba:
b0:21:fa:7c:2a:5d:7e:56:47:d2:7b:4d:15:bb:34:
c4:52:87:fb:71:e3:6e:1f:8c:fe:ab:3a:f7:8b:30:
11:4e:21:3f:a6:77:d8:4c:14:67:8d:45:88:b2:8c:
e4:9c:46:df:ab:e7:66:9f:06:c2:08:c4:2c:30:2f:
d3:f1:26:fa:77:b6:ef:7c:1e:1b:85:de:e5:1c:31:
cf:65:86:63:ed:68:4a:b7:33:55:81:da:1e:26:94:
28:b0:98:b0:56:70:99:c7:c3:9e:3e:79:0a:58:37:
4a:75:c2:1a:51:a3:74:e0:aa:68:13:b9:0f:7f:ef:
83:d4:42:44:70:5c:f5:7e:bf:a8:33:13:35:8c:c1:
da:31:30:6d:6d:c5:e2:33:90:c0:34:b8:9f:ca:c5:
be:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:F5:FE:8D:15:60:43:B0:08:E7:61:B2:B4:CB:66:42:DE:26:07:54
X509v3 Authority Key Identifier:
keyid:8A:7B:09:AB:54:58:51:C7:89:D2:CA:A8:94:2B:A3:9C:EA:13:E9:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/insJq1RYUceJ0sqolCujnOoT6T4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:0b:7d:25:8f:9f:b0:57:c1:61:2d:67:e7:74:fe:34:96:7a:
79:5a:fb:ce:65:19:3f:0d:3d:46:18:1f:36:97:07:a0:85:36:
cf:0c:05:31:ae:65:f4:b1:20:f2:e7:cf:bd:70:cc:16:85:9d:
5b:5e:aa:f7:0f:07:6f:4e:7b:3c:ba:b5:98:88:29:31:3d:fa:
6f:20:3c:07:b3:03:f3:c3:bf:3f:d5:20:7f:76:5f:4f:1e:a7:
16:e9:e3:fe:88:a1:8a:54:6b:59:33:ec:0a:63:ba:47:e6:90:
4a:2c:6c:2a:40:f2:db:5d:7c:7b:8b:e0:cf:9d:c1:69:7f:a5:
c0:fc:b2:0f:a7:31:66:ad:ff:d2:31:db:aa:ad:3e:b9:a7:14:
40:73:b3:02:1b:c4:d1:50:42:c3:40:db:14:cc:3b:04:a2:36:
88:0f:8b:8c:62:46:85:aa:fe:ea:0a:19:f9:b2:44:8c:29:bb:
a4:33:25:0f:c0:ef:5b:69:bd:27:94:27:89:cd:0c:84:99:20:
db:c4:a2:8f:b9:25:b4:d8:5a:27:a7:6a:9e:8d:e1:ad:05:da:
ec:6b:f5:51:76:22:0b:99:f8:37:5f:fb:b8:74:79:81:ed:07:
38:ae:b7:e5:c5:38:0e:de:d9:af:49:a5:f9:e5:af:ad:5c:93:
bc:f5:c5:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 09:15:03 2025 by rpki-client