Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.mft
File: RFHoPa4So3HB3UnbNNm9Uqloi0o.mft (raw, json)
Hash identifier: BjnhQmKhfrApF2xFB7XdttLFGhKm6KArML0YsqJ7nB8=
Subject key identifier: CD:83:AB:A4:8D:56:34:FB:86:FB:3D:72:1C:46:77:5E:19:80:A9:C2
Authority key identifier: 44:51:E8:3D:AE:12:A3:71:C1:DD:49:DB:34:D9:BD:52:A9:68:8B:4A
Certificate issuer: /CN=4451e83dae12a371c1dd49db34d9bd52a9688b4a
Certificate serial: 0196AF2024D83576E81B68F3A77D6D882473
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFHoPa4So3HB3UnbNNm9Uqloi0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.mft
Manifest number: 078E
Signing time: Thu 08 May 2025 09:00:41 +0000
Manifest this update: Thu 08 May 2025 09:00:41 +0000
Manifest next update: Fri 09 May 2025 09:00:41 +0000
Files and hashes: 1: ET2huy81m3aucqPbuMYcz_TF2tw.roa (hash: E/ipcayMB6DPjVGiBr8hCFyBMlmTehPjlv7rgttgSjU=)
2: RFHoPa4So3HB3UnbNNm9Uqloi0o.crl (hash: MUVGqIljpNcwnqdAIAkDFrOLlwu0rwR/p5D2huU8AkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFHoPa4So3HB3UnbNNm9Uqloi0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:20:24:d8:35:76:e8:1b:68:f3:a7:7d:6d:88:24:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4451e83dae12a371c1dd49db34d9bd52a9688b4a
Validity
Not Before: May 8 09:00:41 2025 GMT
Not After : May 9 09:00:41 2025 GMT
Subject: CN=cd83aba48d5634fb86fb3d721c46775e1980a9c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c0:7b:c3:a4:88:1d:ad:43:1a:66:01:45:72:
87:86:5f:66:94:39:a8:fa:3b:8b:0e:c8:9c:0f:1e:
6f:ab:6d:69:6d:30:8e:46:7e:46:8b:e1:8b:f2:c4:
95:74:c9:f0:34:8c:ed:a7:76:57:f1:74:7c:4e:9f:
b5:23:67:91:e4:89:4d:5c:72:c2:68:a4:00:fb:22:
1b:30:b8:35:92:92:02:cb:ac:20:50:52:1d:71:4e:
4b:a4:a8:67:11:fb:cb:de:ce:40:2d:ad:bd:71:6f:
99:f2:46:30:c1:a8:77:0a:89:25:1e:30:66:da:49:
69:5b:32:79:56:43:cf:56:f5:78:a5:12:65:65:b5:
be:dd:e2:be:2d:65:c8:94:08:b7:aa:48:13:97:d4:
1f:b8:35:fd:64:f3:5c:70:9b:9f:73:c7:f0:c9:a6:
0d:d1:56:61:ea:29:7c:d7:39:75:81:4e:a3:84:1a:
7d:06:7b:bf:16:a8:97:8b:4c:61:84:c2:9e:b2:fb:
1e:1d:2b:52:ac:54:c7:32:2f:d1:78:28:52:e6:01:
16:74:8d:51:ce:35:c0:16:1f:25:42:3d:40:de:c0:
9c:25:ad:f4:84:2a:77:82:5d:0b:7a:35:04:f8:04:
c9:6e:06:9f:df:ab:f6:82:62:c7:23:69:5f:65:a1:
d9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:83:AB:A4:8D:56:34:FB:86:FB:3D:72:1C:46:77:5E:19:80:A9:C2
X509v3 Authority Key Identifier:
keyid:44:51:E8:3D:AE:12:A3:71:C1:DD:49:DB:34:D9:BD:52:A9:68:8B:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFHoPa4So3HB3UnbNNm9Uqloi0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:97:c8:95:32:fd:07:05:9b:d4:dd:80:bb:e0:64:74:9f:cb:
6d:97:ab:eb:da:19:c4:7c:7c:34:22:16:5f:e0:f5:9e:70:4f:
c3:f3:91:4e:14:0d:92:9a:ba:71:1e:50:92:d7:8c:cc:d4:4e:
46:0c:0a:8e:91:61:52:52:f3:e1:9d:d8:75:fe:72:a6:01:ab:
a0:8e:8d:18:56:1c:88:e8:e2:fc:b3:20:ee:0e:4e:aa:5e:94:
7e:6b:b7:bd:5d:f8:ab:e5:70:5d:ea:3a:aa:fe:78:3c:4e:23:
8e:9e:25:56:4f:60:38:84:ab:f9:59:90:d3:96:8c:2f:be:5a:
14:1d:7a:67:15:9b:b3:b2:d6:64:5c:43:00:aa:1a:c4:aa:a5:
5e:16:95:51:d9:bc:69:7d:1c:d2:9d:25:b9:fe:3a:d6:41:08:
37:ca:d3:18:85:1d:62:ed:8b:93:3c:7d:4f:09:12:64:c6:54:
4a:62:03:e0:a4:da:f4:37:37:e8:fd:c0:39:89:ed:a2:d8:c6:
73:4a:0a:e2:16:d7:61:5d:ae:af:11:64:45:5d:51:15:61:e9:
ed:59:33:bb:48:c8:14:35:ca:2f:f3:2e:f1:79:64:a4:7a:53:
ea:1f:0f:47:7b:97:6a:a0:cc:cb:c2:12:dd:76:b0:63:2d:3a:
12:5a:ba:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 12:03:13 2025 by rpki-client