Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.mft
File: RRi4nH3OK17cBVgVFs_BnXoxdOg.mft (raw, json)
Hash identifier: tRYi4KLw/aN3pt30aRES07qxTQZcA1/XVp5XzgYf5Yw=
Subject key identifier: A8:6C:74:C4:BF:2B:49:CD:17:F4:1C:D9:C3:09:A6:AA:86:B9:66:A8
Authority key identifier: 45:18:B8:9C:7D:CE:2B:5E:DC:05:58:15:16:CF:C1:9D:7A:31:74:E8
Certificate issuer: /CN=4518b89c7dce2b5edc05581516cfc19d7a3174e8
Certificate serial: 0196A954B7F27194A3FD8220FB03650D8C35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RRi4nH3OK17cBVgVFs_BnXoxdOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.mft
Manifest number: 134E
Signing time: Wed 07 May 2025 06:00:23 +0000
Manifest this update: Wed 07 May 2025 06:00:23 +0000
Manifest next update: Thu 08 May 2025 06:00:23 +0000
Files and hashes: 1: RRi4nH3OK17cBVgVFs_BnXoxdOg.crl (hash: rjP4ofZuTkCuKItFLRQuTvL4e7HMAyGRRk8JOUwtbOQ=)
2: qkuP3INuoQUlkGzQXsg6hNdv2PE.roa (hash: nbTS8K6lNcxMgwiUyLADYWPREZ9Nv1ZzLCUppLN19Wk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RRi4nH3OK17cBVgVFs_BnXoxdOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 06:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:54:b7:f2:71:94:a3:fd:82:20:fb:03:65:0d:8c:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4518b89c7dce2b5edc05581516cfc19d7a3174e8
Validity
Not Before: May 7 06:00:23 2025 GMT
Not After : May 8 06:00:23 2025 GMT
Subject: CN=a86c74c4bf2b49cd17f41cd9c309a6aa86b966a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2b:2d:5f:65:5a:8e:53:3b:83:0b:60:73:37:
90:dc:1e:b1:6c:0f:df:48:b3:f4:6b:f0:7a:d3:3e:
1e:20:b3:63:b8:5b:6c:01:f2:45:a0:66:82:11:d1:
6a:6a:4d:1d:1b:37:85:c8:6c:b4:9c:1c:5e:96:02:
d0:07:8b:dd:21:6c:70:41:0d:4c:a4:08:dc:f3:a6:
29:07:2a:4a:6f:5c:50:0e:9a:2a:ef:e6:c1:5c:d3:
e0:ba:12:2c:cf:d7:48:e1:72:2a:5b:db:8a:5e:80:
58:fe:f1:f0:ff:2e:56:29:63:4f:e9:cf:dd:1f:14:
84:44:f1:fd:89:15:c2:74:1a:48:46:01:21:4e:3f:
f1:fd:7e:bb:3f:d1:00:70:db:9e:4c:13:46:60:e3:
58:c8:31:37:e7:5b:58:85:84:4b:4f:1d:a6:3f:2c:
90:62:de:4f:07:43:60:0a:09:d2:f5:62:42:51:06:
af:f2:68:5d:a5:eb:4a:fa:2c:86:48:e7:8b:8a:41:
c1:ed:85:71:95:12:69:a3:9d:49:cd:b7:ab:48:f6:
00:73:60:fd:6c:bc:a6:96:67:0a:c1:0a:4c:df:53:
63:23:67:cc:5e:00:63:82:7d:6b:c6:7d:57:5b:2d:
16:18:df:31:6a:3e:58:3c:f1:12:88:a3:71:6d:75:
35:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:6C:74:C4:BF:2B:49:CD:17:F4:1C:D9:C3:09:A6:AA:86:B9:66:A8
X509v3 Authority Key Identifier:
keyid:45:18:B8:9C:7D:CE:2B:5E:DC:05:58:15:16:CF:C1:9D:7A:31:74:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRi4nH3OK17cBVgVFs_BnXoxdOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:50:b5:58:d3:db:78:c9:93:34:c0:bf:fa:c1:9c:03:0d:d8:
3a:43:4f:c6:fa:ab:40:56:88:1d:44:c0:29:6c:58:cb:e3:2b:
01:1b:eb:45:dd:31:e6:38:55:87:34:6d:d9:44:8e:be:f9:f7:
67:55:1f:d9:43:76:cf:47:39:6c:80:ae:7b:f9:ad:45:a4:bf:
67:ba:d2:d3:b1:2e:42:d8:57:53:23:6e:eb:7b:db:40:6d:f0:
0d:12:61:7c:ff:ed:36:22:4b:e4:29:42:12:32:16:63:99:18:
cd:8d:ac:d5:af:bc:52:fa:57:4e:e5:c4:ea:59:f8:0a:bf:ee:
b2:b0:ab:66:42:51:35:34:72:e6:2a:ad:30:ad:f2:6e:67:a7:
38:da:99:4f:59:3a:11:91:8e:d8:27:bb:f5:fc:8e:4b:93:b9:
ef:6c:ac:21:67:53:8b:cd:e7:9b:95:9a:60:b2:c7:fd:c8:9d:
ac:23:02:4a:a6:a7:d1:df:7c:c6:a8:30:d5:70:99:d6:b3:70:
98:47:63:54:7b:46:c4:7e:65:cc:17:4b:c0:4a:05:bd:c8:c5:
b0:bf:11:f9:7d:1b:e9:13:12:5a:3c:b8:3c:2a:81:16:bc:79:
80:3f:21:ad:2e:91:56:41:be:c6:1c:4f:be:c5:7f:84:8d:40:
be:35:20:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 13:33:19 2025 by rpki-client