Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft
File: r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft (raw, json)
Hash identifier: MOVhAuVOIrWBhLf9v+tp7T+6IbH1mkxwmcdffJySRR8=
Subject key identifier: B0:2B:8D:D9:F7:79:3C:89:92:9E:61:3C:E1:C3:35:A5:39:9E:41:08
Authority key identifier: AF:E4:A0:D5:FD:A6:00:C5:D5:B7:F6:18:F6:86:D7:E9:30:51:B4:D7
Certificate issuer: /CN=afe4a0d5fda600c5d5b7f618f686d7e93051b4d7
Certificate serial: 0196A3C0983B8DF8C3BBEE8DBF4FCCAE5C4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-Sg1f2mAMXVt_YY9obX6TBRtNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft
Manifest number: 1527
Signing time: Tue 06 May 2025 04:00:30 +0000
Manifest this update: Tue 06 May 2025 04:00:30 +0000
Manifest next update: Wed 07 May 2025 04:00:30 +0000
Files and hashes: 1: r-Sg1f2mAMXVt_YY9obX6TBRtNc.crl (hash: iwC4Df4h/NIIg/h3i1sE1mLkYr7CAkWN6bOlwyubmU4=)
2: tMXBcGUIKGTfYRMTtfG6biesR-c.roa (hash: JWcwNHGeY4nL5R6D6KA+SUTM4UCaSarGczrFPqLJ+XI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-Sg1f2mAMXVt_YY9obX6TBRtNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:c0:98:3b:8d:f8:c3:bb:ee:8d:bf:4f:cc:ae:5c:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afe4a0d5fda600c5d5b7f618f686d7e93051b4d7
Validity
Not Before: May 6 04:00:30 2025 GMT
Not After : May 7 04:00:30 2025 GMT
Subject: CN=b02b8dd9f7793c89929e613ce1c335a5399e4108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e0:36:f3:af:16:8c:d8:ce:cc:d9:e3:90:29:
46:6f:60:25:16:ad:59:84:84:fb:d9:13:79:d2:29:
88:fd:25:30:a8:ee:91:4b:b7:e8:f1:52:f3:0a:f5:
65:d8:53:db:6e:f7:29:c7:06:b2:e2:e6:d0:90:3c:
b3:99:7d:c8:88:b9:f2:f2:ea:a0:02:3c:65:27:17:
b0:34:a7:b5:a1:33:0c:c3:fe:c5:17:2d:ef:4c:5f:
08:5b:96:cd:80:69:80:5a:2a:17:91:59:e3:fb:00:
aa:66:8d:80:6d:eb:62:6b:e6:4c:c1:fa:9d:ba:db:
22:44:bd:fe:78:a0:90:a8:33:7c:51:72:e7:80:77:
50:f8:64:39:60:4a:3d:fa:80:56:43:a1:ae:e7:ec:
64:a4:8b:b9:bb:01:ad:dc:37:39:92:05:9c:27:cf:
e7:fc:7a:b2:be:da:c3:7d:20:52:55:5b:8f:6f:2a:
ae:1f:7d:65:13:56:14:4f:ad:79:3e:f2:7b:9e:ac:
7b:93:32:fe:0b:f2:93:4b:2a:ee:fe:e4:59:36:1f:
c1:85:c6:ab:a2:0d:c1:ca:83:51:b6:e9:3e:fd:45:
ef:cc:ea:ee:4b:a0:73:71:35:72:78:6a:5e:b1:5a:
c6:bf:a7:b5:35:99:d4:8e:af:da:a5:68:85:d2:14:
fc:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:2B:8D:D9:F7:79:3C:89:92:9E:61:3C:E1:C3:35:A5:39:9E:41:08
X509v3 Authority Key Identifier:
keyid:AF:E4:A0:D5:FD:A6:00:C5:D5:B7:F6:18:F6:86:D7:E9:30:51:B4:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-Sg1f2mAMXVt_YY9obX6TBRtNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:07:2a:7b:dc:62:f1:40:aa:d6:19:24:79:3d:b3:f0:b1:f8:
35:b2:ca:92:3b:19:c9:51:8f:9d:3f:10:04:22:9b:b6:fb:28:
28:fc:da:a5:01:28:b6:b9:32:32:fa:27:82:91:45:87:d7:e1:
55:df:40:9d:9d:b3:cd:0e:de:10:dd:bc:b4:23:bb:eb:fc:fd:
60:b6:a9:cf:74:97:37:3b:4e:29:39:42:8a:d7:10:8b:60:01:
45:08:82:f1:90:91:ec:a7:22:c4:4d:59:fd:47:aa:f6:f3:2c:
88:d3:ff:92:2e:4b:f3:90:14:bf:69:6d:f9:61:59:df:bb:20:
1c:77:73:11:2d:a1:17:2e:85:27:b3:25:a0:e6:33:95:63:25:
61:b1:38:a8:8a:c9:49:93:6d:5b:e0:dd:29:8f:c5:32:5e:80:
8d:99:c5:33:eb:8f:49:cc:91:f6:fe:e6:8f:74:b1:5f:e9:e7:
56:e7:61:72:d6:3f:f9:75:9d:4f:f1:01:6a:85:5b:fc:d0:54:
0d:13:4c:41:e0:c2:3b:53:91:2e:dc:c8:2a:2e:3a:d6:2a:bb:
95:20:09:0a:cd:80:e8:aa:42:42:3f:b8:8e:a0:ee:aa:a0:ed:
d9:f7:2c:5a:51:35:bd:ec:c3:23:8f:0f:5b:c1:00:ec:03:f2:
e8:3c:8a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 05:14:33 2025 by rpki-client