Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.mft
File: RHzUHZ5sz4AwbBtGvcC1d7HuLK4.mft (raw, json)
Hash identifier: pR6s+WD6c4Njw0EU4FH40uTLPV8N3oaT8cZWlZvIPLY=
Subject key identifier: 25:F6:04:1B:54:B7:DA:80:1F:2C:20:3D:51:98:FA:A2:1D:33:7F:F2
Authority key identifier: 44:7C:D4:1D:9E:6C:CF:80:30:6C:1B:46:BD:C0:B5:77:B1:EE:2C:AE
Certificate issuer: /CN=447cd41d9e6ccf80306c1b46bdc0b577b1ee2cae
Certificate serial: 0196C2A6F16DD1B4B421F43A989F72E6884F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.mft
Manifest number: 132D
Signing time: Mon 12 May 2025 04:00:42 +0000
Manifest this update: Mon 12 May 2025 04:00:42 +0000
Manifest next update: Tue 13 May 2025 04:00:42 +0000
Files and hashes: 1: RHzUHZ5sz4AwbBtGvcC1d7HuLK4.crl (hash: 6jByZLugEkb8VJebzG7YoE9fKjJXltUSV2caiWIYZ8M=)
2: UK2n5J82Y8mJ_ChH-Mf3D9V405E.roa (hash: tUUMnCPKY1tGYA08Lbr1dGnhLn6RW32Wd2MZ44NLy2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:a6:f1:6d:d1:b4:b4:21:f4:3a:98:9f:72:e6:88:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=447cd41d9e6ccf80306c1b46bdc0b577b1ee2cae
Validity
Not Before: May 12 04:00:42 2025 GMT
Not After : May 13 04:00:42 2025 GMT
Subject: CN=25f6041b54b7da801f2c203d5198faa21d337ff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:6f:55:ce:5c:7c:77:c7:89:9b:38:c6:62:f6:
20:73:89:83:56:15:05:9f:11:ad:78:6c:87:f8:c2:
44:4d:30:a1:19:71:40:47:30:f4:8f:6f:a8:b1:4a:
ef:21:b4:50:2e:7a:57:dd:a2:0f:f0:c2:4c:2f:d6:
e7:63:ca:80:07:82:19:bd:29:89:ed:2e:ee:ee:1e:
eb:53:74:ea:88:e3:df:a2:23:b4:67:9a:cb:79:fa:
be:c9:4c:cf:01:cc:98:6c:c6:31:c5:08:ec:d4:de:
84:ff:39:d7:6c:7a:eb:41:40:be:56:37:6c:b0:b4:
65:76:2d:c4:be:2a:35:c6:f2:80:26:df:65:bb:5b:
3f:2b:d4:47:80:17:77:36:21:a2:2d:e6:7e:7a:91:
5d:22:b7:28:f5:fa:0d:ac:9e:9c:05:c5:6c:82:08:
bc:2b:1a:69:1e:16:70:80:88:c0:c9:f9:61:2c:82:
4a:f6:08:18:1e:38:38:d5:f6:73:49:f7:0e:88:e5:
1f:77:1e:68:28:a0:bd:11:5b:5c:e1:a5:6f:84:49:
8f:3f:48:82:d8:3a:77:72:b9:0c:6b:69:7a:01:65:
1f:ea:89:f6:f2:75:a9:ed:e2:43:54:e7:83:44:f5:
af:ff:47:f7:0d:fd:45:da:cf:26:85:ed:8a:46:6d:
2e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:F6:04:1B:54:B7:DA:80:1F:2C:20:3D:51:98:FA:A2:1D:33:7F:F2
X509v3 Authority Key Identifier:
keyid:44:7C:D4:1D:9E:6C:CF:80:30:6C:1B:46:BD:C0:B5:77:B1:EE:2C:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:35:d4:d6:f3:0f:6b:57:80:89:44:a1:d6:b3:73:d7:12:da:
94:bc:80:76:a7:50:71:fb:34:c8:4a:93:2e:f1:df:f7:85:7a:
54:d6:d8:fa:99:d2:73:9c:a8:57:84:12:51:e0:e1:9f:90:22:
6f:b1:90:e0:8d:1b:58:33:d1:5e:23:e7:bb:aa:44:fb:dc:75:
88:c8:5a:29:f6:af:10:af:0f:19:53:d5:13:8b:1f:49:75:7c:
d2:98:e8:ed:fe:93:50:fd:4d:05:af:f1:df:49:39:b1:9e:13:
c6:ac:c2:e0:61:90:21:63:79:7f:d6:88:bb:e9:0f:00:ae:c5:
38:17:fc:00:c6:55:03:58:40:d5:5a:2b:8d:38:60:01:fd:65:
8c:33:ff:97:ce:4f:9f:69:a5:c4:c4:45:76:2c:2a:41:8a:d1:
bf:8e:31:0c:11:72:37:40:e9:a0:7f:1a:4a:2f:2c:70:55:db:
a1:66:5f:14:d1:9b:f4:b4:17:0c:d5:39:2a:10:0a:f2:01:5a:
30:67:23:95:05:79:fb:53:50:73:d1:6c:94:df:df:d9:a1:28:
d4:09:23:6e:66:cb:b5:a6:3b:f1:da:8c:7a:4e:97:35:0b:fb:
74:88:cd:2f:a0:85:dd:f5:20:71:fe:88:bd:e5:56:38:88:79:
e2:1a:90:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:21:33 2025 by rpki-client