Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.mft
File: ruL45TYnrcJ2eAY7k9PZ_W7OkAI.mft (raw, json)
Hash identifier: n2/P5+eUqVrPZO4jXbqLnOTJRZVpUrYa6VHvUU+7DLQ=
Subject key identifier: AD:7F:A2:FD:CC:A0:82:05:D9:52:1C:2D:35:85:07:58:4C:00:2F:1C
Authority key identifier: AE:E2:F8:E5:36:27:AD:C2:76:78:06:3B:93:D3:D9:FD:6E:CE:90:02
Certificate issuer: /CN=aee2f8e53627adc27678063b93d3d9fd6ece9002
Certificate serial: 0196C8048CB0B9C5319613C526951419572C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.mft
Manifest number: 142B
Signing time: Tue 13 May 2025 05:01:03 +0000
Manifest this update: Tue 13 May 2025 05:01:03 +0000
Manifest next update: Wed 14 May 2025 05:01:03 +0000
Files and hashes: 1: NasWHXHMUrneYOPi_YEJHup68SM.roa (hash: vL3Q2Q0+7pnxdL6gd2R9r+dXrTLQulaJB+4Rjiarvgs=)
2: mQMuKDoHnr1LeGkTlxHsfTZ3PWQ.roa (hash: zwJx6M98s8at6u4x9fLfaXSOW6xFzqNRxDzug5GEBAw=)
3: ruL45TYnrcJ2eAY7k9PZ_W7OkAI.crl (hash: trhxG2OMqcRKzpQ6nE/Z/2GveEt4gGRj7iCwmthksVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 05:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:04:8c:b0:b9:c5:31:96:13:c5:26:95:14:19:57:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aee2f8e53627adc27678063b93d3d9fd6ece9002
Validity
Not Before: May 13 05:01:03 2025 GMT
Not After : May 14 05:01:03 2025 GMT
Subject: CN=ad7fa2fdcca08205d9521c2d358507584c002f1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c4:fd:b1:47:40:f5:d2:9a:f7:44:ba:5b:80:
3e:5d:99:1d:50:6b:cf:e9:25:aa:3f:35:02:d8:ed:
33:d8:10:22:58:e1:01:f1:59:c6:8e:45:3d:8c:5f:
4e:f3:f6:fa:b3:49:95:9c:20:11:50:36:7c:37:6e:
3e:27:16:17:c0:c5:ea:72:20:2a:8f:f4:5d:a6:e8:
62:7c:f3:6a:4a:80:d7:fe:0a:a5:5b:14:53:3f:53:
7f:ee:e2:e2:86:76:5a:ee:1f:52:76:9e:e9:78:ba:
89:1d:62:f1:74:f7:8e:d4:c5:03:85:ef:4c:7d:bd:
9c:6a:40:b9:7d:f6:04:38:7f:a6:dc:f2:4e:52:86:
53:dc:df:de:c3:7a:43:37:8a:d3:df:66:29:ce:95:
89:8b:47:46:17:89:b8:1e:a3:21:7b:69:6e:17:e5:
0b:78:be:97:ff:38:ae:7e:6c:e9:95:03:ad:ff:23:
11:1b:6e:8e:9f:b1:b7:30:0c:9b:39:81:58:eb:a1:
6c:b7:c5:1b:a3:a1:34:5d:af:05:fd:bc:0d:a1:a4:
7b:22:f6:c7:77:55:65:17:3a:84:f6:17:61:34:0e:
bb:1d:a4:2f:3e:af:da:36:bf:bf:4d:c7:0f:c3:3f:
cd:18:ac:3d:f3:39:31:16:92:47:8e:c0:45:2b:bc:
09:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:7F:A2:FD:CC:A0:82:05:D9:52:1C:2D:35:85:07:58:4C:00:2F:1C
X509v3 Authority Key Identifier:
keyid:AE:E2:F8:E5:36:27:AD:C2:76:78:06:3B:93:D3:D9:FD:6E:CE:90:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:f2:e5:aa:32:bf:8d:04:a0:6b:c7:16:27:1e:ac:e6:60:74:
52:01:59:c8:ef:36:a3:32:57:9b:4d:e8:5e:0b:62:df:c5:0d:
f9:b7:06:ee:0b:6b:e2:b7:a9:db:16:6f:a9:c5:c9:8a:94:b6:
00:4a:e5:40:0d:80:44:46:f3:34:b3:2c:67:62:ed:25:c0:6c:
ad:64:1d:ed:60:2d:87:8c:ae:07:c6:1b:f3:ee:69:51:31:33:
d5:cc:ac:cd:25:e3:ef:fb:bf:a8:3b:20:f2:d8:bd:49:a9:fb:
f0:c9:8f:6f:77:5f:d8:0c:91:7b:bb:5d:2b:7b:67:ac:b3:be:
55:1b:4b:15:15:f2:96:0d:7d:14:de:16:90:b9:42:40:8a:97:
18:c2:d0:bf:f0:07:cf:7b:0d:0c:3c:a6:e4:27:53:25:c0:ce:
ca:43:5e:fc:7e:d4:d8:b6:08:15:98:8e:1b:a2:18:d9:a8:ae:
f0:b6:78:d4:10:17:b7:19:52:e4:d5:c8:a6:40:50:2f:d2:07:
7a:66:b9:bc:2f:5f:ed:00:6c:3e:4f:71:80:76:a0:8b:a6:78:
f5:a0:25:bd:ef:f7:05:3d:73:70:e0:f7:09:c9:8b:52:1c:90:
27:a8:f8:da:a5:0d:6e:b2:b0:47:28:1f:87:db:2c:84:93:2d:
75:e1:dd:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 13:37:00 2025 by rpki-client