Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.mft
File: RPMwC82ETWB1L-Xfst4pmWbpuPY.mft (raw, json)
Hash identifier: vmvR0VN5QMH3XhUnbABX2uBmzFMZnngPN92s+mDQosU=
Subject key identifier: 7B:BD:23:11:7E:01:79:D0:92:C4:2E:FE:FC:8A:2C:7E:7A:77:19:CD
Authority key identifier: 44:F3:30:0B:CD:84:4D:60:75:2F:E5:DF:B2:DE:29:99:66:E9:B8:F6
Certificate issuer: /CN=44f3300bcd844d60752fe5dfb2de299966e9b8f6
Certificate serial: 0196B58FEE5DF64739F6F60E9D5AF704E79F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPMwC82ETWB1L-Xfst4pmWbpuPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.mft
Manifest number: 0B1A
Signing time: Fri 09 May 2025 15:00:30 +0000
Manifest this update: Fri 09 May 2025 15:00:30 +0000
Manifest next update: Sat 10 May 2025 15:00:30 +0000
Files and hashes: 1: RPMwC82ETWB1L-Xfst4pmWbpuPY.crl (hash: w1ubjXBo1yRu2lzUyfsfI8tfV6x5OTqPiBlbLsIZygw=)
2: vqjdm1KiZFUuymq7gFNn9nu1xeI.roa (hash: n5Ik+8X2gw4ASROPfXrEyi/m0Dt0d0dYMw901zfQlQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/RPMwC82ETWB1L-Xfst4pmWbpuPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 15:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b5:8f:ee:5d:f6:47:39:f6:f6:0e:9d:5a:f7:04:e7:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44f3300bcd844d60752fe5dfb2de299966e9b8f6
Validity
Not Before: May 9 15:00:30 2025 GMT
Not After : May 10 15:00:30 2025 GMT
Subject: CN=7bbd23117e0179d092c42efefc8a2c7e7a7719cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:21:d5:fa:89:c2:34:be:2b:43:0e:0a:e6:89:
5f:8c:d5:6f:42:89:af:bd:fe:5b:fc:6a:3c:d9:e3:
6a:82:a5:bb:cf:d5:1f:46:28:0e:e8:c1:5a:10:05:
f0:4e:90:17:97:52:e3:64:92:25:da:05:e9:c9:0e:
54:20:04:13:66:b1:99:d2:d8:1b:8b:6d:a5:38:6a:
50:0e:ea:d2:f3:39:c3:3e:5b:39:73:65:3f:e3:af:
cf:c4:1e:84:cb:ed:58:43:d5:39:89:fb:f1:f8:f7:
b8:1f:87:44:b5:46:2a:cd:a4:bb:89:0c:74:55:34:
04:07:f3:89:d6:bb:c3:c1:a6:2f:21:6d:0c:ed:48:
8f:c9:0b:1d:7e:36:4b:1c:64:4c:c4:ad:fb:5e:9e:
9f:b9:00:f6:a6:36:01:2f:95:7e:85:37:57:87:26:
4f:4d:dd:7f:b8:d6:69:b4:7f:01:3d:35:71:bc:95:
6b:ce:5b:4a:4d:22:10:13:d8:41:95:f8:a6:62:99:
bc:b9:0f:bf:a5:9e:c5:35:66:8d:6e:26:dc:72:c3:
5c:5f:e1:c4:f6:1a:92:3b:3e:71:22:7d:ef:25:ef:
53:39:12:74:a9:1d:00:80:b3:bd:c9:a0:df:09:c6:
ac:2c:ea:bf:fa:fd:d3:8d:3b:d7:3c:e7:9a:da:43:
2c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:BD:23:11:7E:01:79:D0:92:C4:2E:FE:FC:8A:2C:7E:7A:77:19:CD
X509v3 Authority Key Identifier:
keyid:44:F3:30:0B:CD:84:4D:60:75:2F:E5:DF:B2:DE:29:99:66:E9:B8:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPMwC82ETWB1L-Xfst4pmWbpuPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:21:68:7e:7e:7e:b7:d9:ce:d9:7b:dc:f0:a3:eb:29:30:65:
c9:fd:41:fa:da:a7:dc:14:74:1b:a1:8b:1f:fb:fe:9c:27:5f:
80:57:77:7e:f2:c0:e5:15:43:73:d7:79:f9:e0:b0:5e:2d:d7:
ab:58:93:d2:32:1c:ae:54:14:7d:4e:44:70:f9:96:83:24:77:
15:29:5b:c0:7d:48:25:8b:d6:f2:bb:0c:aa:ab:83:22:cd:d5:
51:64:c8:a7:bf:75:f2:82:58:c3:c7:5f:07:b7:f6:10:06:dc:
a0:9a:09:d2:a2:fe:6a:fd:74:2f:e7:63:bb:b2:10:d8:3e:98:
00:75:f6:86:b7:c8:4a:01:c4:b4:f7:17:67:1e:bc:37:01:12:
32:b0:c5:3f:91:d2:ea:1f:5d:6b:3f:81:4c:f9:6b:76:f1:37:
13:b5:b2:27:d6:d6:e5:86:b0:87:17:db:b1:6a:fd:f3:32:07:
9c:d4:ef:6c:b5:89:ee:3a:b2:bc:41:97:a6:d7:92:10:44:e4:
de:f4:d7:43:8d:33:07:a2:75:5b:39:7a:e4:a5:76:4f:39:4e:
97:0e:de:d8:0a:42:c7:b7:23:70:91:a2:9a:f8:83:23:b0:0c:
2f:79:40:b1:a7:ee:a8:e7:f5:03:19:96:78:06:2d:a0:22:8f:
34:06:a1:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 22:05:02 2025 by rpki-client