Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/ec9e26-20f2-4e23-a08f-a34c855b5aab/1/RkVleaUXL8oI4EOwK7ly-3UDrq8.mft
File: RkVleaUXL8oI4EOwK7ly-3UDrq8.mft (raw, json)
Hash identifier: aDyaZHTvKqcL1lZ2Bek4g0zkMcrrPKyM3I6keSwRlto=
Subject key identifier: B4:09:6E:C6:EA:43:4A:FC:B1:DA:ED:8D:88:9E:63:18:79:B1:78:CF
Authority key identifier: 46:45:65:79:A5:17:2F:CA:08:E0:43:B0:2B:B9:72:FB:75:03:AE:AF
Certificate issuer: /CN=46456579a5172fca08e043b02bb972fb7503aeaf
Certificate serial: 0196B0D73E025D1F21A2872E806734DE9FFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RkVleaUXL8oI4EOwK7ly-3UDrq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/ec9e26-20f2-4e23-a08f-a34c855b5aab/1/RkVleaUXL8oI4EOwK7ly-3UDrq8.mft
Manifest number: 1282
Signing time: Thu 08 May 2025 17:00:18 +0000
Manifest this update: Thu 08 May 2025 17:00:18 +0000
Manifest next update: Fri 09 May 2025 17:00:18 +0000
Files and hashes: 1: 6--mKTLhcJSvHElJeuoDt_lQE_Q.roa (hash: SXpjKVkVSr9zsLSxhubs4WsDg8DBpMmGqFFwLSfPmwo=)
2: RkVleaUXL8oI4EOwK7ly-3UDrq8.crl (hash: Q0lNJYcWv8HBGKl9TREKdRhSsji4QZ0FdO52YfTliJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/ec9e26-20f2-4e23-a08f-a34c855b5aab/1/RkVleaUXL8oI4EOwK7ly-3UDrq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/ec9e26-20f2-4e23-a08f-a34c855b5aab/1/RkVleaUXL8oI4EOwK7ly-3UDrq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RkVleaUXL8oI4EOwK7ly-3UDrq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 15:42:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b0:d7:3e:02:5d:1f:21:a2:87:2e:80:67:34:de:9f:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46456579a5172fca08e043b02bb972fb7503aeaf
Validity
Not Before: May 8 17:00:18 2025 GMT
Not After : May 9 17:00:18 2025 GMT
Subject: CN=b4096ec6ea434afcb1daed8d889e631879b178cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d4:a2:e7:0b:db:80:b6:9d:79:75:3d:14:bd:
0b:9c:fb:62:af:64:28:eb:9b:e8:df:f3:d6:fd:a9:
ca:4a:c8:a2:14:53:5f:75:9f:48:d1:fe:5a:c6:cd:
a2:70:43:b8:5d:09:5c:71:45:9c:b3:47:9e:dd:68:
81:f9:18:2e:02:2a:88:f4:c3:22:de:5b:80:18:32:
e9:22:e8:c9:59:99:6f:62:58:6d:7e:25:15:a8:53:
0e:31:e9:e9:a9:08:f5:6f:fa:a2:e0:d8:45:e8:1a:
90:c2:a5:f6:82:5e:15:c1:9a:78:ab:d8:0b:d2:74:
85:0a:d6:e2:df:ba:df:5d:78:84:b4:00:9b:50:a6:
ad:ef:92:e8:c9:c8:45:7d:b6:53:34:53:88:c4:3b:
30:6d:20:5d:12:6b:21:f7:1f:49:d6:7f:7a:05:1e:
c8:9d:c6:19:37:a9:d7:be:5e:f2:ac:45:f1:2e:cb:
aa:4c:e9:65:10:bd:3f:5c:bf:27:4b:b7:3c:46:e8:
81:b5:53:f5:66:1e:91:3e:44:56:af:31:de:7f:bd:
5d:2c:14:99:a9:26:c7:06:6b:b0:d0:c8:c6:f8:c4:
1f:6c:b7:da:72:b5:44:db:4c:f6:61:4f:28:77:89:
6f:b8:42:94:0c:c6:56:1a:6a:b8:e6:03:90:ba:0d:
b8:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:09:6E:C6:EA:43:4A:FC:B1:DA:ED:8D:88:9E:63:18:79:B1:78:CF
X509v3 Authority Key Identifier:
keyid:46:45:65:79:A5:17:2F:CA:08:E0:43:B0:2B:B9:72:FB:75:03:AE:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RkVleaUXL8oI4EOwK7ly-3UDrq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ec9e26-20f2-4e23-a08f-a34c855b5aab/1/RkVleaUXL8oI4EOwK7ly-3UDrq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ec9e26-20f2-4e23-a08f-a34c855b5aab/1/RkVleaUXL8oI4EOwK7ly-3UDrq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:7a:a9:c1:15:bf:fc:c5:e7:09:22:16:29:a8:cb:a4:c3:f8:
58:5e:b2:47:4f:0a:44:01:00:9f:f3:9b:cb:10:eb:d3:1a:31:
fa:6a:6f:e3:c6:09:cf:3c:d5:8d:b6:be:97:d6:e6:ad:9c:97:
d8:5d:0c:ec:9b:01:4d:2b:28:cd:73:a8:8d:c7:7d:35:ec:a0:
79:43:e6:29:0b:8e:48:0e:04:c0:fb:bf:b5:40:7f:59:7b:ee:
6e:10:a3:9c:15:04:01:b2:1c:fe:b6:da:66:d3:6d:d3:68:1b:
d7:6c:c0:1c:76:3c:b5:a0:fd:a4:98:ca:c2:42:85:b9:ea:c9:
bb:f0:38:3d:4f:60:b0:4d:a8:14:cc:c3:80:29:77:67:42:e0:
cb:35:ef:5f:0b:55:a8:43:15:33:3a:11:89:7c:47:71:74:46:
84:82:66:fe:89:18:79:1a:91:53:ca:30:dd:5d:60:99:9d:f3:
2a:cd:a0:27:fc:53:e2:78:8f:62:86:60:19:58:66:58:5f:32:
98:e9:7e:66:19:7a:a6:76:8a:bb:52:f5:71:be:7b:0a:7b:5a:
d5:df:b9:34:cf:0c:e3:f0:cc:e4:39:8c:df:87:20:34:67:2d:
6c:4d:4b:f9:70:a4:df:c1:6a:b4:1a:c8:08:66:ff:d8:5d:f0:
02:05:58:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 20:25:46 2025 by rpki-client