Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/c9f33b-2f1b-4a11-a21d-9a6bd011f8f6/1/rvHu-qdX046xBPpMuk2WK3LlK1I.mft
File: rvHu-qdX046xBPpMuk2WK3LlK1I.mft (raw, json)
Hash identifier: THWpNedrSlaex/3DbDFHRkZ1nRgUyPJzHEtEYXW5XyU=
Subject key identifier: 78:F5:0C:29:87:7E:DD:76:27:F4:02:7D:52:80:17:9A:9A:D7:03:7A
Authority key identifier: AE:F1:EE:FA:A7:57:D3:8E:B1:04:FA:4C:BA:4D:96:2B:72:E5:2B:52
Certificate issuer: /CN=aef1eefaa757d38eb104fa4cba4d962b72e52b52
Certificate serial: 0196B5C7C1D7B431F13269CCF405998EEA0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rvHu-qdX046xBPpMuk2WK3LlK1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/c9f33b-2f1b-4a11-a21d-9a6bd011f8f6/1/rvHu-qdX046xBPpMuk2WK3LlK1I.mft
Manifest number: 1536
Signing time: Fri 09 May 2025 16:01:29 +0000
Manifest this update: Fri 09 May 2025 16:01:29 +0000
Manifest next update: Sat 10 May 2025 16:01:29 +0000
Files and hashes: 1: jtrE-ZquFgpFsUyQd2ruDZJ4V1Y.roa (hash: DLSZmdArA6I562nrgAPaSvfYMqezrmvR6p+K4KjZ8d8=)
2: rvHu-qdX046xBPpMuk2WK3LlK1I.crl (hash: IPzI+2YbNOTcY/Z6Z+SYmo6XIKrWRK2s1Z0S3HHoJF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/c9f33b-2f1b-4a11-a21d-9a6bd011f8f6/1/rvHu-qdX046xBPpMuk2WK3LlK1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/c9f33b-2f1b-4a11-a21d-9a6bd011f8f6/1/rvHu-qdX046xBPpMuk2WK3LlK1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/rvHu-qdX046xBPpMuk2WK3LlK1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 16:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b5:c7:c1:d7:b4:31:f1:32:69:cc:f4:05:99:8e:ea:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aef1eefaa757d38eb104fa4cba4d962b72e52b52
Validity
Not Before: May 9 16:01:29 2025 GMT
Not After : May 10 16:01:29 2025 GMT
Subject: CN=78f50c29877edd7627f4027d5280179a9ad7037a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a4:b3:83:6f:87:e7:af:29:b4:5d:ff:09:da:
98:dc:dc:a7:e4:20:8f:2f:87:ce:c0:72:45:d6:32:
30:41:7c:ae:e7:a3:32:2d:68:8e:de:7f:ec:84:f2:
bc:65:b9:a2:f9:b5:22:77:76:68:b6:8a:35:c0:bf:
0a:73:bb:75:79:74:79:0a:2c:83:ab:3d:ab:b9:b0:
94:00:4a:ee:67:e1:9c:3a:81:f5:a2:03:ab:00:4e:
ad:d2:9c:7e:68:c8:f5:4d:0c:66:ca:e5:94:2e:5d:
59:7a:13:31:05:f6:6f:4d:34:06:24:c9:13:fa:8e:
eb:f1:ab:d1:2c:fb:91:07:a6:b0:18:59:b6:ec:db:
a3:17:49:13:26:8c:87:c9:3c:e4:18:1a:03:b9:7b:
8f:07:f2:2e:56:05:d7:58:7d:61:55:d2:58:97:15:
76:6e:16:c0:20:c1:52:bc:6f:61:08:55:4f:42:84:
3b:b9:32:b5:3d:0e:73:7f:d6:e6:3f:df:ad:14:a4:
96:38:f6:27:d0:b1:0a:3c:6e:57:a0:86:f1:f4:d4:
62:62:6f:71:d5:40:4e:10:7e:0a:1c:1c:08:41:05:
ad:d4:d7:ce:83:96:ff:65:90:fa:b5:44:6b:af:aa:
35:10:10:32:f1:15:db:cf:d9:12:f1:f1:b0:16:db:
e2:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:F5:0C:29:87:7E:DD:76:27:F4:02:7D:52:80:17:9A:9A:D7:03:7A
X509v3 Authority Key Identifier:
keyid:AE:F1:EE:FA:A7:57:D3:8E:B1:04:FA:4C:BA:4D:96:2B:72:E5:2B:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rvHu-qdX046xBPpMuk2WK3LlK1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c9f33b-2f1b-4a11-a21d-9a6bd011f8f6/1/rvHu-qdX046xBPpMuk2WK3LlK1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c9f33b-2f1b-4a11-a21d-9a6bd011f8f6/1/rvHu-qdX046xBPpMuk2WK3LlK1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:4b:ee:8a:1a:f1:35:ac:ab:8c:68:cd:3b:c3:64:05:01:c4:
35:d7:92:04:52:21:b3:69:11:60:1b:e0:f5:b0:93:a1:75:31:
d2:01:8b:33:cd:d3:4e:0f:c8:f4:57:e4:cb:aa:1f:00:13:04:
b0:9e:30:c0:9f:5f:94:24:51:23:30:bd:00:8c:78:77:83:38:
10:77:40:89:bb:5d:3d:24:91:b5:2f:fb:87:8e:bb:a1:0d:5c:
c5:3d:e1:fe:f0:2c:d8:27:f9:6d:3d:8d:0f:62:5a:c1:14:9b:
35:cd:ea:7b:22:fd:08:d6:db:81:2a:55:a2:d8:e9:66:59:60:
4a:8c:7f:45:6e:3b:9e:76:26:7a:c6:54:93:54:d9:52:bd:79:
91:b3:c0:99:de:33:d2:90:34:70:6c:80:31:e1:0c:86:e2:70:
77:a0:75:7b:23:ba:73:31:b8:a4:42:ed:59:10:47:8f:3e:ee:
73:25:12:f8:23:7f:ec:a7:19:eb:ba:1a:30:df:bb:d8:44:2c:
34:bf:87:db:75:a4:b7:e7:1f:3b:d4:ed:b7:7a:c9:7c:63:c2:
b2:61:2a:58:d2:94:8e:d5:b0:f7:dd:30:28:fb:c4:37:a7:01:
06:54:04:6c:8b:74:2e:63:d2:20:9c:2f:8d:bd:26:10:dd:99:
92:c3:9c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 22:10:37 2025 by rpki-client