Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
File: RENP2YwR2Nct84DKg-33n8wAhZ8.mft (raw, json)
Hash identifier: GNLG6jWZd3k4jm78Gab0Cm0vcAdzxHxIE/lx3C4r33Y=
Subject key identifier: 57:D0:7F:57:32:B4:54:1A:B3:74:52:74:9F:93:05:43:4A:52:44:56
Authority key identifier: 44:43:4F:D9:8C:11:D8:D7:2D:F3:80:CA:83:ED:F7:9F:CC:00:85:9F
Certificate issuer: /CN=44434fd98c11d8d72df380ca83edf79fcc00859f
Certificate serial: 0196B747783172A8D230F526DA432DBB3E39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RENP2YwR2Nct84DKg-33n8wAhZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
Manifest number: 099B
Signing time: Fri 09 May 2025 23:00:36 +0000
Manifest this update: Fri 09 May 2025 23:00:36 +0000
Manifest next update: Sat 10 May 2025 23:00:36 +0000
Files and hashes: 1: 0k2RQNwafgZ-e81VbpAz2vrqb3k.roa (hash: F4mQI6q3szQ65tq8yOXleP2UVhZpsKUbEGpteoYml/c=)
2: 8V7ejxEv_GEeH4w675eVpJxAMGA.roa (hash: dpmJ8CsMRM0G3BSxOyWtbvqZ7FYrfuSdRQhIjIL3rWg=)
3: RENP2YwR2Nct84DKg-33n8wAhZ8.crl (hash: wxAYsiUF+IrFYa9GRVWrAT7mVeTq14AZgjvH1qkru50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RENP2YwR2Nct84DKg-33n8wAhZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:47:78:31:72:a8:d2:30:f5:26:da:43:2d:bb:3e:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44434fd98c11d8d72df380ca83edf79fcc00859f
Validity
Not Before: May 9 23:00:36 2025 GMT
Not After : May 10 23:00:36 2025 GMT
Subject: CN=57d07f5732b4541ab37452749f9305434a524456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6e:53:e0:25:a6:20:6b:6b:e2:32:d3:91:cf:
bc:96:a7:d0:cd:2b:fe:ea:26:8d:28:c9:c5:34:c3:
ca:d0:0a:35:ae:20:53:e8:76:bc:38:22:26:ec:60:
2b:d4:4b:fb:2a:03:b1:30:1a:a0:a7:cc:c5:8f:ef:
39:c7:3d:ea:c9:68:90:f5:79:f0:14:42:70:4d:76:
a3:a6:2d:e8:0f:f0:78:2d:cf:f8:8a:d0:12:61:f0:
30:8b:6c:23:e6:6c:a8:eb:a9:d9:d1:4a:20:56:f2:
3d:70:4c:40:b0:a6:2e:fc:7e:b2:2b:67:9e:4d:62:
70:de:d1:22:62:ba:ee:ab:47:ad:21:40:a8:8e:ea:
ae:82:9f:24:54:78:de:5f:d7:3c:ba:d6:60:48:ec:
f2:37:39:e0:93:0b:b0:44:d4:58:fb:6b:6c:70:cf:
f8:96:a8:94:c2:1d:80:c3:07:04:6b:09:1a:40:c0:
65:d5:c2:45:35:34:fa:10:da:96:d9:6d:0b:5c:c6:
5d:a3:f0:0f:83:eb:5e:f3:a9:d8:37:f6:cc:26:9e:
84:81:32:3a:0a:99:b0:9c:6c:9a:6b:46:e3:76:ab:
03:9e:a5:fa:12:5c:86:d6:65:d5:4a:96:e3:06:25:
d0:6b:1d:e5:e9:2d:54:b2:96:82:06:88:77:e5:78:
65:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:D0:7F:57:32:B4:54:1A:B3:74:52:74:9F:93:05:43:4A:52:44:56
X509v3 Authority Key Identifier:
keyid:44:43:4F:D9:8C:11:D8:D7:2D:F3:80:CA:83:ED:F7:9F:CC:00:85:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RENP2YwR2Nct84DKg-33n8wAhZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:64:2c:ef:5c:88:3a:c3:8e:91:e9:76:eb:a1:22:91:ed:8f:
c0:54:e3:f7:22:a4:df:50:ee:5a:03:12:3b:f2:11:28:2b:ce:
6b:b9:c8:30:1e:3b:98:a0:4a:52:fe:41:23:c3:3f:bf:c0:75:
1c:4b:48:10:90:c5:1d:c2:64:48:5d:0e:c7:44:4b:44:3f:80:
93:37:b4:0b:e3:6c:5d:84:99:35:a9:dd:a6:fe:b1:66:ff:9a:
b7:9a:1e:ab:8c:89:41:82:0f:46:b4:06:93:28:f0:12:e6:f6:
12:09:ca:d8:3d:74:8e:24:fc:2a:46:95:f0:f8:fd:90:9c:d3:
3d:5d:7d:a8:e5:32:b2:7e:fd:a5:ab:2e:4d:f3:03:16:aa:28:
15:ba:53:fe:0a:c7:3e:c1:ea:11:c2:1f:b0:b5:f6:a4:f4:61:
40:3a:50:a1:80:1b:11:bf:dc:3d:c3:8f:46:b8:65:32:0e:e2:
63:5e:d5:26:b1:c8:dd:86:0d:86:32:47:86:33:ac:d6:66:f8:
18:c2:47:1e:aa:c8:64:58:ae:ad:33:83:1a:58:b3:d7:09:5b:
ee:63:6f:44:37:15:47:1e:29:f2:c3:c8:98:48:8a:ba:da:af:
7e:a2:bb:4a:c1:9f:2c:22:89:15:f6:5c:75:a4:0a:b2:5f:49:
e2:a3:25:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 04:43:02 2025 by rpki-client