Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.mft
File: RN9Py46lHhjSkIBcj1Dw30NA29U.mft (raw, json)
Hash identifier: tU1WeflcHl/lJ5lokD3cb/4jo+68Gl9lciqaP0k7P2I=
Subject key identifier: F5:AC:A0:4C:F5:20:24:B9:15:85:48:81:C9:0C:F7:86:3B:20:C4:AB
Authority key identifier: 44:DF:4F:CB:8E:A5:1E:18:D2:90:80:5C:8F:50:F0:DF:43:40:DB:D5
Certificate issuer: /CN=44df4fcb8ea51e18d290805c8f50f0df4340dbd5
Certificate serial: 01967C0E4493EB0FF656CBCADCD0D5B473D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RN9Py46lHhjSkIBcj1Dw30NA29U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.mft
Manifest number: 036D
Signing time: Mon 28 Apr 2025 11:00:31 +0000
Manifest this update: Mon 28 Apr 2025 11:00:31 +0000
Manifest next update: Tue 29 Apr 2025 11:00:31 +0000
Files and hashes: 1: Blmy2f8OWilx5iyKeJl19yxz130.roa (hash: hBJbqMLATjqE7T1aEx82BrgYKE+8rAT6ZSYbo8s5Glc=)
2: RN9Py46lHhjSkIBcj1Dw30NA29U.crl (hash: y2j4/yF8A0w0oW3kn8nJHzubsen3J++NpMVy8wY4DIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.mft
rsync://rpki.ripe.net/repository/DEFAULT/RN9Py46lHhjSkIBcj1Dw30NA29U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:0e:44:93:eb:0f:f6:56:cb:ca:dc:d0:d5:b4:73:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44df4fcb8ea51e18d290805c8f50f0df4340dbd5
Validity
Not Before: Apr 28 11:00:31 2025 GMT
Not After : Apr 29 11:00:31 2025 GMT
Subject: CN=f5aca04cf52024b915854881c90cf7863b20c4ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:55:41:94:8f:f4:2b:e5:ee:f3:2f:1d:06:1a:
d1:24:73:0e:cb:7c:5a:04:f3:09:b9:41:25:cd:bc:
2d:20:90:2e:f3:39:b4:7e:2c:cf:a1:80:cd:57:79:
87:66:b6:0c:19:f9:c5:cc:37:9e:50:56:05:b7:ca:
87:c8:ad:27:f5:d2:7e:98:80:1c:f1:2c:67:f8:20:
9d:25:d7:f0:04:4c:9c:c7:f0:22:41:d9:5c:02:5d:
17:d3:78:f3:77:c1:fe:5f:8b:2b:a5:4e:0c:b0:7c:
b7:db:c3:c5:1d:04:7d:54:37:13:95:ef:44:35:99:
ea:67:4e:ad:8a:55:11:2a:00:de:96:4e:2e:d0:13:
ad:3b:00:13:dd:97:18:0a:41:62:0e:cf:d4:ee:ef:
b6:3c:90:9d:f6:f1:10:9e:6c:b4:ab:b7:0d:b4:8e:
7d:5a:77:13:5c:5f:6c:19:f7:39:c0:ea:c9:ed:bb:
cd:19:0d:98:b0:a5:a4:e1:99:63:14:66:bf:f6:72:
4a:71:ca:65:f7:96:d3:94:91:aa:9e:27:c4:46:7c:
9a:56:5f:80:42:5f:64:f1:8f:20:6a:2e:15:2e:53:
62:b3:0d:0c:d5:50:6b:2b:51:6a:52:72:d9:a1:4f:
fb:74:17:60:b7:1e:9b:d3:54:f3:b3:c8:5d:6f:ad:
26:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:AC:A0:4C:F5:20:24:B9:15:85:48:81:C9:0C:F7:86:3B:20:C4:AB
X509v3 Authority Key Identifier:
keyid:44:DF:4F:CB:8E:A5:1E:18:D2:90:80:5C:8F:50:F0:DF:43:40:DB:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RN9Py46lHhjSkIBcj1Dw30NA29U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:f1:04:01:99:6e:b3:60:58:eb:7d:ef:b6:54:84:81:0c:44:
4e:da:ec:dd:48:4f:f1:4b:97:4f:ae:f1:f4:7d:22:75:a7:f3:
88:5b:38:08:f8:88:96:85:28:13:e3:db:af:f7:54:5b:ac:ec:
24:ce:ee:9a:48:9c:08:58:5b:5a:36:b3:1f:28:c8:1a:ea:cb:
70:23:1f:1e:3a:a9:cf:13:d7:54:91:e6:31:05:87:d8:70:65:
34:ea:3a:61:cf:c0:ed:2c:14:4b:46:5a:72:e2:c1:91:8c:77:
da:89:61:64:a3:d2:28:49:44:ab:e1:cf:4f:98:42:47:f4:c9:
f1:34:22:66:c4:9d:32:94:24:7c:26:d2:8a:59:75:ef:48:c7:
87:70:fe:2a:73:c3:61:a8:95:56:d0:bc:88:3f:87:76:1f:61:
1f:f2:2d:16:80:fd:2d:01:f4:cf:b1:29:98:e0:77:e1:4d:20:
e9:4e:24:b0:c4:66:a8:10:27:c1:2d:d0:46:5c:1b:91:1e:84:
53:b4:05:1d:99:b4:39:8f:f1:70:9f:12:f6:54:fa:35:29:d7:
77:1f:22:a2:68:78:92:90:c1:01:52:b4:e2:1c:94:57:cd:9d:
a1:7f:56:4d:be:c0:e3:e6:8a:11:7c:56:a8:7a:71:a9:01:9e:
be:bb:cc:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:01:53 2025 by rpki-client