Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft
File: RSfyHUBiHlgT5KBpIRlH4k0A55c.mft (raw, json)
Hash identifier: O3rhY1BnhUIpUVxWAIVhFJgahqq7nybtgbD/+2HGZ6A=
Subject key identifier: B8:4B:14:F5:D8:FE:A3:BE:41:02:B7:8C:54:C9:CF:17:8A:31:BC:AA
Authority key identifier: 45:27:F2:1D:40:62:1E:58:13:E4:A0:69:21:19:47:E2:4D:00:E7:97
Certificate issuer: /CN=4527f21d40621e5813e4a069211947e24d00e797
Certificate serial: 0196760BF556FDF920C5741F993A8940DE53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RSfyHUBiHlgT5KBpIRlH4k0A55c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft
Manifest number: 150D
Signing time: Sun 27 Apr 2025 07:00:17 +0000
Manifest this update: Sun 27 Apr 2025 07:00:17 +0000
Manifest next update: Mon 28 Apr 2025 07:00:17 +0000
Files and hashes: 1: RSfyHUBiHlgT5KBpIRlH4k0A55c.crl (hash: AuWIBgRzhKnGHIdb8MEMfOxNIQMfi8qBwHTXLOhKPXM=)
2: vI1HVKVzSovdfnitP5UZ3coZhWk.roa (hash: cmV3rToD1U+gURWFgpIifqRZJUwIYZppdxx/PgY7lUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft
rsync://rpki.ripe.net/repository/DEFAULT/RSfyHUBiHlgT5KBpIRlH4k0A55c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0b:f5:56:fd:f9:20:c5:74:1f:99:3a:89:40:de:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4527f21d40621e5813e4a069211947e24d00e797
Validity
Not Before: Apr 27 07:00:17 2025 GMT
Not After : Apr 28 07:00:17 2025 GMT
Subject: CN=b84b14f5d8fea3be4102b78c54c9cf178a31bcaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4d:b6:b5:95:2b:25:f3:5f:a1:1e:bb:9a:76:
0f:e2:a6:67:e3:80:40:20:a9:84:91:cc:20:2e:28:
c6:33:83:a4:e6:04:10:e2:9c:9f:de:a9:1a:6c:9b:
b4:eb:d7:af:70:fb:08:ac:3b:6e:a2:25:15:eb:1b:
b3:05:7e:94:c1:56:e4:81:23:be:1a:bf:ce:36:14:
b1:0e:63:61:b3:ce:09:4e:48:92:0c:81:17:bd:f0:
89:e7:18:4b:b7:e5:68:c8:d1:55:34:71:c7:b1:4b:
b6:f0:c0:91:4f:eb:27:20:ed:da:26:c9:cd:5b:7a:
7c:42:d2:e3:d9:80:e8:c9:c3:03:5a:05:e8:b3:40:
bd:3b:6d:26:49:51:83:43:ff:57:5a:20:0c:af:e8:
7f:f4:f7:7d:c1:60:58:81:57:7f:dd:e7:7b:7f:27:
30:28:47:16:66:6e:a9:cc:16:26:aa:0f:47:ae:24:
c7:dd:90:24:f7:f2:b5:06:64:0d:89:56:11:95:51:
97:16:0c:f7:9a:dc:df:86:ff:61:e2:55:73:25:d8:
8a:0a:97:2c:10:9a:dd:9e:c0:cd:e2:78:3e:bb:fe:
ce:2d:72:2c:83:80:28:5b:bc:c9:19:36:69:92:8f:
37:ba:d4:1d:e2:63:75:41:eb:0e:23:e4:57:40:c5:
8a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:4B:14:F5:D8:FE:A3:BE:41:02:B7:8C:54:C9:CF:17:8A:31:BC:AA
X509v3 Authority Key Identifier:
keyid:45:27:F2:1D:40:62:1E:58:13:E4:A0:69:21:19:47:E2:4D:00:E7:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RSfyHUBiHlgT5KBpIRlH4k0A55c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:93:5e:71:fc:6b:e9:52:88:2a:e2:25:c7:1e:54:be:00:d6:
02:bb:56:23:bc:60:cd:d4:ff:02:c6:1a:25:56:1c:2b:5a:c4:
c4:79:75:9f:cc:40:93:86:27:ae:f3:72:98:c4:d1:5d:91:dc:
34:8d:78:b1:60:92:c4:e8:7b:68:6b:39:9a:1f:3d:24:ab:c5:
21:3e:7c:0d:58:7d:90:69:ed:fe:ec:73:f1:fd:88:71:3c:c2:
e2:42:8d:74:cb:c1:9d:6b:8d:2f:90:6a:24:2f:ed:9d:bc:29:
71:20:c6:1d:c0:55:2e:81:19:11:95:f7:76:6e:2a:62:74:c2:
2c:45:fa:90:27:72:16:30:d9:d6:6e:50:fd:40:cf:d8:f6:09:
8b:6d:9d:13:3d:f5:82:8d:72:b9:c4:85:a3:39:f8:75:05:09:
46:f8:cd:64:ba:6e:44:ff:20:6b:4a:65:7e:f6:53:f4:11:17:
14:55:5c:0e:21:e8:22:57:4d:3d:d9:2a:71:31:2f:50:0d:95:
ee:6e:6a:d9:5f:b4:4c:a4:4d:6c:3d:3a:d4:57:c5:a1:4b:fb:
ef:18:df:d7:c2:55:7b:d1:22:79:30:35:cb:59:81:82:6e:f0:
a2:02:89:47:73:48:c7:4a:03:c6:94:ad:7d:14:b4:e6:44:db:
8f:74:23:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:34:01 2025 by rpki-client