Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/dd944d-8faa-4cce-aafe-c050f4c05f29/1/REIuqj2u32uQIVnu2-lMqbfSKE8.mft
File: REIuqj2u32uQIVnu2-lMqbfSKE8.mft (raw, json)
Hash identifier: qFKX2RXRfdgbJ8Nu0EjxcKlWLi8KsPyilz2G8KZqCQo=
Subject key identifier: BA:25:28:9A:92:C3:4B:22:0E:E2:4A:86:57:16:F4:3D:DA:32:CB:21
Authority key identifier: 44:42:2E:AA:3D:AE:DF:6B:90:21:59:EE:DB:E9:4C:A9:B7:D2:28:4F
Certificate issuer: /CN=44422eaa3daedf6b902159eedbe94ca9b7d2284f
Certificate serial: 0196BAED9F9491B6D49BA80B8B63DBE3D824
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/REIuqj2u32uQIVnu2-lMqbfSKE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/dd944d-8faa-4cce-aafe-c050f4c05f29/1/REIuqj2u32uQIVnu2-lMqbfSKE8.mft
Manifest number: 0B66
Signing time: Sat 10 May 2025 16:00:56 +0000
Manifest this update: Sat 10 May 2025 16:00:56 +0000
Manifest next update: Sun 11 May 2025 16:00:56 +0000
Files and hashes: 1: REIuqj2u32uQIVnu2-lMqbfSKE8.crl (hash: DYsckzwIWtsPTehBTDz6H59qnr48aF0ThyAtiDuDWbo=)
2: pkwPVsxSdYAUrwekUiCsSfEtBsc.roa (hash: VAoyCYorOSAEGcSFlO8mKuQLxbXXAWAO6ekhAMd8Fps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/dd944d-8faa-4cce-aafe-c050f4c05f29/1/REIuqj2u32uQIVnu2-lMqbfSKE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/dd944d-8faa-4cce-aafe-c050f4c05f29/1/REIuqj2u32uQIVnu2-lMqbfSKE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/REIuqj2u32uQIVnu2-lMqbfSKE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:ed:9f:94:91:b6:d4:9b:a8:0b:8b:63:db:e3:d8:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44422eaa3daedf6b902159eedbe94ca9b7d2284f
Validity
Not Before: May 10 16:00:56 2025 GMT
Not After : May 11 16:00:56 2025 GMT
Subject: CN=ba25289a92c34b220ee24a865716f43dda32cb21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5a:8d:8d:8d:22:69:0a:77:3b:e5:88:9a:8f:
79:07:c5:83:72:15:88:0b:66:7e:14:8c:5c:d7:98:
6e:9c:24:42:89:e7:e2:79:f1:a7:8f:4d:36:88:89:
10:39:31:89:91:d8:4f:b6:48:a9:b1:db:5b:73:f0:
e1:7f:ec:8c:43:9b:ef:9f:18:fc:36:92:94:46:62:
b1:d6:09:39:28:c5:b9:10:28:44:76:ea:81:f4:60:
31:23:87:b8:dc:12:35:31:0c:ab:25:c6:35:b3:92:
d2:cd:39:24:a8:9f:e5:bc:c2:a5:bd:f5:c5:8c:34:
2b:80:6c:e0:ef:0f:8a:25:61:86:28:f9:f7:40:a4:
5b:14:ea:85:d6:db:10:80:d5:d3:67:28:c8:30:0c:
db:a8:1c:92:ff:17:5a:2a:52:84:52:e4:cf:57:b4:
72:47:c9:16:01:0c:9f:4d:ab:50:13:6b:22:7c:99:
f2:81:4e:0d:22:ac:82:88:c0:52:eb:04:0a:0f:4d:
9e:ad:1c:dd:eb:e3:ec:3c:53:ed:cb:9b:35:44:a9:
4f:f7:02:f3:d4:1a:e0:f5:b3:e1:30:01:5e:29:be:
47:49:3f:ca:b7:4d:d8:89:ab:47:cb:fd:e2:06:aa:
a6:4f:b3:33:4b:88:a5:27:b2:81:8a:ec:26:17:a9:
07:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:25:28:9A:92:C3:4B:22:0E:E2:4A:86:57:16:F4:3D:DA:32:CB:21
X509v3 Authority Key Identifier:
keyid:44:42:2E:AA:3D:AE:DF:6B:90:21:59:EE:DB:E9:4C:A9:B7:D2:28:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/REIuqj2u32uQIVnu2-lMqbfSKE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/dd944d-8faa-4cce-aafe-c050f4c05f29/1/REIuqj2u32uQIVnu2-lMqbfSKE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/dd944d-8faa-4cce-aafe-c050f4c05f29/1/REIuqj2u32uQIVnu2-lMqbfSKE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:fe:9f:09:5a:35:f7:53:06:bc:14:52:6c:39:2b:6a:53:87:
17:f0:52:27:68:dd:1e:87:ad:78:eb:95:32:95:b9:0c:0e:31:
78:31:4b:7c:64:df:8a:5c:0d:d3:26:36:97:d4:3c:18:28:02:
99:23:29:1c:e3:56:e7:33:cb:20:ca:6d:68:56:4f:98:0f:a7:
f2:d6:5d:38:93:36:a9:9c:db:de:70:ff:4d:a4:7e:ee:be:95:
ff:45:09:af:b6:03:ae:24:37:1b:92:8c:c6:d6:c9:95:2e:e8:
cf:b0:91:e6:36:8d:9f:fa:0d:f5:b9:37:5a:85:f3:f6:c4:ed:
3f:5c:a4:00:ea:c4:80:5a:2d:17:1e:84:d0:1f:38:f5:ee:e0:
71:d9:71:af:e8:84:ad:c2:6d:3b:79:80:f4:b9:e6:cb:9d:8f:
90:b3:be:0a:10:78:ab:e1:97:14:d5:04:70:03:31:ad:e7:da:
4c:7d:6d:4b:f3:7d:db:60:12:b8:fe:30:12:74:5b:c4:ce:05:
e1:b8:4c:76:88:07:b1:5f:1f:9c:10:19:22:53:9e:40:f9:ba:
d1:98:6e:c7:90:d2:1b:e4:01:14:08:aa:ac:3f:b0:e8:48:ad:
8b:63:7e:26:09:46:60:05:68:2c:9a:61:4e:83:21:df:15:bb:
60:27:f1:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 21:26:48 2025 by rpki-client