Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.mft
File: rfRJdaXb2_gjtKCmt-65mxSENn4.mft (raw, json)
Hash identifier: /yDtFxxZ+fN04eJL7JQKYiCms/Hu4Oski8pWQmViihA=
Subject key identifier: 27:61:B3:F3:B2:56:1D:2D:83:BD:1E:3C:C3:58:5C:11:E1:C4:90:1A
Authority key identifier: AD:F4:49:75:A5:DB:DB:F8:23:B4:A0:A6:B7:EE:B9:9B:14:84:36:7E
Certificate issuer: /CN=adf44975a5dbdbf823b4a0a6b7eeb99b1484367e
Certificate serial: 0196B2C64D8889D230268FD84CBCE4F53E60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfRJdaXb2_gjtKCmt-65mxSENn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.mft
Manifest number: 04C2
Signing time: Fri 09 May 2025 02:01:02 +0000
Manifest this update: Fri 09 May 2025 02:01:02 +0000
Manifest next update: Sat 10 May 2025 02:01:02 +0000
Files and hashes: 1: R4XHwh-uR65EL_DdpXZF6OARJ4Q.roa (hash: iFcX7qqj7I+Qr0pVVXkrPFoUP0jPJo5pY3SNhZeIPSE=)
2: rfRJdaXb2_gjtKCmt-65mxSENn4.crl (hash: sKn6vnCW5NsN3ncoYdXB7kstP/GcoyQR+tPIaZtU2KY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rfRJdaXb2_gjtKCmt-65mxSENn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b2:c6:4d:88:89:d2:30:26:8f:d8:4c:bc:e4:f5:3e:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf44975a5dbdbf823b4a0a6b7eeb99b1484367e
Validity
Not Before: May 9 02:01:02 2025 GMT
Not After : May 10 02:01:02 2025 GMT
Subject: CN=2761b3f3b2561d2d83bd1e3cc3585c11e1c4901a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:08:ad:1a:3c:bf:18:74:3f:c5:02:32:5e:8d:
79:80:b3:7c:4a:9a:12:63:fd:6d:b9:d9:d3:bb:5d:
77:94:fe:38:3e:a6:f9:59:d5:61:91:a0:9d:d0:ab:
00:16:ef:eb:1c:14:8b:5c:e7:bf:a3:8e:54:36:a3:
fd:bd:79:30:64:43:bb:8f:1e:9c:c5:54:0b:3b:67:
31:a5:8b:fc:cb:4a:c6:c0:47:1d:c6:15:24:9c:6c:
39:a4:bc:95:9c:8b:6d:00:53:b3:9a:87:d6:51:3b:
17:28:e3:b3:7f:6e:fb:80:8d:9f:20:e1:1e:69:0f:
58:9e:63:d3:fe:2d:31:af:a7:dd:69:09:cd:78:f0:
e6:d4:30:c2:1a:6a:0e:8a:c4:6a:c7:11:9a:36:24:
ff:89:5d:f4:b7:8a:82:e2:69:38:4c:f4:fe:48:f1:
ee:93:2a:b8:d5:29:f7:80:c1:59:78:9a:2e:50:34:
c2:77:77:df:3e:cb:30:ec:6c:90:5d:69:bd:22:ac:
8a:15:9f:c2:9e:ff:aa:22:bd:3e:62:60:a0:0b:ef:
2b:28:a8:d6:c0:9e:0d:58:56:1f:50:a9:b7:a0:61:
bb:a5:c9:4b:44:94:d4:0a:45:30:ed:79:a0:ba:47:
cb:36:6f:0e:72:b2:eb:7f:6d:49:2b:d4:99:74:01:
cc:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:61:B3:F3:B2:56:1D:2D:83:BD:1E:3C:C3:58:5C:11:E1:C4:90:1A
X509v3 Authority Key Identifier:
keyid:AD:F4:49:75:A5:DB:DB:F8:23:B4:A0:A6:B7:EE:B9:9B:14:84:36:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfRJdaXb2_gjtKCmt-65mxSENn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:90:20:8f:c1:1b:ae:e3:d3:e0:44:07:82:a3:47:44:31:d1:
0a:73:27:21:76:8d:c1:ce:9b:c8:05:b6:e1:57:e8:bf:5d:47:
7a:26:e9:21:7a:fb:ac:25:c1:ef:36:94:97:fd:99:f5:dd:81:
17:e4:88:2c:4c:65:3c:bb:73:ad:0e:fb:7a:10:d6:bb:31:d6:
c5:23:2b:d6:39:2e:b0:09:33:5a:e1:05:81:55:ed:ed:c3:42:
b0:a9:39:b3:bc:0c:d9:a8:cc:fd:da:4b:2a:57:54:2c:62:93:
fc:64:f7:14:78:b2:0d:fb:1d:80:68:cc:cc:5b:8d:2e:a5:7d:
c4:bc:e8:ba:de:21:a7:83:d1:ef:ad:97:b4:ac:e1:18:7c:30:
9d:a4:de:94:f6:f0:07:32:58:68:65:9b:8d:79:4d:55:14:f6:
c3:9f:f9:49:e3:87:24:75:37:96:23:b0:15:3d:23:bb:41:e7:
5c:ee:87:3f:20:da:22:73:fe:ff:22:68:69:cd:f5:14:16:bd:
85:2d:7a:8f:f7:7b:b7:91:d2:9c:ab:8b:4f:90:f9:6c:72:6f:
c0:7b:68:75:17:8d:86:0e:5f:5e:f2:36:15:93:ae:dc:36:d6:
2b:40:bd:24:a8:f8:99:af:77:14:42:7b:a3:4d:59:0a:34:1d:
f0:10:0b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 10:21:45 2025 by rpki-client