Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/15c47c-2c7c-481c-bf89-807246ca7a24/1/RdGncWAlFxEzoyAslGKg6r1mBoI.mft
File: RdGncWAlFxEzoyAslGKg6r1mBoI.mft (raw, json)
Hash identifier: 2+pixEwwwYz/j8Biy/Iea3JKTZVPehdT4Da+QgZdAPY=
Subject key identifier: DF:19:CE:1F:47:21:88:07:CE:46:48:DA:A9:C0:64:90:C1:00:B9:D0
Authority key identifier: 45:D1:A7:71:60:25:17:11:33:A3:20:2C:94:62:A0:EA:BD:66:06:82
Certificate issuer: /CN=45d1a7716025171133a3202c9462a0eabd660682
Certificate serial: 0196C2394339AA373FABFA4518C8CC438BF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RdGncWAlFxEzoyAslGKg6r1mBoI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/15c47c-2c7c-481c-bf89-807246ca7a24/1/RdGncWAlFxEzoyAslGKg6r1mBoI.mft
Manifest number: 04CB
Signing time: Mon 12 May 2025 02:00:54 +0000
Manifest this update: Mon 12 May 2025 02:00:54 +0000
Manifest next update: Tue 13 May 2025 02:00:54 +0000
Files and hashes: 1: RdGncWAlFxEzoyAslGKg6r1mBoI.crl (hash: ZEoETKhmtyzAirm5M8ZnG54N2gS/7KbdtF27bDBNaoI=)
2: p6pII2yeX9CFzHUBZ-7ECA5XoLc.roa (hash: a0i/QIPJclzVoZAHggGCZw2DH9on4V8xPPUo2d8z17I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/15c47c-2c7c-481c-bf89-807246ca7a24/1/RdGncWAlFxEzoyAslGKg6r1mBoI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/15c47c-2c7c-481c-bf89-807246ca7a24/1/RdGncWAlFxEzoyAslGKg6r1mBoI.mft
rsync://rpki.ripe.net/repository/DEFAULT/RdGncWAlFxEzoyAslGKg6r1mBoI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:39:43:39:aa:37:3f:ab:fa:45:18:c8:cc:43:8b:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45d1a7716025171133a3202c9462a0eabd660682
Validity
Not Before: May 12 02:00:54 2025 GMT
Not After : May 13 02:00:54 2025 GMT
Subject: CN=df19ce1f47218807ce4648daa9c06490c100b9d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:da:6c:a4:a4:0d:5f:cc:16:01:d8:fb:94:cd:
9d:9a:6b:3a:a9:da:42:a3:1f:c0:46:3f:68:67:d5:
f4:8f:88:89:91:de:08:9c:1e:c4:e3:80:1b:bd:72:
30:eb:66:63:ba:b3:3e:48:ba:cf:5b:73:fa:fb:61:
c2:39:a7:65:83:f5:f8:fc:07:a2:88:2a:53:fe:a7:
31:ed:16:5b:92:da:9e:82:4e:a2:02:ec:00:70:3e:
65:6c:58:e8:5a:1c:85:e3:24:0f:41:c9:a9:55:0c:
e0:57:e1:eb:36:32:d8:be:06:93:2f:5c:0b:33:ec:
36:99:e1:f2:ce:23:ee:8f:f3:5d:77:54:22:e6:2e:
de:84:97:ca:d6:d7:07:0f:30:ef:be:36:22:92:58:
a3:65:f9:07:c8:f2:92:56:b8:1c:8f:5c:9b:32:06:
cf:c0:69:53:32:9a:4a:c3:9c:c3:b1:5a:2e:d9:9e:
1a:23:4d:d3:10:7c:55:a9:22:e9:23:fe:77:d3:1f:
74:6f:44:72:4d:4d:c4:fb:e3:8b:ad:8a:4b:94:3c:
4a:e1:14:e2:49:37:dc:77:53:22:b8:f6:4a:98:0d:
57:1a:0f:d7:37:1b:9f:07:96:db:97:f5:53:a5:cc:
b4:31:de:cc:02:23:e7:84:76:7b:d5:2e:68:69:4d:
e9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:19:CE:1F:47:21:88:07:CE:46:48:DA:A9:C0:64:90:C1:00:B9:D0
X509v3 Authority Key Identifier:
keyid:45:D1:A7:71:60:25:17:11:33:A3:20:2C:94:62:A0:EA:BD:66:06:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RdGncWAlFxEzoyAslGKg6r1mBoI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/15c47c-2c7c-481c-bf89-807246ca7a24/1/RdGncWAlFxEzoyAslGKg6r1mBoI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/15c47c-2c7c-481c-bf89-807246ca7a24/1/RdGncWAlFxEzoyAslGKg6r1mBoI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:46:d3:f8:b8:80:fa:de:a0:0e:38:b5:96:a0:d1:5b:1c:ee:
9e:1f:d4:18:ca:81:0d:98:10:0d:48:89:14:95:5f:7e:17:d8:
63:89:59:f0:cc:69:6f:3d:77:96:ba:45:38:e7:11:13:d1:6e:
81:08:26:a4:ce:59:ec:01:83:86:6e:1b:17:b2:c5:25:95:b0:
ce:58:5e:27:77:8f:5c:7f:6f:97:6b:de:43:87:3a:9b:f3:ec:
f8:40:f6:95:cc:b6:2c:83:d3:08:c4:83:30:01:e0:6d:91:54:
6a:6d:d6:11:f1:cf:8e:05:19:9b:5f:6e:49:f7:07:44:f0:bb:
e4:9b:14:d9:cf:30:5f:d9:36:99:00:46:fb:17:60:61:79:bd:
87:97:33:8d:8f:3e:e0:73:c9:e3:b8:38:ee:fd:4f:78:77:9d:
c5:4d:1e:4e:05:70:46:8d:5b:70:52:2c:96:af:f9:03:8d:44:
c7:d7:f2:03:a0:3a:6b:49:0c:ee:40:28:a1:c4:b3:03:17:12:
92:0d:6f:5a:b1:43:19:d1:77:f5:6f:d1:94:b5:b1:22:e6:4e:
10:96:6d:70:d5:94:bd:5e:b5:8b:00:16:fc:92:58:57:14:6f:
d1:1b:c9:37:e3:7c:a7:5b:96:f0:11:16:d7:7e:f5:dd:b0:63:
47:6d:a0:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:43:41 2025 by rpki-client