Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft
File: RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft (raw, json)
Hash identifier: MlEkoej/MD5igZXn/TjgdKEUr2UqsQ5h2ALW+5S5y00=
Subject key identifier: F5:63:78:98:92:5A:F9:54:94:67:B5:09:ED:F5:F6:FA:E7:E2:3E:4F
Authority key identifier: 45:D3:4F:D0:48:B5:97:B3:E5:F7:DA:89:DF:E6:46:57:69:7E:8E:E3
Certificate issuer: /CN=45d34fd048b597b3e5f7da89dfe64657697e8ee3
Certificate serial: 0196A3C0E4DAD4F6C085A4B3BB38B03FA98B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft
Manifest number: 31
Signing time: Tue 06 May 2025 04:00:49 +0000
Manifest this update: Tue 06 May 2025 04:00:49 +0000
Manifest next update: Wed 07 May 2025 04:00:49 +0000
Files and hashes: 1: RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.crl (hash: OdyCbdFEZlADX/OZMjKay9CFUKF9gfLnU9KaRz+z40w=)
2: UFEpRGmmgSxI-Cj4mUoULnogLh0.roa (hash: uynyMnukvUhaVDa9YBwkcCoinwLXAu+vAC1b07ExVN4=)
3: mIeWrCvH_vi6WIO4Abqw0wSZ9wE.roa (hash: UEuZfid3mOqO0N/4zAUnn5LYhUgHF25ZTPMwLRC0oAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:c0:e4:da:d4:f6:c0:85:a4:b3:bb:38:b0:3f:a9:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45d34fd048b597b3e5f7da89dfe64657697e8ee3
Validity
Not Before: May 6 04:00:49 2025 GMT
Not After : May 7 04:00:49 2025 GMT
Subject: CN=f5637898925af9549467b509edf5f6fae7e23e4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:24:ff:8f:94:fc:22:b0:cb:f4:a3:b8:89:68:
c2:86:f0:c5:f0:9d:91:8f:4d:dc:8c:0d:77:5c:4f:
11:ab:b7:f0:5d:9e:cd:11:f8:80:79:fc:52:16:07:
a8:78:ab:2e:93:8d:07:41:cd:93:99:af:15:74:4a:
60:1d:37:fc:d4:18:73:10:5c:87:c0:3e:7e:33:31:
5a:9e:3d:81:23:13:24:66:9e:c8:74:34:ed:51:4b:
5a:d9:d0:de:97:87:c0:e2:bc:c7:b9:8c:13:2e:b0:
d2:91:88:1c:25:77:c0:c1:d2:ff:63:5b:73:7a:44:
a2:8e:28:1b:96:a5:ba:40:df:a6:1f:fc:6e:ac:ea:
67:a0:d9:5e:c1:e2:91:d6:ac:2e:5f:2e:2b:4a:07:
41:e0:cd:21:c0:1f:4f:0e:64:31:49:27:41:3a:af:
4a:88:0e:19:c5:e6:6b:76:00:e0:78:6d:6d:44:af:
73:bc:98:ce:12:72:69:6e:78:da:e9:05:54:4b:59:
4f:cd:1f:25:e0:48:e2:22:1b:74:0f:ca:0c:1b:4a:
15:25:cb:6f:06:03:8a:d7:72:38:5a:5c:cd:90:9d:
a4:02:8f:df:39:32:67:ae:ed:91:08:e7:3c:25:84:
b9:27:bb:b3:9d:1a:48:da:a0:a2:81:2f:6b:2a:52:
67:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:63:78:98:92:5A:F9:54:94:67:B5:09:ED:F5:F6:FA:E7:E2:3E:4F
X509v3 Authority Key Identifier:
keyid:45:D3:4F:D0:48:B5:97:B3:E5:F7:DA:89:DF:E6:46:57:69:7E:8E:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:c7:a0:4c:fb:7b:b8:9a:95:e1:e2:25:23:47:16:ae:9e:da:
5d:9e:88:e7:e2:ed:de:3d:39:5c:75:2b:0e:28:a9:f6:7d:a8:
11:90:48:82:63:bc:b5:ad:86:b3:74:7c:07:bb:55:23:80:6e:
fd:07:6b:c3:95:48:c9:f1:81:73:a9:79:47:d8:a3:a1:69:7b:
a8:f5:be:5e:6b:ad:0f:0f:2a:f5:ab:70:3d:99:24:79:05:c9:
d3:6f:a6:5b:9f:7c:ff:aa:db:ca:c7:d8:c4:ec:90:7f:97:df:
b8:3a:b7:b4:88:d6:44:db:27:64:7a:ad:fc:1d:fd:33:02:2e:
04:99:a9:32:92:30:41:53:b0:e1:52:75:40:1f:11:ed:fe:f5:
85:f5:3c:ff:88:4b:62:6a:13:15:87:f9:4c:bb:49:91:f2:4b:
46:93:cd:a9:17:f1:4c:d5:17:8e:04:ac:da:0f:6d:bb:38:ff:
5a:38:ec:f8:8f:f0:aa:5e:b9:45:82:8b:37:9a:f9:af:67:09:
92:80:7e:e0:c5:fe:5a:d4:75:24:a3:8d:22:a1:76:ce:68:5a:
6d:b7:a9:e5:30:f5:70:c8:bb:85:38:8b:ea:a5:b4:d6:81:35:
8d:ec:fa:4a:f6:2e:83:71:3a:25:8b:22:4f:bc:93:11:cf:49:
c9:62:7c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 11:01:22 2025 by rpki-client