Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.mft
File: RcXBJi6D17-pAsLIYqFfHkLSVZE.mft (raw, json)
Hash identifier: gJoN48h0FDfAiuAaz46Ow04C/q1h+xXJr6LIbgRNeTs=
Subject key identifier: E5:70:76:52:33:E7:C3:90:3B:A7:59:36:90:76:13:A0:BE:1B:69:F4
Authority key identifier: 45:C5:C1:26:2E:83:D7:BF:A9:02:C2:C8:62:A1:5F:1E:42:D2:55:91
Certificate issuer: /CN=45c5c1262e83d7bfa902c2c862a15f1e42d25591
Certificate serial: 0196A0F6B5D4220C932E41A335873E009971
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RcXBJi6D17-pAsLIYqFfHkLSVZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.mft
Manifest number: 04F6
Signing time: Mon 05 May 2025 15:00:44 +0000
Manifest this update: Mon 05 May 2025 15:00:44 +0000
Manifest next update: Tue 06 May 2025 15:00:44 +0000
Files and hashes: 1: 85JP1EmlrjP9cMbgQ-NLAJZsWYU.roa (hash: MO0sgGxlXYh61dJ8SPvOD77mPT9iIScGfPHBaJnXid0=)
2: RcXBJi6D17-pAsLIYqFfHkLSVZE.crl (hash: 2XIEY5qJGpfUicNQFaQI6hnA5gbh8z7Uk8iNA3wVOOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RcXBJi6D17-pAsLIYqFfHkLSVZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:f6:b5:d4:22:0c:93:2e:41:a3:35:87:3e:00:99:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45c5c1262e83d7bfa902c2c862a15f1e42d25591
Validity
Not Before: May 5 15:00:44 2025 GMT
Not After : May 6 15:00:44 2025 GMT
Subject: CN=e570765233e7c3903ba75936907613a0be1b69f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:68:1b:d2:f7:b3:5f:cd:0b:52:25:b2:fb:42:
01:e5:eb:40:18:72:dc:77:4d:a0:90:f8:69:6b:02:
f6:f1:fb:92:4e:1b:44:7e:65:38:1b:a9:92:db:ed:
aa:fc:4b:fa:db:ad:47:d6:c0:c8:4e:fa:43:df:50:
69:d0:c2:e9:b0:bc:6f:7e:b9:d4:05:52:96:2b:75:
4b:ea:2b:b4:e8:62:d4:40:2f:44:ff:93:be:1e:19:
93:06:91:83:65:31:13:ce:7f:39:f3:36:88:53:76:
0a:58:50:3f:8e:a0:6d:00:4e:fc:80:ea:20:a7:f5:
fc:38:8c:2b:27:fa:c5:6e:40:c2:fb:38:17:55:0d:
8a:1a:37:04:7c:a9:a3:6d:61:ba:58:ac:5d:97:ba:
f8:d5:ef:3a:b1:79:f3:13:79:e9:80:e5:55:6d:c6:
a6:96:8a:5d:90:b0:0e:ef:5a:87:76:d9:62:fe:1d:
78:48:e2:71:b8:01:11:9a:ba:45:d8:b2:d9:60:05:
c6:cf:24:94:fb:fc:09:db:b8:ab:fc:06:a9:6d:9b:
7a:34:29:75:62:58:38:31:60:64:9d:c1:69:7a:0c:
ff:9f:2a:7c:11:90:af:64:c8:55:a0:82:55:fc:ca:
30:9b:95:a0:9d:8c:10:8c:bb:47:03:0a:bd:de:88:
e1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:70:76:52:33:E7:C3:90:3B:A7:59:36:90:76:13:A0:BE:1B:69:F4
X509v3 Authority Key Identifier:
keyid:45:C5:C1:26:2E:83:D7:BF:A9:02:C2:C8:62:A1:5F:1E:42:D2:55:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RcXBJi6D17-pAsLIYqFfHkLSVZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:36:25:c4:8b:ff:69:a0:19:7d:48:f4:5c:bc:df:c2:bc:e0:
d1:10:db:65:69:42:5c:65:c6:97:0a:bb:b5:1c:57:dd:78:e3:
a5:81:ed:7e:63:9e:fe:dd:8b:c5:e2:78:b0:50:15:bb:4e:4f:
eb:79:89:cb:a9:0c:75:f7:e1:ae:fb:f7:61:63:a3:70:08:03:
e0:79:1e:90:5a:46:ac:e2:3b:34:43:5f:55:34:7a:b2:a9:1d:
f9:fd:06:aa:9d:3a:ea:cc:39:b4:09:7e:ac:e8:60:4e:1e:2b:
a8:94:7d:21:b3:af:dc:a6:78:64:b8:a0:8e:10:3f:b0:2e:10:
50:7a:12:e7:8b:25:94:e3:74:e6:4d:0a:1d:f9:11:fe:4f:ad:
92:ab:06:1e:ee:03:0e:c0:38:0c:15:7e:45:19:6d:40:69:ad:
66:d4:9d:44:98:7f:0a:b7:fc:e2:be:ad:51:41:ac:da:c0:28:
ea:3e:d6:f2:2f:e9:b2:b3:ec:a9:ea:e8:90:ef:3b:b6:53:6c:
e0:df:c7:52:45:e5:b0:cb:a9:e6:1b:dc:82:47:34:df:04:d9:
de:87:51:72:46:ae:d8:97:0a:c2:0e:38:68:14:86:0e:e0:bd:
56:ae:98:f9:de:07:e4:cc:dc:00:e2:dc:d4:2f:0b:7c:0c:9d:
59:14:10:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 16:35:36 2025 by rpki-client