Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.mft
File: a1zOqpdLKQWssmKvRSwCKAMWqrs.mft (raw, json)
Hash identifier: izXFCDeCF+VLapONSauqkjQPu5Esp+gxJPv3H0vXf+w=
Subject key identifier: 89:92:70:CB:1A:A8:4A:D5:D5:F2:A2:92:45:F1:47:52:34:D3:8D:E8
Authority key identifier: 6B:5C:CE:AA:97:4B:29:05:AC:B2:62:AF:45:2C:02:28:03:16:AA:BB
Certificate issuer: /CN=6b5cceaa974b2905acb262af452c02280316aabb
Certificate serial: 0196C239A527B9A834EF917457647977B615
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1zOqpdLKQWssmKvRSwCKAMWqrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.mft
Manifest number: 0474
Signing time: Mon 12 May 2025 02:01:19 +0000
Manifest this update: Mon 12 May 2025 02:01:19 +0000
Manifest next update: Tue 13 May 2025 02:01:19 +0000
Files and hashes: 1: a1zOqpdLKQWssmKvRSwCKAMWqrs.crl (hash: R0VqmwX7/CaifMG7EQIKrhVKjJZTMXfaF32fjICKx5w=)
2: bItIvz4oTSzEDWqrAWUpQQfUMhI.roa (hash: F1ATAeaXzdv7TC8vaBAXGNSvaND60c6EFcHFAEWNuFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/a1zOqpdLKQWssmKvRSwCKAMWqrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:39:a5:27:b9:a8:34:ef:91:74:57:64:79:77:b6:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5cceaa974b2905acb262af452c02280316aabb
Validity
Not Before: May 12 02:01:19 2025 GMT
Not After : May 13 02:01:19 2025 GMT
Subject: CN=899270cb1aa84ad5d5f2a29245f1475234d38de8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f4:67:29:5a:04:f7:9b:49:45:40:f4:9d:3a:
94:7a:7d:89:01:83:29:ae:e0:8f:94:8a:51:b5:78:
d0:44:bd:e0:72:d4:0d:23:24:73:4a:fd:a3:8c:4c:
a8:f3:41:0d:55:1f:58:30:b4:8e:08:e4:08:cd:a1:
5b:ce:41:5f:12:75:a9:a1:6e:5f:e9:2d:06:c7:5f:
cb:7d:53:ca:fe:b7:70:1a:e4:50:5c:0b:82:3b:04:
d4:56:75:92:90:cb:0b:f6:27:90:4c:97:8d:9a:32:
29:a0:18:34:7e:dd:3c:dc:c2:c5:a6:5d:3a:a7:e8:
af:e2:1a:6e:6d:4e:f7:88:4f:87:8e:c6:f1:83:f8:
a6:2c:3a:e7:b0:05:f3:9b:50:07:81:ed:06:9d:cd:
ce:3b:ae:a9:b3:c4:94:9f:15:98:75:fa:8e:0b:62:
2c:ae:1e:cf:9d:48:fa:71:91:ac:66:27:10:91:da:
c1:18:51:8b:fa:0e:92:a5:48:2c:66:71:0e:1a:c5:
a9:75:22:95:fd:23:51:02:4b:b4:ac:c9:a6:d5:28:
c5:8b:a3:97:ad:b7:94:3e:07:02:ec:d0:b2:69:1d:
9e:e9:2c:1e:09:e8:18:9c:ef:3d:86:83:a5:6e:81:
3c:eb:fe:15:61:86:70:97:d4:86:15:bb:30:46:9a:
fd:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:92:70:CB:1A:A8:4A:D5:D5:F2:A2:92:45:F1:47:52:34:D3:8D:E8
X509v3 Authority Key Identifier:
keyid:6B:5C:CE:AA:97:4B:29:05:AC:B2:62:AF:45:2C:02:28:03:16:AA:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1zOqpdLKQWssmKvRSwCKAMWqrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:ca:bf:64:58:57:62:32:13:6b:2e:8f:df:d4:ca:d1:04:56:
bc:59:1b:e7:79:0b:b9:f3:f9:cf:1f:47:44:94:12:fd:88:e8:
47:bf:90:9a:5b:1b:c5:e5:04:21:e6:12:16:4f:d6:75:7a:f9:
ca:5a:cb:dd:09:a6:c9:7f:00:bd:ac:11:51:c3:1c:03:4a:54:
f6:14:cd:16:3d:09:21:48:2d:d0:b3:e0:e0:8c:73:47:c3:f5:
fc:4b:0b:e1:b4:f5:31:e7:ce:06:a4:b8:89:a4:bc:1a:22:a8:
dd:be:0c:ef:b3:9c:39:3f:de:00:50:b9:ac:bb:42:fb:12:be:
4c:a6:53:d9:70:d6:13:63:4c:d4:22:00:58:c9:6e:25:22:15:
22:d4:cb:d9:e1:b6:ec:db:e8:c9:86:db:13:ff:be:cf:fb:eb:
e4:5b:7e:f8:80:e2:bb:c3:db:7e:d5:08:5d:84:b8:31:6f:02:
94:4d:26:7a:29:57:df:72:6d:21:24:3a:71:e2:87:28:48:2c:
a5:fe:6f:81:70:d0:eb:c7:5f:3c:65:06:34:9f:2c:07:e9:5a:
96:b8:78:66:60:f2:59:a6:e3:2e:4a:48:f8:98:37:3c:ff:85:
5b:20:67:1e:97:2c:df:9c:c4:9a:17:07:36:6b:69:40:64:56:
d0:16:22:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:35:23 2025 by rpki-client