Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft
File: RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft (raw, json)
Hash identifier: S/8h1ghLvhM2yVWW4bKRVNmJQnJJ4M7Qj3984XlS6Eo=
Subject key identifier: 92:88:21:68:C1:DE:AB:DF:E4:E5:02:24:EC:F8:0F:46:22:57:20:64
Authority key identifier: 46:03:C6:56:C1:97:46:1A:49:CA:A1:FF:D7:20:D1:8B:EE:AC:80:76
Certificate issuer: /CN=4603c656c197461a49caa1ffd720d18beeac8076
Certificate serial: 019690A7C11B833C90961B45EA7DEA4ADCCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RgPGVsGXRhpJyqH_1yDRi-6sgHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft
Manifest number: 02E5
Signing time: Fri 02 May 2025 11:00:35 +0000
Manifest this update: Fri 02 May 2025 11:00:35 +0000
Manifest next update: Sat 03 May 2025 11:00:35 +0000
Files and hashes: 1: RgPGVsGXRhpJyqH_1yDRi-6sgHY.crl (hash: skJCW26NVHyPgIaP5wL7d+4niuhM4OZXvF0TLp1u/TI=)
2: etkRbnW9ryrJ6e3ywwJ1q9bD7Xw.roa (hash: JMmWgxd8mijwpLVsPTeG3AKA8OAxDNzyK+lSzQE8/U0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/RgPGVsGXRhpJyqH_1yDRi-6sgHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:90:a7:c1:1b:83:3c:90:96:1b:45:ea:7d:ea:4a:dc:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4603c656c197461a49caa1ffd720d18beeac8076
Validity
Not Before: May 2 11:00:35 2025 GMT
Not After : May 3 11:00:35 2025 GMT
Subject: CN=92882168c1deabdfe4e50224ecf80f4622572064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:08:42:45:95:e4:1b:df:45:b7:2e:a1:b5:32:
21:92:a7:1d:79:3d:69:61:b5:4b:eb:62:29:81:09:
87:bd:05:a7:a8:9e:79:97:e6:3e:be:3a:5e:b7:fe:
57:01:9c:aa:00:10:1a:fa:5b:4a:a9:fd:88:33:ba:
54:ca:e5:c5:cb:a5:c5:78:75:6b:fd:a8:21:39:58:
2a:30:43:71:44:75:39:99:d1:51:37:f5:83:78:7c:
2e:a8:2a:65:54:a4:10:ec:70:a2:ab:68:9f:0f:dd:
c4:da:cf:5d:59:44:21:15:b2:19:0b:f9:ad:4e:87:
18:5c:32:c9:ee:16:2c:01:14:5e:89:34:08:4d:aa:
aa:9c:d2:1e:39:7e:55:b6:01:c0:f5:c9:5f:ef:4c:
32:b5:8c:ac:5b:e7:ab:a5:fa:d0:1a:e2:a4:f8:2d:
e8:81:d8:c7:03:1a:63:ea:79:90:5a:3d:c7:0c:66:
ab:e0:de:e0:02:cf:d4:ff:db:74:1b:b7:6d:b3:58:
f1:54:32:99:97:e9:57:1c:1f:8c:18:9f:e3:3c:a0:
bc:fd:83:5a:9d:c5:0c:3a:85:9b:c2:76:4d:ea:6f:
25:7b:0c:31:5b:e8:fd:44:58:2e:49:b7:e8:b9:28:
10:bd:de:b2:75:f8:f0:42:4d:3e:b8:8d:ab:22:bf:
1e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:88:21:68:C1:DE:AB:DF:E4:E5:02:24:EC:F8:0F:46:22:57:20:64
X509v3 Authority Key Identifier:
keyid:46:03:C6:56:C1:97:46:1A:49:CA:A1:FF:D7:20:D1:8B:EE:AC:80:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RgPGVsGXRhpJyqH_1yDRi-6sgHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:c9:7d:c9:89:c0:ed:60:82:4f:a5:6b:38:3d:1c:87:2e:2a:
36:18:71:3d:9f:37:64:61:4b:97:4d:1e:61:64:2a:ce:db:f1:
71:55:02:cc:6b:44:61:89:8e:2e:bb:14:f3:d2:cf:f7:19:3c:
47:54:e5:59:53:1f:1e:a4:e2:e0:96:f1:1e:ff:86:a2:df:d3:
b8:63:ab:93:db:60:d8:a1:67:a5:fa:8b:c0:dd:d1:44:40:81:
29:aa:64:22:4b:b5:19:4d:3d:e5:ac:3f:28:b5:ac:b4:a8:32:
f2:97:af:03:66:47:1d:cf:e6:b5:f3:a8:fa:61:e6:64:38:8b:
d8:22:49:90:96:54:f3:97:ed:eb:b2:26:c2:0e:f3:37:1e:3c:
55:b5:af:64:8f:0b:21:c2:c5:d5:32:e4:c4:54:4e:32:90:02:
be:e1:d1:b5:81:ea:e0:33:5e:b6:bd:f0:cc:b2:cf:63:ed:a2:
cf:8a:f4:c4:2d:34:df:8c:32:35:62:df:a8:6f:73:c2:25:e2:
4d:6f:c9:51:b5:e4:d2:f4:b8:e8:3d:55:00:b2:6b:5f:7a:a6:
1e:32:e8:47:7f:5c:7e:05:d8:26:2e:70:af:09:91:58:98:a1:
5f:c6:f4:3e:29:89:bb:b7:29:41:9e:8e:da:98:00:1b:9b:ef:
7e:8d:2a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 19:24:24 2025 by rpki-client