Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.mft
File: 45VXJQVD5Edq-IxGEtSolTExO1c.mft (raw, json)
Hash identifier: GHZrp9WBsugHBYNEl/hInvNBKIQzcRk18xo+spFSIvA=
Subject key identifier: F8:DD:0B:FD:F5:6E:EA:B2:DF:D4:95:AA:4F:71:72:57:ED:B6:D6:CA
Authority key identifier: E3:95:57:25:05:43:E4:47:6A:F8:8C:46:12:D4:A8:95:31:31:3B:57
Certificate issuer: /CN=e39557250543e4476af88c4612d4a89531313b57
Certificate serial: 0196B7B59D4565038853018432CA3108CCA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/45VXJQVD5Edq-IxGEtSolTExO1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.mft
Manifest number: D2
Signing time: Sat 10 May 2025 01:00:54 +0000
Manifest this update: Sat 10 May 2025 01:00:54 +0000
Manifest next update: Sun 11 May 2025 01:00:54 +0000
Files and hashes: 1: 45VXJQVD5Edq-IxGEtSolTExO1c.crl (hash: EF3k/iHsPVjZD6Lbi6aa4qX9G9tcqIAx7lknmuGwnsY=)
2: vt4FgfPRrWl7Z_yLjoZZHEYX9X8.roa (hash: YsuZLkluKAbvOnVqbYvnKkP5bLLApSYx0tCzxSCaii4=)
3: zgHXXKhV6x08Iidi9kP_MDBdZ8U.roa (hash: taGLV+d4sUR0Mcx4A09Hc66ht4Rh+KLaRG3MKoCgLM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/45VXJQVD5Edq-IxGEtSolTExO1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 01:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:b5:9d:45:65:03:88:53:01:84:32:ca:31:08:cc:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e39557250543e4476af88c4612d4a89531313b57
Validity
Not Before: May 10 01:00:54 2025 GMT
Not After : May 11 01:00:54 2025 GMT
Subject: CN=f8dd0bfdf56eeab2dfd495aa4f717257edb6d6ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9c:4c:fe:a9:4a:4f:a8:ed:3f:ab:89:43:ee:
f3:a7:5f:a7:62:1f:8e:86:72:e8:8e:58:cb:27:63:
ad:3e:5a:4e:ca:49:d0:7c:fb:88:c5:ac:32:25:a9:
30:2d:3e:73:ac:a1:72:2b:f5:b3:cc:c0:a2:68:00:
45:5d:f3:00:43:94:f1:65:fd:a1:be:cc:e2:0e:58:
9c:26:16:c9:f6:a3:6b:79:51:ab:f9:91:33:1c:ad:
d4:99:48:c4:9a:e7:e8:4c:f7:c6:a3:5f:d2:28:bf:
b6:f6:49:87:18:dc:32:b2:f0:db:1e:eb:d3:0d:79:
ad:6b:d5:31:a6:01:f8:c7:b8:28:4b:ac:b9:70:aa:
35:12:34:4d:c2:df:a2:91:0b:49:8e:62:39:e4:41:
f5:e3:2c:45:51:8c:c4:29:2b:25:bc:70:54:91:1c:
83:fb:a6:4a:85:63:38:d4:bf:f1:b0:63:2b:fd:05:
2d:c4:08:e8:c9:12:ab:f1:18:75:23:05:b9:f6:d5:
88:bb:13:d3:5d:b0:d7:ca:e4:05:e9:81:60:46:ff:
1b:03:62:8c:bc:4b:f4:25:5a:bf:19:6d:bf:ad:6b:
00:26:ae:54:01:f4:72:bf:cd:62:34:41:7e:cb:54:
4b:6c:be:39:b1:e8:f4:2b:71:2f:30:4e:0c:b8:88:
77:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:DD:0B:FD:F5:6E:EA:B2:DF:D4:95:AA:4F:71:72:57:ED:B6:D6:CA
X509v3 Authority Key Identifier:
keyid:E3:95:57:25:05:43:E4:47:6A:F8:8C:46:12:D4:A8:95:31:31:3B:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/45VXJQVD5Edq-IxGEtSolTExO1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:ea:5c:ac:42:91:67:72:e9:16:29:44:df:08:ab:45:d4:93:
c3:39:4b:91:f0:29:ec:15:d3:aa:e0:09:fb:83:ec:10:37:47:
d6:46:16:82:ae:5a:30:34:af:45:ea:7a:62:26:e9:60:b3:4e:
7f:70:23:97:a2:08:06:fe:19:f9:b9:88:17:cf:88:c9:47:39:
80:50:c4:18:d6:70:75:39:ef:63:4e:0c:f1:0f:e1:4c:d8:3d:
e3:4c:34:12:2d:9d:4f:02:96:bd:a0:74:a2:a0:58:e9:8d:42:
f3:53:52:27:37:e0:2a:40:e3:e1:05:dd:6b:fd:fa:9b:f7:ed:
24:be:bd:4d:29:67:5a:53:0e:79:76:1b:65:3d:e9:7a:6b:29:
f4:7e:f9:5f:db:ee:22:8a:32:5a:16:ee:8f:10:ab:10:57:43:
72:7a:a1:80:8f:8b:33:4b:a7:31:6f:a1:71:a7:f2:2a:e0:fb:
a3:2d:cd:84:43:1d:54:ed:7a:e4:36:cd:34:fc:96:20:69:dd:
28:7b:49:27:15:8f:8d:4c:8e:4b:c7:7a:44:6e:14:22:08:ab:
a9:a6:ab:2c:c3:19:e0:87:20:da:e7:1c:76:a5:56:22:67:f4:
51:8c:47:5d:33:6b:47:5d:04:0b:4a:44:2d:b5:2a:e7:58:85:
f7:17:ef:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 07:36:41 2025 by rpki-client