Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.mft
File: RfnjL_avPV5dd727mNo30LjkRRk.mft (raw, json)
Hash identifier: j+j9qwE++pLvvY/naNx71gjkcNl5rtkkuKASDbFc/1E=
Subject key identifier: 53:22:AC:D4:97:A4:48:69:D7:F4:AB:BD:2B:3E:3F:43:9B:F8:E5:0D
Authority key identifier: 45:F9:E3:2F:F6:AF:3D:5E:5D:77:BD:BB:98:DA:37:D0:B8:E4:45:19
Certificate issuer: /CN=45f9e32ff6af3d5e5d77bdbb98da37d0b8e44519
Certificate serial: 0196B6D9CCE23BC812E1284F40A35C981FC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RfnjL_avPV5dd727mNo30LjkRRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.mft
Manifest number: 153D
Signing time: Fri 09 May 2025 21:00:49 +0000
Manifest this update: Fri 09 May 2025 21:00:49 +0000
Manifest next update: Sat 10 May 2025 21:00:49 +0000
Files and hashes: 1: RfnjL_avPV5dd727mNo30LjkRRk.crl (hash: +pHcAE43O1OcrVYYzY6NApYyTkpGHaUbJxtFQg3Fqac=)
2: SFYQtUf8h78RR3sYV-5vV65d0GI.roa (hash: k8VC+Pkqjm+Q/34YSS05tLomED6YZDaGOWiNO2M8zlM=)
3: cQWK86wyTE6QykBYGD0IQXVxmGU.roa (hash: YU+GQaBeZSBZ4pnqlkuWqIUXGdhcGs2HRIrroMn5n04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/RfnjL_avPV5dd727mNo30LjkRRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 21:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b6:d9:cc:e2:3b:c8:12:e1:28:4f:40:a3:5c:98:1f:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45f9e32ff6af3d5e5d77bdbb98da37d0b8e44519
Validity
Not Before: May 9 21:00:49 2025 GMT
Not After : May 10 21:00:49 2025 GMT
Subject: CN=5322acd497a44869d7f4abbd2b3e3f439bf8e50d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:61:30:21:d6:31:06:db:10:11:8e:bc:84:1d:
ee:ef:98:b9:87:40:d3:0d:eb:f4:0e:70:30:cf:7f:
be:bb:cb:af:bf:cc:78:55:b0:38:fb:43:01:f0:35:
d3:8d:86:41:d8:39:61:b6:c2:bb:fc:79:0a:24:f0:
db:f9:a2:58:f5:39:9b:e0:a5:1a:41:b9:a0:31:ac:
78:dd:2d:2f:67:ae:cc:d7:51:a7:c3:5f:87:86:c1:
2c:bc:37:20:a5:37:8a:fb:8e:32:5e:c8:59:92:73:
ae:45:23:0a:fe:c8:89:db:eb:0a:a2:5b:01:f0:82:
3d:19:e7:4e:c6:3d:e2:59:05:c1:93:da:5c:d7:9a:
e4:df:9b:c5:df:e7:06:f7:7b:ac:18:b1:89:d0:4e:
fd:c2:79:85:99:f3:8b:34:fd:c8:1b:d6:04:7b:b0:
db:fa:c3:8a:8f:4d:83:73:ca:70:ff:78:31:12:e6:
eb:07:b9:fc:3b:81:37:1f:fe:5d:64:b0:66:93:7a:
db:eb:b6:7f:6f:fd:9a:49:b1:f5:2f:6e:18:c8:ae:
fd:b0:d1:e9:18:40:a8:b3:a4:cc:e3:64:86:da:71:
36:48:91:93:06:e9:a7:18:b7:24:bc:a0:20:c5:fb:
11:a8:4b:ca:3c:06:84:5f:50:0d:ea:59:e6:03:9e:
a8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:22:AC:D4:97:A4:48:69:D7:F4:AB:BD:2B:3E:3F:43:9B:F8:E5:0D
X509v3 Authority Key Identifier:
keyid:45:F9:E3:2F:F6:AF:3D:5E:5D:77:BD:BB:98:DA:37:D0:B8:E4:45:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RfnjL_avPV5dd727mNo30LjkRRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:fa:e0:b4:0d:51:11:d3:b3:fb:17:9e:38:70:79:79:23:af:
64:be:2a:75:cb:63:c4:03:dc:28:73:74:d0:7f:57:40:b9:16:
82:f2:05:00:c7:db:b8:30:9c:64:02:8b:63:fd:c1:85:3b:af:
18:25:86:7d:ab:a8:33:b9:6d:8e:3d:ba:4c:1c:14:17:f4:e5:
3c:89:3c:ef:a6:25:de:70:14:18:3e:95:60:a5:20:17:ba:b3:
ed:4a:42:08:81:a0:ef:c1:aa:ec:81:8c:d4:15:3d:d3:ae:fd:
5e:5e:13:b5:83:21:85:b6:ce:0f:2d:28:5e:30:c1:09:6d:06:
e8:2f:d6:2d:fc:e3:05:67:05:ee:83:42:0a:8a:11:0e:86:b6:
a8:17:1e:89:16:91:f6:67:72:44:01:8a:2c:65:cf:ca:ce:0e:
be:12:bf:95:7c:22:da:b3:23:47:21:3d:46:21:a7:d2:9a:69:
d1:17:60:d9:f4:db:68:8b:2c:b7:d8:47:10:6b:ce:df:2e:ff:
88:1e:5d:1b:3c:df:05:ae:45:c0:78:39:71:b9:b7:43:09:62:
96:3e:e8:fd:38:25:07:29:13:6b:5d:8c:ae:20:30:15:db:52:
84:27:96:c5:e9:7c:9a:96:fd:d7:74:4e:48:cf:da:ff:ac:1d:
c9:0c:2c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 06:30:59 2025 by rpki-client