Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft
File: r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft (raw, json)
Hash identifier: f1Si8wjAbAJb7GTzQ4cCskPVsrnRgWRTODPNYXggXY4=
Subject key identifier: FD:78:08:A1:6B:84:DB:96:9A:82:B7:EE:83:31:05:7E:B2:B8:AD:F7
Authority key identifier: AF:85:BB:8A:50:44:3E:50:4C:48:53:CC:E0:25:EF:58:34:1C:1D:50
Certificate issuer: /CN=af85bb8a50443e504c4853cce025ef58341c1d50
Certificate serial: 0196B5C7440BF2A8275F7CF5EBC99023BA1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4W7ilBEPlBMSFPM4CXvWDQcHVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft
Manifest number: 09A7
Signing time: Fri 09 May 2025 16:00:57 +0000
Manifest this update: Fri 09 May 2025 16:00:57 +0000
Manifest next update: Sat 10 May 2025 16:00:57 +0000
Files and hashes: 1: r4W7ilBEPlBMSFPM4CXvWDQcHVA.crl (hash: DvdkqCSOJv4ITFcSRMbOml/bO2/1KZzJSTpPH6DpxNs=)
2: toLcHJuza0nk_rSiToUi8cqjpA8.roa (hash: kRROIdBqbwyv0kgRq3rS5l7ig0u7UsDgEiLSwPvEVgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/r4W7ilBEPlBMSFPM4CXvWDQcHVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 16:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b5:c7:44:0b:f2:a8:27:5f:7c:f5:eb:c9:90:23:ba:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af85bb8a50443e504c4853cce025ef58341c1d50
Validity
Not Before: May 9 16:00:57 2025 GMT
Not After : May 10 16:00:57 2025 GMT
Subject: CN=fd7808a16b84db969a82b7ee8331057eb2b8adf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3a:57:ab:fa:66:6d:75:18:18:fb:b7:18:7b:
e9:8f:ac:d6:4d:33:c1:24:e0:67:93:3e:ec:97:12:
e5:eb:94:8d:94:14:c3:e4:3c:ec:63:56:8d:61:73:
23:ea:f6:2e:f9:90:e0:bf:3c:7a:c1:6c:55:62:2a:
b9:8e:4e:44:61:45:df:ad:d4:59:41:68:0a:fc:73:
05:00:31:09:c5:94:b3:2d:25:75:99:76:df:b3:2f:
a5:b8:3a:41:db:9b:87:8c:33:1a:5a:80:b9:b7:fe:
0f:b1:35:a0:5b:29:86:87:de:9f:c4:5a:3e:ec:f3:
33:4f:14:64:32:dd:8c:8f:85:0d:75:e0:13:5b:1c:
9d:60:61:e8:43:42:5e:83:d2:4a:59:5f:6d:7e:b9:
5d:95:73:e4:07:de:2e:02:2b:3e:ce:0d:ae:47:b8:
2f:d8:38:43:42:68:26:5c:54:1c:cc:12:79:d7:dd:
27:ed:24:96:84:aa:af:6b:dd:25:fe:7b:cb:38:97:
79:06:36:7e:2f:5e:26:a4:8e:df:ab:3c:52:c3:09:
88:70:c6:7e:b4:6d:52:8b:57:5e:0b:d0:fa:3e:fb:
51:cb:38:d4:d8:78:3c:19:5e:ef:5e:eb:de:d5:2f:
25:7a:1a:e1:64:a0:05:54:c2:12:15:b5:d5:ec:15:
b4:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:78:08:A1:6B:84:DB:96:9A:82:B7:EE:83:31:05:7E:B2:B8:AD:F7
X509v3 Authority Key Identifier:
keyid:AF:85:BB:8A:50:44:3E:50:4C:48:53:CC:E0:25:EF:58:34:1C:1D:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4W7ilBEPlBMSFPM4CXvWDQcHVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:5b:b6:ec:ef:85:2c:81:bc:63:fb:9e:65:f8:8b:c1:aa:63:
4f:92:dc:17:17:85:52:d3:84:ec:85:d8:f9:c9:c5:38:28:92:
47:36:99:5f:83:ba:3b:da:ad:5e:06:d8:0c:15:2d:2c:9a:12:
c4:78:af:83:b2:98:e8:21:61:c1:b4:37:2c:61:ac:15:77:94:
e0:eb:6f:60:60:61:c1:45:cc:2e:f2:3d:8b:57:34:07:ff:eb:
3a:06:84:7d:0e:b4:59:c5:8d:07:b1:93:9e:0f:a3:78:42:f7:
a4:71:67:fa:57:7e:3a:1a:e5:1d:9f:d8:26:60:89:3f:ca:f2:
a0:95:37:c9:68:95:b4:97:a1:ba:30:5e:84:1c:12:f7:8d:5d:
f2:d6:95:2d:05:7f:0a:0b:ea:e6:1f:fe:cb:0c:45:5e:f2:8a:
b4:49:02:a4:a0:be:cb:8d:61:d2:ec:cd:01:82:04:03:3a:ae:
e0:93:1b:c7:48:57:06:09:f7:57:d8:76:e5:ed:28:a3:1c:da:
d4:b7:95:ad:4e:dc:1c:29:6a:39:33:0a:aa:3e:b2:2c:bd:50:
10:cf:11:8b:a6:e0:98:b0:e1:f5:91:cd:5a:e3:8d:b3:d6:99:
e3:2c:88:8b:53:6a:f8:54:e4:54:ea:f9:8b:3d:5b:ad:2d:83:
11:3e:90:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 20:41:35 2025 by rpki-client