Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
File: RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft (raw, json)
Hash identifier: BJ/0ComtH/sn1QSnnS1KIEGgYqsCALjS7npjvzWHwuc=
Subject key identifier: 55:2C:7D:CC:AD:1C:09:29:E8:A2:E6:30:21:69:7C:F1:10:9E:FF:0F
Authority key identifier: 44:26:D9:B3:A7:85:43:B6:96:43:35:EE:19:41:CA:29:71:C5:69:4E
Certificate issuer: /CN=4426d9b3a78543b6964335ee1941ca2971c5694e
Certificate serial: 0196C0EF5DD032DD4FD25F8EFBD5FE53DB51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
Manifest number: 0E37
Signing time: Sun 11 May 2025 20:00:34 +0000
Manifest this update: Sun 11 May 2025 20:00:34 +0000
Manifest next update: Mon 12 May 2025 20:00:34 +0000
Files and hashes: 1: RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl (hash: rhJuj6OCcr4ouLXaQWaEIAhNNDkRGzbvsfbvon75pOU=)
2: evdpU8RxaI_pbdRiidwVOCapui0.roa (hash: gmEXsktEnud6XxBSpR/JYtLPKpbESxZW8V98Ytskm+o=)
3: zC0DwQFXhSD9GmfEt7gqZels6ME.roa (hash: Cq4uPzMv6jZuo+s6z3yPpwudom0heKSg9U70MId82ts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:ef:5d:d0:32:dd:4f:d2:5f:8e:fb:d5:fe:53:db:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4426d9b3a78543b6964335ee1941ca2971c5694e
Validity
Not Before: May 11 20:00:34 2025 GMT
Not After : May 12 20:00:34 2025 GMT
Subject: CN=552c7dccad1c0929e8a2e63021697cf1109eff0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d3:24:6c:ba:fd:41:17:c6:c6:ba:0c:79:98:
11:61:4a:95:e7:97:73:97:91:c0:7d:67:05:06:81:
09:03:4f:89:47:4f:63:c2:ca:80:54:93:4d:8a:6c:
66:52:c9:59:31:cc:43:d6:fb:b0:a6:d5:da:5b:6c:
12:1a:ce:8a:c1:28:1e:63:e2:6c:94:ef:03:e8:7d:
72:f0:2d:a9:3f:00:be:e2:3d:b0:ff:2c:93:d3:c5:
96:01:f7:b6:39:53:aa:7b:81:9d:31:86:92:39:1b:
83:aa:32:8c:55:82:32:ca:fc:cb:63:53:f0:e4:7f:
26:e2:f4:25:01:f9:91:64:f1:2c:f0:a2:2e:cf:31:
88:73:65:43:e6:7d:b8:7e:1f:85:30:02:06:4d:46:
07:eb:cb:84:6a:9e:20:7a:e3:9e:c7:f3:ae:e6:33:
bd:d1:34:34:0d:13:44:33:25:ac:fe:30:0f:20:4e:
a4:0a:99:c5:59:e7:42:30:5c:64:af:90:fe:4e:1c:
af:20:65:fa:ef:24:b4:89:77:bd:00:8b:48:7a:56:
16:95:fe:43:c2:73:28:5f:59:38:2b:f6:8e:1a:72:
97:67:12:fd:87:41:e2:bf:49:f6:06:60:87:08:fe:
05:67:23:2c:4e:ac:f1:0a:10:3c:24:32:cb:84:25:
7a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:2C:7D:CC:AD:1C:09:29:E8:A2:E6:30:21:69:7C:F1:10:9E:FF:0F
X509v3 Authority Key Identifier:
keyid:44:26:D9:B3:A7:85:43:B6:96:43:35:EE:19:41:CA:29:71:C5:69:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:c0:33:24:26:e7:d7:3d:65:d5:00:04:60:b0:f3:91:52:ed:
28:f7:85:42:78:c0:8e:e9:1b:f6:27:7b:37:1d:25:ca:fb:d0:
d8:46:19:ee:0f:fc:66:d7:55:14:24:01:fd:c2:4d:53:ba:68:
e6:56:a0:40:69:9c:8b:77:e2:45:76:fe:70:03:54:89:57:a6:
79:ca:90:e8:70:c2:cb:78:1c:ce:f1:e2:11:70:c8:2c:45:94:
bb:d1:43:40:3b:1a:f4:9f:ab:a4:d9:1a:1c:57:1b:3a:89:98:
db:ea:a5:0c:17:cd:2d:6d:a4:a7:ce:96:38:64:c9:72:29:8d:
99:8e:33:aa:b7:cc:00:25:68:3d:a7:79:8f:fd:56:15:da:84:
ad:ee:d5:13:65:9f:0b:5a:8e:91:54:86:5b:bb:ca:4e:a0:9f:
25:e9:68:51:97:0b:7c:93:dc:23:ba:44:4d:a0:88:87:ca:f7:
58:68:de:f4:a8:77:7b:b0:2d:0e:2b:38:43:77:77:e0:1e:e6:
67:8e:81:c9:23:cb:95:91:c5:15:1e:22:03:4d:0f:86:22:33:
a4:8f:d5:1f:3c:e9:c3:1d:84:40:07:b9:aa:cf:0f:f9:e7:9a:
12:d8:af:aa:d0:73:a6:35:bf:53:70:ae:0a:5a:f4:41:bf:f5:
e3:21:d2:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 01:33:28 2025 by rpki-client