Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.mft
File: Rg0xSfxQypeX9Q_engKggxNMUBk.mft (raw, json)
Hash identifier: +d0V8a1ty2JY6So4Wck0BpE/hHQFqu5Mppg22Xsj+Wk=
Subject key identifier: BE:31:89:06:71:61:06:E3:D8:14:A8:69:45:1D:FE:F0:63:BA:22:52
Authority key identifier: 46:0D:31:49:FC:50:CA:97:97:F5:0F:DE:9E:02:A0:83:13:4C:50:19
Certificate issuer: /CN=460d3149fc50ca9797f50fde9e02a083134c5019
Certificate serial: 0196A5AF89729B152B38270A5C0A3A9DAA7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rg0xSfxQypeX9Q_engKggxNMUBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.mft
Manifest number: 13EE
Signing time: Tue 06 May 2025 13:01:06 +0000
Manifest this update: Tue 06 May 2025 13:01:06 +0000
Manifest next update: Wed 07 May 2025 13:01:06 +0000
Files and hashes: 1: Rg0xSfxQypeX9Q_engKggxNMUBk.crl (hash: HScPVyRrEWnGZ8swiboHYaJOTNwCdRt34W3FpwLYO0Q=)
2: rFN0KDBiljkvhFQ66hAH56Hsc84.roa (hash: 2lh/B/WXfyLgwdob+PT24RTvz83sEjoawwppCzC07qk=)
3: ttl4gF5H4xVOsldpEtY--5SUL-g.roa (hash: SbdB5263yFvJJDlQfuHRPnaHcrA2J/RblHkI32JVk8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rg0xSfxQypeX9Q_engKggxNMUBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 13:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a5:af:89:72:9b:15:2b:38:27:0a:5c:0a:3a:9d:aa:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=460d3149fc50ca9797f50fde9e02a083134c5019
Validity
Not Before: May 6 13:01:06 2025 GMT
Not After : May 7 13:01:06 2025 GMT
Subject: CN=be318906716106e3d814a869451dfef063ba2252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c0:47:5b:6e:91:e8:17:32:47:71:bb:41:70:
40:c6:24:65:58:ae:d4:85:5d:f6:45:88:cc:a5:90:
3d:6d:a8:24:84:43:59:ea:47:05:1a:b5:81:88:6c:
d1:98:b5:e9:95:87:a9:54:6f:b5:5b:ca:68:92:a0:
a8:fe:81:ee:a9:47:c1:30:88:40:53:34:b1:a5:83:
81:ec:5f:b6:6e:7a:27:02:46:7c:7d:64:c1:01:0e:
0c:23:84:11:77:fa:f9:05:c5:cf:6c:a6:31:9b:41:
5b:11:26:73:15:9e:85:3c:21:83:0d:fc:06:9a:30:
17:50:d5:db:4f:a6:9f:78:8e:2d:3c:6d:4c:4c:96:
de:a9:63:46:f1:c4:67:66:a4:e8:c2:03:62:e7:c2:
51:f4:c2:d8:27:32:92:13:fd:ae:23:8e:69:5c:52:
e0:03:88:7e:dc:e3:4e:b7:0d:5c:b2:9c:3a:0a:d7:
50:f6:b6:7f:e4:21:ac:c8:1c:e1:dd:56:54:18:77:
28:80:27:90:a2:00:03:3b:09:59:aa:56:ee:0f:cc:
1c:ef:3c:ad:58:bf:b6:9b:46:f3:c4:b6:85:be:49:
86:c5:a7:21:bf:b1:55:d9:0e:ef:50:4a:63:c3:ec:
e2:30:69:14:94:b4:52:03:fc:e6:95:e6:9f:0d:94:
29:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:31:89:06:71:61:06:E3:D8:14:A8:69:45:1D:FE:F0:63:BA:22:52
X509v3 Authority Key Identifier:
keyid:46:0D:31:49:FC:50:CA:97:97:F5:0F:DE:9E:02:A0:83:13:4C:50:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rg0xSfxQypeX9Q_engKggxNMUBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:78:14:c7:bc:75:cc:d7:fe:a5:2f:fe:b5:5d:d4:c7:7e:6a:
ed:dd:db:22:13:b8:49:83:1d:20:97:6a:bc:4a:05:06:56:e0:
f5:fa:f1:31:2e:a1:99:43:7b:cf:ee:36:78:1d:8b:7a:f6:6b:
b4:36:e6:2e:d3:a4:72:49:3d:4c:63:fb:0e:63:2c:84:96:fb:
82:cc:ef:2d:2a:d1:00:62:57:a5:a1:6e:4b:07:9c:b8:a6:84:
08:96:ab:9b:69:f0:01:b0:de:64:99:f0:be:94:48:fe:00:3c:
08:90:11:df:f2:48:9a:b5:40:23:8b:de:20:5b:70:99:80:05:
c8:8b:52:85:39:e8:ce:5f:59:23:7d:41:ab:e2:7e:2e:e2:95:
dc:51:6a:09:0a:46:1f:b5:2e:51:b4:1e:17:2b:9b:f4:03:dd:
ed:54:d7:81:ae:5a:77:6e:4b:ba:f6:bf:34:f6:e0:45:be:19:
d3:2c:ba:2f:72:25:fe:ec:1d:b9:3b:c5:52:ca:2a:f9:33:4c:
d5:3a:62:29:de:50:74:fc:1d:02:f5:13:a0:ca:42:d9:a9:7c:
3f:c6:92:ea:3d:8e:c9:e5:31:da:f4:e2:f8:21:0c:4f:59:00:
b7:c9:52:88:2c:77:77:f9:1d:c8:78:b1:9c:58:fa:86:92:f1:
13:10:01:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 22:12:18 2025 by rpki-client