Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft
File: RsyrdHmk4NikF3NQoAppvYg7BI0.mft (raw, json)
Hash identifier: URPnd5jsUdcAuKlSUxIbzN90Osz75Khyhq9rfsiFk2A=
Subject key identifier: 8C:9E:BC:CF:AC:64:9C:86:89:A7:46:F0:EF:45:0A:59:2C:D2:C7:0E
Authority key identifier: 46:CC:AB:74:79:A4:E0:D8:A4:17:73:50:A0:0A:69:BD:88:3B:04:8D
Certificate issuer: /CN=46ccab7479a4e0d8a4177350a00a69bd883b048d
Certificate serial: 019675D4F494ED5490C38DCA67E427D17B5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RsyrdHmk4NikF3NQoAppvYg7BI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft
Manifest number: 150E
Signing time: Sun 27 Apr 2025 06:00:12 +0000
Manifest this update: Sun 27 Apr 2025 06:00:12 +0000
Manifest next update: Mon 28 Apr 2025 06:00:12 +0000
Files and hashes: 1: RsyrdHmk4NikF3NQoAppvYg7BI0.crl (hash: F4ruwdtgjZTHFDQczECmpicDrW9csX4YRo5dkDFCujw=)
2: kbK5FbYWiIzhyfd6X1FvOM4LM_M.roa (hash: DqjgdH8s8QL3DkbtV73wzVgdXOipMU6gUg//vr7va8U=)
3: mDUiFexcT2mv6c5O8qGbFAH9b3Y.roa (hash: pPWVkb6MaBCnVH/KCkJGhD1ngVL39J0MeLmVUJGfUTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RsyrdHmk4NikF3NQoAppvYg7BI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:d4:f4:94:ed:54:90:c3:8d:ca:67:e4:27:d1:7b:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46ccab7479a4e0d8a4177350a00a69bd883b048d
Validity
Not Before: Apr 27 06:00:12 2025 GMT
Not After : Apr 28 06:00:12 2025 GMT
Subject: CN=8c9ebccfac649c8689a746f0ef450a592cd2c70e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6e:72:14:fb:b7:5a:aa:16:4a:fa:7b:f8:bd:
28:9d:e4:2f:3c:ca:52:44:30:da:e9:19:e2:c6:7d:
f4:50:c8:60:e3:02:98:10:c2:93:82:d7:9d:fb:20:
b7:5e:9e:c5:8c:8d:5e:7d:67:9e:80:66:30:3a:ad:
a9:77:79:70:1c:53:c7:97:00:dc:99:be:7e:1b:cd:
e1:10:65:06:1d:f5:f4:62:2b:60:05:bb:ad:55:71:
89:af:b3:9f:56:00:bd:d1:c0:e9:c6:d8:21:76:ed:
d2:d2:46:dd:a6:82:8a:ca:78:5f:7c:1d:20:73:41:
29:1f:7b:a3:18:36:19:99:7e:4d:07:54:d8:57:3b:
7a:4e:c1:f0:c2:4f:a4:78:6c:f6:09:88:c1:0f:56:
bf:96:c3:a8:8b:94:6e:b0:c5:c4:c8:6b:a5:6e:2d:
61:6e:85:f5:9e:96:e4:16:a0:aa:89:ff:ce:9e:05:
75:15:be:89:4e:f6:79:4a:05:05:91:d4:04:ae:0c:
59:a3:60:22:1f:5b:96:4d:48:5f:ce:3e:f5:4f:58:
6f:31:8a:3b:53:75:2f:e2:86:f0:f8:c9:9b:2e:48:
43:f2:d5:ce:22:db:a4:56:31:a2:e1:b0:a2:1e:cd:
b2:05:55:b7:aa:eb:de:fa:40:b8:c5:44:99:8a:94:
c8:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:9E:BC:CF:AC:64:9C:86:89:A7:46:F0:EF:45:0A:59:2C:D2:C7:0E
X509v3 Authority Key Identifier:
keyid:46:CC:AB:74:79:A4:E0:D8:A4:17:73:50:A0:0A:69:BD:88:3B:04:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RsyrdHmk4NikF3NQoAppvYg7BI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:13:d7:ab:ea:ac:cd:a9:8e:23:f2:6a:ee:b1:93:da:70:8e:
23:68:06:d4:45:80:9e:1f:58:bd:f0:3d:6d:db:06:a9:2e:4c:
5f:64:4c:71:ca:9c:e9:04:42:d8:b7:92:0d:2f:36:89:de:c8:
dc:d0:34:0b:72:1a:25:50:34:6b:ca:f7:9c:b6:57:3f:ac:e3:
b6:8a:11:da:08:09:57:40:41:34:8e:a7:e5:51:e4:9d:4d:35:
63:14:a7:05:83:b5:c4:ad:67:b6:11:35:99:dc:ad:18:2a:3f:
0b:52:ce:fa:ae:d7:20:66:00:af:28:23:10:cb:bd:a0:6a:2b:
15:94:10:49:d0:59:04:20:a3:19:2d:bc:92:28:20:da:93:cc:
cc:5d:f8:47:fb:c6:ee:89:41:e1:44:52:8c:b9:1b:b1:d8:75:
b8:83:05:4c:58:d7:6c:a0:c4:20:1b:e7:50:c7:a2:52:78:0f:
12:d8:db:da:26:fd:62:3e:60:9d:6c:3c:ce:af:84:f1:c0:78:
64:31:1d:c5:3b:e3:fc:e0:6a:51:10:11:b4:0a:63:1d:29:a1:
a8:d3:ab:1c:d6:99:5e:4c:78:2a:b0:4e:b4:6f:56:9a:48:9b:
a5:4a:22:6a:33:65:36:fe:58:ce:08:7e:12:d0:c2:b5:15:71:
93:0f:a4:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:16:39 2025 by rpki-client