Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.mft
File: RFZsGig9VT7z9lb1ciOYTdp8NV8.mft (raw, json)
Hash identifier: KWnjRkPYhLIvuNn5ovW8DjFlACY4mBAwICDZJqMv2AE=
Subject key identifier: 2C:42:DE:5B:62:3D:82:7E:A6:4B:E9:73:2D:E7:53:36:B0:A7:45:8F
Authority key identifier: 44:56:6C:1A:28:3D:55:3E:F3:F6:56:F5:72:23:98:4D:DA:7C:35:5F
Certificate issuer: /CN=44566c1a283d553ef3f656f57223984dda7c355f
Certificate serial: 0196741DBB51C842129BBFD8AA25C1D1F710
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFZsGig9VT7z9lb1ciOYTdp8NV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.mft
Manifest number: 150F
Signing time: Sat 26 Apr 2025 22:00:27 +0000
Manifest this update: Sat 26 Apr 2025 22:00:27 +0000
Manifest next update: Sun 27 Apr 2025 22:00:27 +0000
Files and hashes: 1: RFZsGig9VT7z9lb1ciOYTdp8NV8.crl (hash: tEzZ6PWogx3EKOHBgADYYcJmQxh3MTvwmk+saDnk1mE=)
2: xOrZrnnNO1wW9p4s49S_LuX8hPc.roa (hash: hZIiC9kkNV8eJaOx5V1jcu1tdvVz3yuRCZDhua0CV0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFZsGig9VT7z9lb1ciOYTdp8NV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:1d:bb:51:c8:42:12:9b:bf:d8:aa:25:c1:d1:f7:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44566c1a283d553ef3f656f57223984dda7c355f
Validity
Not Before: Apr 26 22:00:27 2025 GMT
Not After : Apr 27 22:00:27 2025 GMT
Subject: CN=2c42de5b623d827ea64be9732de75336b0a7458f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:49:02:c1:29:28:7e:80:18:c2:09:ed:a7:0c:
4e:aa:ea:e9:bc:62:40:31:ae:fa:1d:96:0c:61:8b:
bc:cf:26:4a:0e:ae:d5:c6:92:31:f8:31:da:02:04:
a6:3b:23:17:bf:ec:31:fb:b4:78:5b:d0:81:cc:34:
2e:a0:f7:57:63:ca:9c:66:87:32:0d:d1:7e:9a:42:
e3:64:97:7f:88:42:45:8e:7c:e2:97:df:15:94:e2:
9f:c3:ba:f4:65:7b:a0:8a:f4:23:a9:43:0c:c3:74:
c7:6b:5b:b2:60:2a:53:c6:d7:3e:7c:ff:66:d4:f9:
bb:f6:55:f5:82:b1:46:c8:8c:02:86:0d:4e:af:b3:
81:d9:1a:9a:3e:cd:f1:63:70:5c:82:e9:18:f3:89:
95:82:c7:04:3a:79:4a:77:9d:ff:42:3e:b8:f2:c5:
f1:3f:69:4a:dd:f3:a2:30:df:27:37:f6:f0:81:b9:
fe:2e:65:fe:2c:98:01:b9:12:f6:5a:32:3b:56:ca:
96:ef:62:f4:a6:4c:8b:38:cb:ed:65:52:25:08:f6:
7e:d4:b2:43:69:39:7f:da:9b:35:43:49:ad:19:db:
2f:a4:7c:77:e4:3f:95:73:27:2c:29:6a:d6:d3:20:
ca:51:90:56:e4:a5:b7:7d:7f:cf:0b:22:2b:95:b2:
f4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:42:DE:5B:62:3D:82:7E:A6:4B:E9:73:2D:E7:53:36:B0:A7:45:8F
X509v3 Authority Key Identifier:
keyid:44:56:6C:1A:28:3D:55:3E:F3:F6:56:F5:72:23:98:4D:DA:7C:35:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFZsGig9VT7z9lb1ciOYTdp8NV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:10:bd:57:f5:65:3e:61:79:3d:84:12:39:9e:52:60:ea:33:
b4:80:dc:a6:51:9d:40:98:2d:2a:61:6d:63:e4:9a:7d:64:8f:
84:15:15:e9:aa:36:f9:fa:df:a6:47:88:8a:3a:81:86:2d:91:
36:53:95:c3:b4:e0:b9:45:68:05:96:4c:d6:dd:62:0b:b3:d5:
f4:8e:f0:91:07:5b:a4:4d:1d:43:a0:23:53:dc:8f:06:19:6d:
00:73:dd:06:16:cf:38:33:16:ad:54:07:bb:8c:eb:53:10:3f:
b8:59:53:22:79:8d:d0:bd:5f:26:e2:f4:1f:7c:d7:26:46:4c:
72:3f:ec:b3:6b:e2:f5:c7:a9:57:8a:68:53:24:15:22:48:4e:
ad:97:6f:a9:8b:a0:5c:18:5f:81:b6:47:de:0e:ae:74:73:d7:
cf:45:50:13:53:2e:f3:25:da:db:b5:e5:f2:47:0d:58:ba:d5:
cb:73:30:ac:d8:52:dd:e5:d2:83:10:4e:af:89:41:92:60:87:
0d:e4:b2:86:95:7d:44:22:e9:59:37:e0:ef:d6:f5:d5:08:ca:
5d:cb:b2:d9:d5:51:86:6b:85:dc:cf:d5:78:57:4d:c3:15:67:
1a:74:98:15:2a:bd:01:d2:74:15:cf:b4:e0:ec:b3:8c:1c:78:
50:26:7e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:47:01 2025 by rpki-client