Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.mft
File: Rg0xSfxQypeX9Q_engKggxNMUBk.mft (raw, json)
Hash identifier: Gvt2WPjHZWnDZwjLHj0HEkQCuEr5e2HBXZvj68FkGlg=
Subject key identifier: 90:A3:7E:C0:7B:65:D3:D9:19:03:B3:74:D1:3E:E0:D6:A4:94:36:7E
Authority key identifier: 46:0D:31:49:FC:50:CA:97:97:F5:0F:DE:9E:02:A0:83:13:4C:50:19
Certificate issuer: /CN=460d3149fc50ca9797f50fde9e02a083134c5019
Certificate serial: 019675679042CE5C7C19AE580B0930152DDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rg0xSfxQypeX9Q_engKggxNMUBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.mft
Manifest number: 13D5
Signing time: Sun 27 Apr 2025 04:00:43 +0000
Manifest this update: Sun 27 Apr 2025 04:00:43 +0000
Manifest next update: Mon 28 Apr 2025 04:00:43 +0000
Files and hashes: 1: Rg0xSfxQypeX9Q_engKggxNMUBk.crl (hash: s9GYM3P9nwsW5kU6ju8llrTsh1KJgZqIg184qybCDbM=)
2: rFN0KDBiljkvhFQ66hAH56Hsc84.roa (hash: 2lh/B/WXfyLgwdob+PT24RTvz83sEjoawwppCzC07qk=)
3: ttl4gF5H4xVOsldpEtY--5SUL-g.roa (hash: SbdB5263yFvJJDlQfuHRPnaHcrA2J/RblHkI32JVk8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rg0xSfxQypeX9Q_engKggxNMUBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 04:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:67:90:42:ce:5c:7c:19:ae:58:0b:09:30:15:2d:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=460d3149fc50ca9797f50fde9e02a083134c5019
Validity
Not Before: Apr 27 04:00:43 2025 GMT
Not After : Apr 28 04:00:43 2025 GMT
Subject: CN=90a37ec07b65d3d91903b374d13ee0d6a494367e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c8:05:e5:3a:e6:66:98:d3:75:d5:71:9a:64:
1e:78:bf:67:1e:e0:e6:29:3b:fe:58:f0:7e:70:64:
b0:54:a1:9d:1f:e9:7f:71:be:33:fc:11:d2:00:8e:
e4:80:de:fa:3e:90:f8:a1:39:28:35:b0:f7:f4:5b:
0f:42:7a:a6:16:59:9c:5f:d2:d5:94:67:98:6d:45:
08:f4:c1:fe:10:b5:c6:57:fd:ca:f0:60:9f:5e:4b:
a1:33:19:9a:6b:99:04:99:d1:41:b2:55:52:d2:35:
bf:8f:e3:5f:ec:29:c5:d5:8f:63:a8:2b:f2:73:41:
c0:bb:fe:df:8e:cf:dc:5a:2d:f5:ad:5e:47:80:10:
ad:7b:a4:dd:f8:e3:62:fb:39:e3:37:dc:db:63:48:
85:c4:2d:46:6c:ba:ed:c4:bd:e8:1b:4a:4b:9d:4b:
2c:6d:ab:bc:46:42:3c:c1:fd:13:27:a9:2a:11:3b:
80:52:b1:ae:14:e6:e1:4b:54:cd:2f:65:47:c2:2d:
97:69:db:08:3a:1c:13:7f:0a:d1:85:e7:fd:91:2d:
5f:34:a3:e6:d0:e0:4c:87:a1:83:53:ab:a4:88:15:
1c:e4:bf:0b:2e:69:e9:a5:fd:a1:eb:37:b6:c3:31:
5f:fc:2a:88:27:3e:2a:f0:8b:a9:e6:e9:16:7b:f5:
2f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:A3:7E:C0:7B:65:D3:D9:19:03:B3:74:D1:3E:E0:D6:A4:94:36:7E
X509v3 Authority Key Identifier:
keyid:46:0D:31:49:FC:50:CA:97:97:F5:0F:DE:9E:02:A0:83:13:4C:50:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rg0xSfxQypeX9Q_engKggxNMUBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:21:dd:bc:6a:0d:bc:a4:e3:18:e5:31:9c:47:fa:ff:df:26:
e1:02:72:ab:80:2b:74:f8:eb:25:95:3a:89:90:c5:1c:a3:01:
6e:78:a5:4a:12:fc:4d:92:67:14:a7:a3:c2:1a:e9:cc:6a:27:
57:9a:0c:1f:57:10:f0:2f:28:99:0c:76:b2:42:d6:da:f7:e4:
90:c4:b0:61:30:5b:3e:95:e0:e1:0a:76:f7:65:96:20:e8:6f:
80:2f:77:72:8e:3c:7b:45:2e:ac:57:e4:20:c7:ac:ae:f6:98:
66:a6:40:ae:49:25:ed:8d:d5:e5:b1:02:eb:70:49:d6:1e:94:
9d:20:c7:2e:c8:23:cf:03:20:92:e9:79:02:4a:2d:9e:fd:2b:
f8:cf:d7:af:f4:41:94:99:81:38:8e:87:67:f8:c0:9e:9c:ca:
99:99:30:2e:bb:18:5d:d5:91:3f:cf:56:40:da:cf:ff:39:6d:
a5:86:c1:fb:f3:44:19:08:ad:38:1a:47:57:fb:54:3b:41:32:
70:1f:a8:2e:00:99:3f:1c:84:1f:fe:0e:62:04:b0:f5:30:20:
0b:16:3c:2d:94:4d:d0:64:bb:c6:52:36:38:4d:c5:45:70:22:
8a:8a:a5:b8:63:89:ed:1a:88:a7:57:08:99:7e:3f:69:f2:64:
f3:21:e3:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:12:10 2025 by rpki-client