Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.mft
File: rSzwPkTaKLcxnqe3tbEQubjLenA.mft (raw, json)
Hash identifier: H3jXED/6OMUA75mn9cjA54s9IZM6g5HgdN4jmtv6GLs=
Subject key identifier: 5A:8E:E3:04:71:BA:C7:3B:96:FA:90:F8:A6:45:70:C1:18:9B:DF:2A
Authority key identifier: AD:2C:F0:3E:44:DA:28:B7:31:9E:A7:B7:B5:B1:10:B9:B8:CB:7A:70
Certificate issuer: /CN=ad2cf03e44da28b7319ea7b7b5b110b9b8cb7a70
Certificate serial: 0196AD9F6A07C28C9A79EB928DA553CFCA85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSzwPkTaKLcxnqe3tbEQubjLenA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.mft
Manifest number: 1530
Signing time: Thu 08 May 2025 02:00:27 +0000
Manifest this update: Thu 08 May 2025 02:00:27 +0000
Manifest next update: Fri 09 May 2025 02:00:27 +0000
Files and hashes: 1: XH6XsDF8vVMB4yLkTc4gmvEkmhY.roa (hash: BZ//lXT/BiGxDhs4SPUIq0AZAxNe5OpvjPNDUL8DbFg=)
2: rSzwPkTaKLcxnqe3tbEQubjLenA.crl (hash: 9ahZWWuIfNdpWS0MyaXxv8RvYDyb6HT6yphid3gNVf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rSzwPkTaKLcxnqe3tbEQubjLenA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ad:9f:6a:07:c2:8c:9a:79:eb:92:8d:a5:53:cf:ca:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad2cf03e44da28b7319ea7b7b5b110b9b8cb7a70
Validity
Not Before: May 8 02:00:27 2025 GMT
Not After : May 9 02:00:27 2025 GMT
Subject: CN=5a8ee30471bac73b96fa90f8a64570c1189bdf2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c8:d4:97:7c:07:7d:4f:46:6a:76:18:94:c2:
2b:ce:b0:bd:cd:eb:af:1b:90:fc:e3:28:54:b2:98:
45:7f:53:8b:92:3b:f4:09:63:ba:92:6f:5f:70:66:
d0:e4:66:81:41:b8:e5:4f:19:3d:f2:f5:13:a7:9b:
b7:01:36:ca:47:68:32:79:9d:d9:6f:c2:d2:87:a3:
75:94:75:f5:a8:c2:f7:32:04:c6:f8:69:cc:c1:6b:
5c:46:cd:bf:60:89:b7:99:38:d3:58:f6:4a:0f:c8:
c5:73:63:21:c6:7a:cc:42:b6:7d:00:12:57:f4:51:
6e:07:67:a7:3d:25:61:fa:f9:4f:a2:65:62:38:6b:
e7:80:a8:75:0d:0c:13:f8:72:8c:a2:3e:a9:e5:e5:
11:22:ed:b0:ab:a7:16:73:a7:d7:d6:6f:3c:1f:cb:
49:e8:d9:16:66:9d:8f:01:0e:6a:ea:27:d3:00:94:
ae:f0:cc:35:e5:fa:2c:e5:7a:25:55:3f:a9:e7:0a:
85:3e:7e:bf:a4:52:89:5b:8b:a2:f6:93:42:e4:9c:
7a:8c:d0:bd:78:db:3b:f7:ea:f5:89:b1:ba:a7:4e:
e9:fa:d8:32:47:f2:18:16:d1:33:ce:d1:69:b0:89:
41:0b:1d:43:09:c9:78:48:c8:15:d7:eb:cb:90:8c:
0a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:8E:E3:04:71:BA:C7:3B:96:FA:90:F8:A6:45:70:C1:18:9B:DF:2A
X509v3 Authority Key Identifier:
keyid:AD:2C:F0:3E:44:DA:28:B7:31:9E:A7:B7:B5:B1:10:B9:B8:CB:7A:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSzwPkTaKLcxnqe3tbEQubjLenA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:ce:4f:ec:c1:9c:0c:fa:e1:43:a4:ce:b6:19:41:c6:96:3f:
72:52:36:7b:32:a7:1f:da:35:d9:4d:99:08:05:e1:2d:52:45:
1c:0b:90:57:a8:4a:d7:3c:f0:8f:26:c1:4d:e6:e7:08:e2:26:
3d:64:8c:04:55:a6:83:96:aa:97:41:13:bc:73:a4:bd:42:75:
9a:49:31:33:d1:65:6e:50:bb:f4:94:f4:2d:85:19:47:8b:01:
eb:e4:de:03:ac:3e:7a:c1:bc:ce:41:84:64:42:d2:cc:fa:7d:
40:b2:08:79:1f:e8:61:64:7e:40:7f:a8:71:f0:af:82:ab:1d:
0a:b7:11:9a:39:a4:2f:1a:e0:eb:c8:71:fd:d2:a3:c4:27:80:
fc:a6:ea:50:a2:0b:67:4d:59:bf:e0:05:e8:40:79:b9:21:7b:
ee:3b:0a:59:d1:74:e9:ac:e6:6a:cc:1c:97:e1:8d:95:6e:8d:
b4:15:c3:c8:c0:7c:a9:dc:d9:ee:22:4c:ba:db:f2:ec:90:cf:
de:30:6c:c1:6d:63:16:be:9f:aa:87:e1:e4:bd:09:4e:79:12:
81:f0:23:76:4f:6b:5a:bb:59:6d:5e:39:e5:37:40:61:69:08:
cc:c1:cf:ae:44:b1:c9:63:aa:7f:5f:90:bc:6e:ae:98:91:1d:
ad:7b:04:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 07:54:13 2025 by rpki-client