Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/9fedd0-4ed7-4419-8e73-b5ca0adf2f08/1/__RCr_uhz67zECyYHXVpUCzmUVw.mft
File: __RCr_uhz67zECyYHXVpUCzmUVw.mft (raw, json)
Hash identifier: 2MvR6PGnL5vq80LuhuMl4HKwWltBmdBEkFQCf6ktpAw=
Subject key identifier: 46:22:8C:4D:CE:38:D2:91:ED:3F:70:BE:7E:3F:9F:27:D2:D9:5B:1E
Authority key identifier: FF:F4:42:AF:FB:A1:CF:AE:F3:10:2C:98:1D:75:69:50:2C:E6:51:5C
Certificate issuer: /CN=fff442affba1cfaef3102c981d7569502ce6515c
Certificate serial: 0196BB91E596EEE3F8F1CDF695F2E80BA835
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/__RCr_uhz67zECyYHXVpUCzmUVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/9fedd0-4ed7-4419-8e73-b5ca0adf2f08/1/__RCr_uhz67zECyYHXVpUCzmUVw.mft
Manifest number: 1534
Signing time: Sat 10 May 2025 19:00:22 +0000
Manifest this update: Sat 10 May 2025 19:00:22 +0000
Manifest next update: Sun 11 May 2025 19:00:22 +0000
Files and hashes: 1: __RCr_uhz67zECyYHXVpUCzmUVw.crl (hash: GcEq4K7QPqjsxLD50tueEUkQts315aoItgc8hQndh1w=)
2: cfHPpH74hHCJK1pLDEwyQ7AMZJY.roa (hash: Gmnr746njngjtdW+doOVMtWLzbG5WcOtPqH2dI9MOLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/9fedd0-4ed7-4419-8e73-b5ca0adf2f08/1/__RCr_uhz67zECyYHXVpUCzmUVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/9fedd0-4ed7-4419-8e73-b5ca0adf2f08/1/__RCr_uhz67zECyYHXVpUCzmUVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/__RCr_uhz67zECyYHXVpUCzmUVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 19:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:91:e5:96:ee:e3:f8:f1:cd:f6:95:f2:e8:0b:a8:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fff442affba1cfaef3102c981d7569502ce6515c
Validity
Not Before: May 10 19:00:22 2025 GMT
Not After : May 11 19:00:22 2025 GMT
Subject: CN=46228c4dce38d291ed3f70be7e3f9f27d2d95b1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:42:7e:9c:0b:34:96:1c:de:61:10:c8:57:6c:
56:b6:b5:5a:a8:df:17:d3:e6:fe:79:7d:33:57:49:
3a:78:6c:6a:e0:29:de:7e:ba:68:28:db:63:4a:01:
a1:fb:ca:6b:48:10:4c:7a:e2:be:e1:9e:d4:12:b3:
f0:51:8c:1e:2d:2d:e3:a3:32:5d:c9:ad:da:3a:15:
63:52:d7:ef:39:a4:7f:fa:4c:c0:97:3d:93:5e:d5:
3d:b4:8d:94:03:4b:6e:58:27:87:0a:59:51:48:a8:
56:00:29:fc:ad:25:ad:f8:fe:89:97:56:6f:69:53:
b7:21:bd:98:a3:57:71:d7:ab:27:d2:15:ee:e5:1e:
2b:25:6e:ed:2c:2e:f5:c7:89:d0:e1:d2:a3:6c:f1:
33:1c:66:71:8c:14:1e:f7:2b:c2:4a:3f:67:c8:27:
7f:1e:de:30:94:f3:ac:63:57:bb:e3:ba:48:9e:3e:
5b:f9:e9:56:a0:cf:c3:8c:19:eb:5d:60:0f:ee:4f:
df:09:d3:19:fc:df:d5:f2:50:18:9c:b0:74:21:93:
b1:ad:96:d2:17:db:a7:f8:46:77:b5:59:b2:4a:4d:
77:49:d5:b9:a1:15:3b:69:24:5d:90:1e:00:62:4f:
e1:0c:9e:14:2e:64:42:9e:ab:ba:59:63:b2:a5:ab:
13:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:22:8C:4D:CE:38:D2:91:ED:3F:70:BE:7E:3F:9F:27:D2:D9:5B:1E
X509v3 Authority Key Identifier:
keyid:FF:F4:42:AF:FB:A1:CF:AE:F3:10:2C:98:1D:75:69:50:2C:E6:51:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/__RCr_uhz67zECyYHXVpUCzmUVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/9fedd0-4ed7-4419-8e73-b5ca0adf2f08/1/__RCr_uhz67zECyYHXVpUCzmUVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/9fedd0-4ed7-4419-8e73-b5ca0adf2f08/1/__RCr_uhz67zECyYHXVpUCzmUVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:53:37:ab:69:84:71:79:aa:6e:97:50:a2:09:2b:93:fd:73:
fe:b0:68:f9:64:f3:32:42:8f:cd:9d:61:62:ee:cf:c2:01:78:
dd:b9:8a:73:99:9c:07:56:19:17:82:bd:76:b5:62:61:64:3d:
ad:d1:de:6d:cf:0a:1d:d3:9e:19:56:0f:08:57:67:c7:ac:aa:
72:f3:25:5b:dd:f5:ea:88:c1:52:2b:16:b2:ca:56:3e:32:a4:
8f:6c:bd:c1:93:34:96:aa:a4:ef:0e:cd:8f:f8:24:5e:3e:12:
b6:ab:66:6f:fb:78:15:08:e6:c6:7a:db:60:8f:32:99:0e:fa:
2e:16:1c:11:c5:44:5f:20:70:d1:49:d8:f0:49:4c:88:ca:01:
23:10:9a:32:e5:c0:33:b6:03:c6:9f:8e:3b:91:58:1b:8a:f1:
5e:75:62:c7:23:66:54:62:de:f9:94:3d:a3:81:66:8e:6b:88:
62:a1:63:fa:07:07:ee:71:c0:ea:bc:5a:22:23:5d:cb:08:b2:
6a:e8:68:ec:a3:51:62:e4:20:0e:25:13:cf:96:a5:03:85:40:
00:cc:51:b9:92:33:aa:e9:2a:64:f7:f0:6b:e2:6e:de:71:83:
04:cc:44:5b:85:4f:de:8b:c8:95:f8:ab:1b:29:71:b3:e3:aa:
b4:4b:7e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:29:25 2025 by rpki-client