Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/1b40ff-b1e1-4951-9165-23bb39a83481/1/Rjh8VrMx_4S8ENiskOHiwW8XI0U.mft
File: Rjh8VrMx_4S8ENiskOHiwW8XI0U.mft (raw, json)
Hash identifier: Aow4LgqssdgjFYxo+RGdBZyArSdM8ubmzNA9ZCQwnuk=
Subject key identifier: 21:0B:22:C0:EB:88:AC:7F:44:61:DD:AD:1F:F2:9B:A8:48:14:D0:06
Authority key identifier: 46:38:7C:56:B3:31:FF:84:BC:10:D8:AC:90:E1:E2:C1:6F:17:23:45
Certificate issuer: /CN=46387c56b331ff84bc10d8ac90e1e2c16f172345
Certificate serial: 0196CACE4226E7C48C00A04185069616AFDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rjh8VrMx_4S8ENiskOHiwW8XI0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/1b40ff-b1e1-4951-9165-23bb39a83481/1/Rjh8VrMx_4S8ENiskOHiwW8XI0U.mft
Manifest number: 153C
Signing time: Tue 13 May 2025 18:00:36 +0000
Manifest this update: Tue 13 May 2025 18:00:36 +0000
Manifest next update: Wed 14 May 2025 18:00:36 +0000
Files and hashes: 1: Rjh8VrMx_4S8ENiskOHiwW8XI0U.crl (hash: Gyv8saror+ah/cH2fyVtL7aVSFGDM75Ax6rJIRwnURk=)
2: xAHFWshzCwZ9iWzPHD319yAWavE.roa (hash: LAjKykzMh8QraV6MgCdF6nP15mOVTD1M9V0STezqNjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/1b40ff-b1e1-4951-9165-23bb39a83481/1/Rjh8VrMx_4S8ENiskOHiwW8XI0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/1b40ff-b1e1-4951-9165-23bb39a83481/1/Rjh8VrMx_4S8ENiskOHiwW8XI0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rjh8VrMx_4S8ENiskOHiwW8XI0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 18:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:ce:42:26:e7:c4:8c:00:a0:41:85:06:96:16:af:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46387c56b331ff84bc10d8ac90e1e2c16f172345
Validity
Not Before: May 13 18:00:36 2025 GMT
Not After : May 14 18:00:36 2025 GMT
Subject: CN=210b22c0eb88ac7f4461ddad1ff29ba84814d006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:60:bb:1f:94:50:d6:d6:ba:cf:9e:50:38:2e:
c9:59:d0:c7:95:23:2f:e3:c7:95:74:5c:7c:4e:a4:
d3:63:4a:3c:d2:a4:68:37:08:fe:96:7e:ed:01:2b:
a7:44:de:db:fc:07:92:15:3a:b8:e1:7d:62:0f:30:
eb:80:b4:f6:7c:7a:d3:58:43:c0:4a:d5:6c:6a:12:
bf:54:7e:92:e5:1e:a9:53:90:57:e1:99:9c:1d:32:
02:da:57:93:88:45:89:09:c9:9c:aa:71:bb:ae:87:
38:38:eb:33:29:ca:be:e4:0d:b6:8b:e6:d3:eb:0b:
11:9d:16:ef:44:24:79:30:1b:e7:4f:01:9f:32:13:
e0:70:2b:25:da:ab:7a:da:d7:3a:01:53:ed:07:db:
08:d8:02:90:a9:ff:19:88:71:01:5e:0c:25:c0:25:
09:3c:5e:6c:3b:ac:19:ec:00:63:92:9e:17:04:d5:
ec:5f:91:51:d8:67:5d:48:78:74:d3:be:27:05:81:
b9:f4:40:33:b5:a3:e1:69:13:7b:cc:83:d8:8e:73:
16:cc:80:ae:f7:f7:2c:14:49:ce:b2:1a:cb:b0:05:
a5:44:85:02:b4:cf:54:9a:2e:1d:15:59:61:be:7c:
05:f9:0c:58:9b:06:00:79:21:34:d9:24:6b:99:95:
eb:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:0B:22:C0:EB:88:AC:7F:44:61:DD:AD:1F:F2:9B:A8:48:14:D0:06
X509v3 Authority Key Identifier:
keyid:46:38:7C:56:B3:31:FF:84:BC:10:D8:AC:90:E1:E2:C1:6F:17:23:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rjh8VrMx_4S8ENiskOHiwW8XI0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1b40ff-b1e1-4951-9165-23bb39a83481/1/Rjh8VrMx_4S8ENiskOHiwW8XI0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1b40ff-b1e1-4951-9165-23bb39a83481/1/Rjh8VrMx_4S8ENiskOHiwW8XI0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:73:ac:89:8a:41:91:71:26:01:31:5b:03:41:07:f6:46:cd:
63:9b:af:73:05:86:63:fd:a4:e0:77:61:66:4c:ed:a2:6b:a2:
c8:b7:6f:5c:33:53:61:f7:02:0e:d7:28:cf:59:74:0f:51:d4:
96:44:a7:25:23:3a:44:04:f0:91:04:9c:96:1f:28:c3:32:c1:
47:f5:5e:9a:6e:81:02:9e:77:72:a3:d9:cf:b8:e1:67:48:a5:
84:38:36:49:53:41:0f:ca:01:ca:1a:70:17:cd:10:bf:3c:b9:
be:bb:d4:df:b4:8a:85:55:c7:4d:0b:5f:64:c0:64:3b:14:a4:
4e:fe:c7:75:05:18:1b:d1:06:19:49:8a:ec:53:e0:8c:41:ea:
bd:36:ae:ae:71:7c:9e:ad:75:30:e3:01:6c:4c:a2:91:46:cf:
99:91:dd:36:26:72:96:59:e2:8c:6b:1a:93:e4:f3:9b:5e:c9:
48:fc:44:99:8f:cb:ed:71:80:df:34:4a:59:e6:b0:1a:64:98:
65:1a:5e:e4:52:cd:ea:f5:51:3c:ae:6d:56:0d:67:5f:6e:02:
41:b1:32:82:1b:2c:b6:57:1e:98:83:6d:79:08:14:f0:b1:a9:
ea:a5:1c:6f:50:56:b2:3a:a2:c4:71:c2:af:3d:7d:de:f8:1a:
7d:f0:39:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 01:31:57 2025 by rpki-client