Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/RNPMWRzro4YTDzyfdCZFi4iHwus.mft
File: RNPMWRzro4YTDzyfdCZFi4iHwus.mft (raw, json)
Hash identifier: VxJpWT2hk9p/HBaLY+TcagfVXwlvSXUR55M5ELPZp8o=
Subject key identifier: 48:53:AA:73:6A:1B:E4:5C:2B:56:5D:E9:B2:96:D4:DA:6A:E7:BF:94
Authority key identifier: 44:D3:CC:59:1C:EB:A3:86:13:0F:3C:9F:74:26:45:8B:88:87:C2:EB
Certificate issuer: /CN=44d3cc591ceba386130f3c9f7426458b8887c2eb
Certificate serial: 0196B5903D3349C5F9B29B1A81C6E268B465
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RNPMWRzro4YTDzyfdCZFi4iHwus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/RNPMWRzro4YTDzyfdCZFi4iHwus.mft
Manifest number: 055A
Signing time: Fri 09 May 2025 15:00:50 +0000
Manifest this update: Fri 09 May 2025 15:00:50 +0000
Manifest next update: Sat 10 May 2025 15:00:50 +0000
Files and hashes: 1: 5_5ZxyaYymDkazwik4_YUJ_u6nk.roa (hash: 0ihJyb/8cvHev60hCuqr7j7mSBpvAI6EqaNQNOqgNHg=)
2: RNPMWRzro4YTDzyfdCZFi4iHwus.crl (hash: LjWwT5Hct1yWiRCSTYHwGfqxcad11y9Nna6w4Z2RKog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/RNPMWRzro4YTDzyfdCZFi4iHwus.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/RNPMWRzro4YTDzyfdCZFi4iHwus.mft
rsync://rpki.ripe.net/repository/DEFAULT/RNPMWRzro4YTDzyfdCZFi4iHwus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 15:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b5:90:3d:33:49:c5:f9:b2:9b:1a:81:c6:e2:68:b4:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44d3cc591ceba386130f3c9f7426458b8887c2eb
Validity
Not Before: May 9 15:00:50 2025 GMT
Not After : May 10 15:00:50 2025 GMT
Subject: CN=4853aa736a1be45c2b565de9b296d4da6ae7bf94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:94:91:36:60:31:0c:c4:23:11:46:e2:57:1c:
a3:4b:ab:80:65:d8:b3:c3:62:a4:e6:0a:fa:cb:90:
9a:1b:28:0a:93:b6:9c:7c:ad:0b:3a:b7:ca:9c:f5:
50:a6:e1:c1:0f:d8:fb:e2:dd:3a:7a:4a:8f:43:f6:
7e:c2:ce:be:cd:a1:0d:42:7e:1b:bf:8a:92:1e:fd:
0e:3d:82:eb:c1:39:f1:bc:18:cd:e1:1a:cc:f9:6f:
af:e3:05:76:bf:cf:2a:74:b6:dd:a6:96:76:b0:22:
ee:8a:8f:ec:9d:1e:bc:59:14:14:3b:b9:8c:35:64:
d6:e2:df:ec:ee:2d:86:5c:e5:7b:a0:84:3c:a2:5e:
c6:db:30:90:ac:46:5f:40:9b:00:8b:1b:72:37:e3:
df:ef:77:52:bf:d6:82:cf:64:b1:c3:b2:dc:86:44:
08:00:fe:0f:68:36:22:c8:5b:a8:83:0e:50:a7:9f:
58:af:fc:8b:79:9c:1f:8b:13:2e:9a:8a:ad:68:e2:
95:d0:45:d7:b9:cb:42:ce:65:29:1c:cc:b2:53:96:
83:f8:77:07:75:09:ce:f2:11:f3:4b:c7:22:88:72:
b1:4b:2d:1b:17:76:ca:a6:57:34:6b:a1:a0:b2:7f:
cd:d3:54:98:c6:00:0f:4a:99:28:14:2a:0c:1d:bc:
ca:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:53:AA:73:6A:1B:E4:5C:2B:56:5D:E9:B2:96:D4:DA:6A:E7:BF:94
X509v3 Authority Key Identifier:
keyid:44:D3:CC:59:1C:EB:A3:86:13:0F:3C:9F:74:26:45:8B:88:87:C2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RNPMWRzro4YTDzyfdCZFi4iHwus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/RNPMWRzro4YTDzyfdCZFi4iHwus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/RNPMWRzro4YTDzyfdCZFi4iHwus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:90:3d:ee:1c:d3:5c:f4:3b:17:75:eb:72:51:2d:13:3e:c3:
d3:cf:ef:d3:cd:65:d8:67:b3:ca:f1:cf:65:39:45:b4:45:78:
f7:13:95:02:01:70:f6:a1:37:6c:a1:e3:c1:fc:c5:eb:13:e3:
b5:f7:f6:c7:c9:3a:a7:a2:68:e7:ce:93:5f:d4:2f:ee:c8:ec:
3f:a9:61:65:1a:90:18:f8:18:43:10:48:95:db:9b:3e:7b:8d:
99:19:8a:25:91:9b:f3:8a:a4:3b:d6:54:57:0e:1d:9e:1c:42:
34:5c:00:4e:f3:52:3b:49:9f:20:a0:93:6b:59:25:0d:26:56:
03:67:2c:18:20:34:b9:2b:78:2c:34:f6:d4:11:65:45:a5:64:
6c:3e:7d:78:df:64:2c:6e:57:4c:66:7a:5b:7a:d8:87:3a:3c:
af:7f:62:9d:57:3c:d6:ff:62:c0:66:82:39:9e:59:69:89:df:
8f:df:e6:1d:86:97:fe:56:e4:86:7f:bd:13:78:2f:a8:5c:82:
3f:f1:5a:6b:30:12:52:89:d6:56:74:b6:3a:2e:e6:c2:3b:93:
d1:9d:c1:36:f2:f5:48:51:33:42:e7:d1:6d:a8:71:7c:89:31:
df:80:42:2e:a6:2f:03:1e:44:b9:4b:d0:a4:14:95:98:5c:45:
8a:c4:a3:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 23:54:40 2025 by rpki-client