Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.mft
File: RK1W7mAdrD36Yd_lLL9bALe3opA.mft (raw, json)
Hash identifier: EfzE4l5dYA5MaHZjKAExNMTpOioUEL4xclqRxy694AE=
Subject key identifier: AE:81:51:89:4D:A2:1F:03:7C:B5:A0:20:51:29:FB:5A:01:8A:5C:81
Authority key identifier: 44:AD:56:EE:60:1D:AC:3D:FA:61:DF:E5:2C:BF:5B:00:B7:B7:A2:90
Certificate issuer: /CN=44ad56ee601dac3dfa61dfe52cbf5b00b7b7a290
Certificate serial: 0196827E368363C7F9ABA75FE023C947CA12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RK1W7mAdrD36Yd_lLL9bALe3opA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.mft
Manifest number: 0905
Signing time: Tue 29 Apr 2025 17:00:31 +0000
Manifest this update: Tue 29 Apr 2025 17:00:31 +0000
Manifest next update: Wed 30 Apr 2025 17:00:31 +0000
Files and hashes: 1: RK1W7mAdrD36Yd_lLL9bALe3opA.crl (hash: TwI5gRTH/w0eFQATD6T6K+6ObXZtgfyBIlX3vTkee4o=)
2: lbF_l02xwlPuqyIyhvc-CUJUU3g.roa (hash: 7hIs2Gkxh47foaseC5DC1sFgdBVuaxJrQVf2xLhJkbc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RK1W7mAdrD36Yd_lLL9bALe3opA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:7e:36:83:63:c7:f9:ab:a7:5f:e0:23:c9:47:ca:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44ad56ee601dac3dfa61dfe52cbf5b00b7b7a290
Validity
Not Before: Apr 29 17:00:31 2025 GMT
Not After : Apr 30 17:00:31 2025 GMT
Subject: CN=ae8151894da21f037cb5a0205129fb5a018a5c81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:00:a0:3a:95:31:b3:a2:d6:6c:de:c9:b6:29:
fe:b0:d7:38:2f:19:3c:cb:1a:da:61:7f:67:70:56:
38:f8:b7:cf:f8:b4:bc:34:07:f0:36:98:b3:2e:a6:
7c:e2:b9:62:3d:45:7c:ed:41:3f:50:20:74:3d:ce:
b8:23:87:41:13:a1:66:18:6b:b7:f8:13:70:bb:9b:
76:4e:7b:94:fd:d8:ee:6a:65:d4:6d:77:4a:81:fc:
f8:28:d0:3c:a9:67:63:90:a0:90:02:f3:9e:b6:23:
98:0d:13:8d:79:65:b0:96:b8:19:f7:8e:0d:01:72:
a1:92:ec:4f:13:cb:77:4b:ef:99:6b:77:55:b1:45:
3f:ca:bd:ca:5d:4b:5a:a8:2b:9b:e0:d3:b2:d4:f8:
ee:96:54:ce:80:2b:93:71:36:27:f6:2c:ba:89:54:
7f:58:9a:e5:2a:1c:4d:be:da:81:20:5e:3b:1b:eb:
2d:b8:66:f1:f1:60:0e:e2:20:76:b7:5a:9b:25:26:
83:90:b8:97:27:c2:ad:a5:e6:17:2b:39:19:01:96:
84:2c:d1:b8:eb:5d:0a:64:05:fd:90:64:c4:79:0f:
f9:11:03:cf:da:12:c0:59:c9:3b:de:62:35:da:1d:
b7:4c:5b:ea:7f:48:5e:59:76:b6:c3:2b:bf:72:7f:
7b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:81:51:89:4D:A2:1F:03:7C:B5:A0:20:51:29:FB:5A:01:8A:5C:81
X509v3 Authority Key Identifier:
keyid:44:AD:56:EE:60:1D:AC:3D:FA:61:DF:E5:2C:BF:5B:00:B7:B7:A2:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RK1W7mAdrD36Yd_lLL9bALe3opA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:08:fc:b5:3a:af:6e:ca:07:29:ae:29:f2:a0:c0:4c:d4:cc:
0b:6d:fd:90:3a:9c:76:eb:30:fb:bb:c6:62:9f:e8:3e:a6:5a:
4b:5d:15:15:68:cc:9d:f5:6f:12:4e:91:5c:dd:fb:28:af:2f:
7a:04:f3:1a:94:f6:29:ce:22:2b:3f:d8:0f:a3:ad:ed:80:95:
a9:cf:de:61:5b:e3:27:93:f7:97:8d:b4:e6:68:68:0f:48:f0:
6c:f4:0c:db:ac:de:24:02:c5:68:be:eb:9a:0f:65:90:22:93:
18:82:11:f1:7b:f0:6e:83:bd:d8:ba:83:9c:71:0d:83:3b:ca:
a8:56:e9:1f:7a:b3:f7:4e:a2:04:95:e3:4a:32:44:5c:e4:b0:
d1:7d:ac:20:50:3e:60:b9:ef:ed:d1:85:2b:62:a1:b8:4e:3c:
a5:30:5b:83:ca:87:bc:71:53:69:4d:57:d7:13:bc:6d:b2:cc:
f8:b2:8f:60:13:81:65:0a:86:ca:1b:8d:05:8c:e7:51:bb:14:
e2:19:aa:83:9a:dc:4b:ed:e6:58:e8:4e:da:1b:91:6e:85:e9:
e8:4b:a7:c3:04:ac:0e:31:c8:63:a4:c5:59:85:8d:08:93:a9:
c4:5e:cc:5e:6f:bb:8d:20:ac:e9:1e:ce:58:b9:43:33:fb:02:
7c:c4:45:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:33:15 2025 by rpki-client