Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft
File: RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft (raw, json)
Hash identifier: O1zhEjYt5VE1vP9wKMXtrUk4SQbytgOFqteDT6kQr5s=
Subject key identifier: 23:65:DF:57:53:3C:14:D9:B2:E8:C7:6F:00:A9:B4:22:E1:11:01:8D
Authority key identifier: 46:12:58:F5:E3:B6:B9:4E:39:16:DD:2B:5D:16:E3:42:FD:60:59:66
Certificate issuer: /CN=461258f5e3b6b94e3916dd2b5d16e342fd605966
Certificate serial: 01969E63534EA694DC3219F67B96DEEC62C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RhJY9eO2uU45Ft0rXRbjQv1gWWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft
Manifest number: 146B
Signing time: Mon 05 May 2025 03:00:31 +0000
Manifest this update: Mon 05 May 2025 03:00:31 +0000
Manifest next update: Tue 06 May 2025 03:00:31 +0000
Files and hashes: 1: 9VQnH-9sd7nGshve_4r1C2nYakY.roa (hash: Z02F3WYNcnzG8yizQnWEGco/cel18dqYBCQHGg9DCTg=)
2: RhJY9eO2uU45Ft0rXRbjQv1gWWY.crl (hash: b5N/6MyQIHMtB0NmK6lyncAR8ce38BoJW1rZjBL++v0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/RhJY9eO2uU45Ft0rXRbjQv1gWWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:63:53:4e:a6:94:dc:32:19:f6:7b:96:de:ec:62:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=461258f5e3b6b94e3916dd2b5d16e342fd605966
Validity
Not Before: May 5 03:00:31 2025 GMT
Not After : May 6 03:00:31 2025 GMT
Subject: CN=2365df57533c14d9b2e8c76f00a9b422e111018d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c5:8c:95:24:9f:7f:79:a9:16:c5:95:93:78:
be:c8:96:d9:f6:b1:92:12:2b:da:b7:6f:f1:90:13:
ab:f2:09:33:c3:3e:7c:fd:ff:9c:6d:57:5c:b0:82:
b9:4b:9d:80:a9:b3:ee:85:6a:be:4d:d4:f2:61:7f:
68:7a:61:0c:c6:4d:a8:31:69:a6:5c:71:ac:7a:d2:
48:f6:80:ac:77:d0:7e:7f:17:51:cd:8d:46:aa:6b:
68:e5:f4:e1:57:e7:ab:85:43:5a:c1:ca:64:ab:fd:
50:2f:8f:46:ca:40:14:35:35:ca:34:29:93:9c:87:
e1:76:9a:8c:d1:0d:d6:37:38:8e:e4:43:f8:0f:a9:
f7:e8:05:ec:70:ac:1a:95:9e:77:f1:22:c9:20:d9:
8d:47:88:0a:b1:45:61:11:1f:0c:9a:1d:82:01:69:
d2:c0:ab:c8:29:17:9d:81:3b:75:df:6f:34:fd:a1:
4a:5f:ba:d7:c6:f9:62:b4:33:04:67:8d:02:a4:82:
db:ed:b0:03:34:e9:a8:80:f7:ad:b9:d3:b0:0d:c5:
c7:ea:49:50:77:70:69:a7:b8:0b:3c:eb:d7:8a:9a:
d5:ee:d0:fe:41:73:43:34:ff:48:d6:b4:4b:70:dd:
34:e9:92:d8:a7:79:e3:91:07:3e:29:b1:0a:7c:9e:
4f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:65:DF:57:53:3C:14:D9:B2:E8:C7:6F:00:A9:B4:22:E1:11:01:8D
X509v3 Authority Key Identifier:
keyid:46:12:58:F5:E3:B6:B9:4E:39:16:DD:2B:5D:16:E3:42:FD:60:59:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RhJY9eO2uU45Ft0rXRbjQv1gWWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:8b:55:83:39:7c:89:da:f4:31:01:d5:76:25:b7:7d:03:f6:
dd:be:80:15:80:d1:64:70:8e:eb:bc:24:f3:f5:fb:dd:12:12:
55:4b:57:32:d6:5e:16:2b:f8:88:b5:e2:c8:09:47:85:78:98:
6c:16:71:5f:85:5a:39:ed:c9:1a:33:84:aa:5a:7f:8e:bf:dc:
70:c5:fd:17:0b:f8:e3:61:7d:9c:93:96:04:36:11:5b:78:c0:
58:4a:af:85:dd:c5:3f:1e:bd:ca:4f:77:90:e9:df:d2:cd:a8:
49:01:9a:30:f2:9f:10:ce:4c:59:69:41:5c:9b:9a:71:a1:1c:
b8:09:ab:ad:9d:d8:fa:e0:ae:62:d1:10:ab:fa:c0:f3:81:9f:
89:85:8c:28:04:a7:d2:df:61:b9:d4:55:6a:0c:3d:dd:14:5b:
a7:fc:24:d1:95:2a:3f:9d:a7:fd:6b:f8:e5:fd:93:f8:73:b0:
26:e0:95:51:f8:c2:84:32:06:13:e2:84:62:11:34:6b:6c:7c:
42:bf:2c:19:b4:57:6a:85:07:54:06:09:50:20:bf:d8:01:74:
c7:13:a4:77:1b:61:9e:b4:61:44:73:a6:a0:57:4d:f4:d3:82:
f8:42:6c:0f:63:b6:68:19:e7:69:89:1b:79:2a:9a:0b:24:52:
c4:bc:87:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:28:08 2025 by rpki-client