Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/cabd64-186b-4282-b14a-aa6fd434e0ef/1/AdGZIUQMLysip3d4ApO8J_pH81o.mft
File: AdGZIUQMLysip3d4ApO8J_pH81o.mft (raw, json)
Hash identifier: hPk9XiSIRNtZHomm9p1+ucygUKCu1JIhJC1c/bIH6Zs=
Subject key identifier: 15:A9:66:A1:C8:83:33:81:AD:83:59:96:98:EB:E5:CD:B3:D6:55:DD
Authority key identifier: 01:D1:99:21:44:0C:2F:2B:22:A7:77:78:02:93:BC:27:FA:47:F3:5A
Certificate issuer: /CN=01d19921440c2f2b22a777780293bc27fa47f35a
Certificate serial: 0196A164C3E2422A0E049E18B5DD33B22689
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AdGZIUQMLysip3d4ApO8J_pH81o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/cabd64-186b-4282-b14a-aa6fd434e0ef/1/AdGZIUQMLysip3d4ApO8J_pH81o.mft
Manifest number: 1524
Signing time: Mon 05 May 2025 17:00:57 +0000
Manifest this update: Mon 05 May 2025 17:00:57 +0000
Manifest next update: Tue 06 May 2025 17:00:57 +0000
Files and hashes: 1: AMqTeh0F3XSWkmUe0nZ3FjJ_0eI.roa (hash: hVtRIuTJAp0UciU9Dz9eHBGNpOVVePzyiUAeImKtrwk=)
2: AdGZIUQMLysip3d4ApO8J_pH81o.crl (hash: YDiNBgpogVewBFlqOi9okiMtpEqvZDvwPXRHjNYUYKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/cabd64-186b-4282-b14a-aa6fd434e0ef/1/AdGZIUQMLysip3d4ApO8J_pH81o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/cabd64-186b-4282-b14a-aa6fd434e0ef/1/AdGZIUQMLysip3d4ApO8J_pH81o.mft
rsync://rpki.ripe.net/repository/DEFAULT/AdGZIUQMLysip3d4ApO8J_pH81o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 17:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:64:c3:e2:42:2a:0e:04:9e:18:b5:dd:33:b2:26:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01d19921440c2f2b22a777780293bc27fa47f35a
Validity
Not Before: May 5 17:00:57 2025 GMT
Not After : May 6 17:00:57 2025 GMT
Subject: CN=15a966a1c8833381ad83599698ebe5cdb3d655dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8d:77:9e:a1:a5:1f:42:3f:be:db:9c:57:8a:
c2:65:c3:7d:a5:22:8d:43:28:a5:ed:0a:c2:15:57:
f7:29:f4:6e:e9:d5:b6:3a:ad:ae:cc:bf:c7:1c:82:
68:9f:7a:b8:10:6c:9f:c3:93:dd:3c:26:c5:0e:d2:
dc:84:8e:aa:2b:91:36:32:7b:85:36:f8:c6:97:99:
3f:ad:a5:d2:72:bf:0c:e0:b7:28:15:70:3c:b5:7c:
70:f6:8b:7b:09:dc:27:55:9a:12:99:b7:87:34:86:
40:ce:e6:ea:8f:97:68:98:51:78:78:25:48:44:5d:
37:a3:d5:38:2c:da:46:bd:db:2a:21:11:43:a4:3c:
63:0b:16:1e:84:53:c4:60:8f:8b:fe:b9:93:c7:64:
6b:12:2f:24:4f:c9:af:ed:8d:e8:27:2c:57:42:21:
3e:46:26:de:64:97:ea:35:f7:db:49:3a:f9:0e:85:
da:33:69:f8:96:b4:c1:41:16:ba:fc:b1:13:64:4f:
15:37:df:93:7d:2d:d9:2c:32:7f:48:b8:50:73:70:
53:69:a8:b8:89:c8:fa:88:6f:4f:43:42:b1:cd:ea:
0a:d8:a4:a0:ca:6e:60:c4:a3:84:f6:a7:3d:02:47:
d8:0f:01:8d:86:30:a5:de:91:40:d7:81:7f:88:de:
1e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:A9:66:A1:C8:83:33:81:AD:83:59:96:98:EB:E5:CD:B3:D6:55:DD
X509v3 Authority Key Identifier:
keyid:01:D1:99:21:44:0C:2F:2B:22:A7:77:78:02:93:BC:27:FA:47:F3:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdGZIUQMLysip3d4ApO8J_pH81o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/cabd64-186b-4282-b14a-aa6fd434e0ef/1/AdGZIUQMLysip3d4ApO8J_pH81o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/cabd64-186b-4282-b14a-aa6fd434e0ef/1/AdGZIUQMLysip3d4ApO8J_pH81o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:37:2e:b5:40:7c:90:49:5e:d5:2f:b5:87:fa:04:79:e3:0b:
3b:ce:9b:27:86:2d:72:2c:05:7f:37:7b:32:64:f0:45:6f:55:
9f:b0:5d:2c:3b:88:e4:a3:d0:92:c8:79:c6:ed:68:16:38:e1:
09:79:4a:73:6a:89:7c:97:71:be:2b:b5:0d:65:73:5d:09:10:
2f:09:27:90:be:7b:68:ce:86:f6:23:ad:cf:fc:e1:4c:1e:aa:
59:e6:04:f1:10:32:96:74:8d:75:c4:82:d6:b2:b6:5b:0c:f8:
67:e5:aa:8e:ec:65:59:20:1d:51:b7:7e:f6:04:20:5e:81:65:
eb:b9:44:d2:6e:3b:9d:d0:fe:d9:6e:b9:08:62:95:7c:e2:57:
71:61:09:3d:fc:f3:06:ba:1d:08:e8:70:ee:0e:cd:fe:f9:55:
1e:5b:8e:18:f2:16:fc:bd:9d:e9:54:6a:da:81:f2:ad:66:17:
c8:c6:2d:b8:a5:9a:d2:57:00:6b:56:6d:a6:73:1a:37:83:3b:
43:5e:e1:0b:be:04:83:f8:e1:3b:ce:07:42:8e:49:09:c3:01:
bd:81:43:e6:98:05:23:24:dc:36:57:01:c7:1a:22:27:bd:55:
31:be:f2:55:d6:c4:fc:e6:e4:94:91:f1:7c:f5:4e:cf:32:3b:
38:b2:b8:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 00:07:04 2025 by rpki-client