
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.mft
File: RbmFSwRFlObPCEb7Qd57CQj7X3I.mft (raw, json)
Hash identifier: jPLl3pl2aTpM2lGqISB3o//RNo1JI01M50NK+A1SBlU=
Subject key identifier: A5:4A:91:AC:9C:C4:B3:ED:33:63:83:66:FA:0D:38:2A:1B:28:F0:31
Authority key identifier: 45:B9:85:4B:04:45:94:E6:CF:08:46:FB:41:DE:7B:09:08:FB:5F:72
Certificate issuer: /CN=45b9854b044594e6cf0846fb41de7b0908fb5f72
Certificate serial: 019674C26AC2CE78E88F322AFDF776E4AC2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RbmFSwRFlObPCEb7Qd57CQj7X3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.mft
Manifest number: 1516
Signing time: Sun 27 Apr 2025 01:00:20 +0000
Manifest this update: Sun 27 Apr 2025 01:00:20 +0000
Manifest next update: Mon 28 Apr 2025 01:00:20 +0000
Files and hashes: 1: RbmFSwRFlObPCEb7Qd57CQj7X3I.crl (hash: FYJyXtoGi457QDiOf1HmAjA7JUi32Y5OUUI98kKsJnw=)
2: uD_ngmtNEJDgxKTmDs0dfRFETyw.roa (hash: 4vDT31Aj0L6dgxcGHMciEeqVCA7CQgG4yXo6DYN6amk=)
3: yu9wHeNN9TadONpdFJDPVyyoWGY.roa (hash: PEOTovTwm3OBSyT0paVn7ex6UZ0Hs/vcgcpTRm80FKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/RbmFSwRFlObPCEb7Qd57CQj7X3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:c2:6a:c2:ce:78:e8:8f:32:2a:fd:f7:76:e4:ac:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45b9854b044594e6cf0846fb41de7b0908fb5f72
Validity
Not Before: Apr 27 01:00:20 2025 GMT
Not After : Apr 28 01:00:20 2025 GMT
Subject: CN=a54a91ac9cc4b3ed33638366fa0d382a1b28f031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d9:82:4b:44:8d:d6:c3:9e:67:e8:20:ac:00:
80:dd:84:9c:12:d0:86:9f:43:31:82:09:e0:28:43:
40:0a:53:21:35:4e:a7:0f:36:e4:0f:99:38:50:b3:
34:9c:f0:9c:a5:5a:89:9c:b8:4e:f3:4e:85:d0:db:
2b:b1:b2:17:07:fb:6e:28:b7:eb:28:85:47:fc:e3:
a9:b6:d8:8a:d5:ef:da:02:c0:01:4c:d8:ba:ca:3e:
b9:fa:08:21:dd:bd:f2:fa:46:5d:d5:5e:0a:42:fd:
b5:4d:5d:c7:7b:4f:e7:b8:46:8e:09:e4:ed:c6:b9:
16:a3:56:65:6e:db:37:20:67:27:fc:1b:a9:f9:a2:
37:eb:3e:c4:20:9b:87:52:c0:48:0f:d8:35:37:30:
a5:e7:69:32:c7:09:26:c9:22:56:5b:73:1f:7c:8e:
2a:b5:4b:3d:bf:3b:9a:2c:47:7c:d5:b7:42:43:be:
b6:f8:21:1a:3d:d3:48:e1:38:41:a0:c2:bc:96:a1:
96:1d:8c:a7:70:5c:56:6e:e5:e1:a1:0f:7b:d6:82:
24:bd:39:64:fa:b4:d1:ec:09:66:b8:ca:1b:2c:16:
97:40:3b:18:36:bd:03:fc:4c:ec:3d:d8:a9:96:bc:
14:bd:4a:2a:ac:69:dc:4d:c1:d2:e8:65:85:46:29:
4a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:4A:91:AC:9C:C4:B3:ED:33:63:83:66:FA:0D:38:2A:1B:28:F0:31
X509v3 Authority Key Identifier:
keyid:45:B9:85:4B:04:45:94:E6:CF:08:46:FB:41:DE:7B:09:08:FB:5F:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RbmFSwRFlObPCEb7Qd57CQj7X3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:56:cc:e4:50:7a:5f:91:91:d5:5c:93:ef:8d:bd:ea:fa:b0:
e1:bd:2d:4a:7b:b9:a6:1a:b0:90:8e:2a:b9:cd:f1:48:0e:42:
0c:f3:55:72:0b:84:f5:04:9d:70:12:07:e6:12:7f:85:66:29:
ca:4e:a1:c8:7a:e3:99:68:b5:8a:93:d0:16:9c:c6:cc:24:30:
fc:00:8c:c6:2c:20:4e:1d:4a:5c:7c:43:06:1e:ce:4b:6f:9e:
f1:c3:c7:9e:d7:95:ae:7f:e3:a8:2c:56:76:3d:82:f3:95:88:
6e:93:10:4a:9e:bd:96:62:62:7b:1b:76:bb:a9:7f:4e:bc:9e:
a1:44:eb:b2:85:b6:41:6f:eb:ee:f7:2b:cf:e8:a4:04:34:bb:
88:7b:b8:f0:5c:90:f3:87:f8:bd:21:f9:78:f7:03:2a:ba:75:
8b:f5:15:67:e7:26:99:a6:f8:ba:47:73:cd:ad:6e:34:29:af:
63:68:56:9b:1f:4f:fe:8f:bc:5f:20:c9:c7:49:f8:33:47:a0:
70:49:36:f2:68:48:47:dd:9a:ee:1f:5b:3d:60:1e:8e:4b:4c:
6d:33:de:49:90:ed:3e:39:dd:45:45:19:96:b7:6f:c1:96:fd:
a4:df:c3:74:48:19:7f:8d:1f:08:93:e7:1b:4c:f7:ee:f4:00:
06:0a:fd:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:36:02 2025 by rpki-client