Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft
File: R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft (raw, json)
Hash identifier: ebRg77UPEUhbI2KHrzn4TZwAvLPfnnwbOLDjGfSIV1s=
Subject key identifier: 2E:2A:74:CD:FE:A4:2F:88:57:BC:04:88:1F:DD:C4:F4:2E:2D:D8:D8
Authority key identifier: 47:7F:4B:6E:C4:34:71:57:C4:D1:3E:F0:E7:AB:E1:29:0A:0B:F5:7C
Certificate issuer: /CN=477f4b6ec4347157c4d13ef0e7abe1290a0bf57c
Certificate serial: 019684DA772B0A28DEFC8A7E1310A092992A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R39LbsQ0cVfE0T7w56vhKQoL9Xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft
Manifest number: 051E
Signing time: Wed 30 Apr 2025 04:00:31 +0000
Manifest this update: Wed 30 Apr 2025 04:00:31 +0000
Manifest next update: Thu 01 May 2025 04:00:31 +0000
Files and hashes: 1: 0XKLHVF6OopWfkCp5SGDRjUGSwc.roa (hash: LlbXk7YPxKtyITregmmE7lsrGbU25UL9jnRqhgrsqYQ=)
2: BXJ7UivZREqfV3oE_cto5-RbCwU.roa (hash: H5O0TywJPldSIFgMKfugAhkIQ7kPwBy5/c6iSkGttag=)
3: R39LbsQ0cVfE0T7w56vhKQoL9Xw.crl (hash: I4f459YsnXcfJo+A7tdbXQ4Ont0qghX//TZyh5tn+ow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/R39LbsQ0cVfE0T7w56vhKQoL9Xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:da:77:2b:0a:28:de:fc:8a:7e:13:10:a0:92:99:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=477f4b6ec4347157c4d13ef0e7abe1290a0bf57c
Validity
Not Before: Apr 30 04:00:31 2025 GMT
Not After : May 1 04:00:31 2025 GMT
Subject: CN=2e2a74cdfea42f8857bc04881fddc4f42e2dd8d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e4:70:66:5f:29:d4:a7:a5:33:f7:4d:1c:a5:
20:d7:4b:97:46:ce:2f:5c:7d:2f:09:41:49:63:21:
0c:71:60:ef:d8:40:40:c9:df:88:ab:86:56:e5:0a:
b9:e1:ca:71:35:7a:0b:cb:30:2a:96:f7:a9:ab:b3:
22:9b:ef:63:44:9e:9b:16:c3:8b:de:aa:ad:3a:30:
1d:ab:b3:34:0b:5d:5b:56:f0:aa:7e:98:22:17:28:
25:31:2f:1f:f5:19:90:ac:e3:3b:49:98:22:91:86:
a2:0c:b7:44:38:98:50:39:3a:54:94:ae:bf:48:01:
cc:c5:cf:82:1d:97:81:fe:ea:07:46:80:2e:07:9c:
70:d8:f2:8b:fb:96:26:3d:a3:af:a3:27:df:bc:e7:
ad:88:d9:8f:d9:54:6d:36:bc:08:c3:36:9f:98:66:
c2:7b:4a:fd:3d:76:65:7b:7b:ff:21:44:0d:4d:d1:
b4:0e:d1:0f:ce:fe:d1:4f:27:2b:44:80:eb:11:c3:
46:89:8c:81:21:2a:a6:ec:99:af:8c:1a:43:df:2a:
30:8c:8a:a7:ce:df:31:2d:f4:7c:81:0b:08:47:95:
69:2b:f5:2b:e8:e2:ec:6a:7e:08:d3:ee:3c:3b:33:
f0:c5:8c:b6:9d:56:5f:ca:ff:0b:1b:ea:15:fc:8e:
d1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:2A:74:CD:FE:A4:2F:88:57:BC:04:88:1F:DD:C4:F4:2E:2D:D8:D8
X509v3 Authority Key Identifier:
keyid:47:7F:4B:6E:C4:34:71:57:C4:D1:3E:F0:E7:AB:E1:29:0A:0B:F5:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R39LbsQ0cVfE0T7w56vhKQoL9Xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/393e16-898e-45d8-9d72-d8bd250b64f9/1/R39LbsQ0cVfE0T7w56vhKQoL9Xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:a1:45:56:f5:01:ff:8b:d5:68:47:10:c3:42:f5:0c:06:97:
b7:5f:2a:fc:3a:39:f8:b8:9a:2c:94:28:48:26:d6:7c:cb:e4:
2d:b8:51:d9:e2:be:17:9d:3a:40:71:26:8a:7f:1f:47:9a:e7:
34:8e:81:68:70:ef:a1:7e:b7:ed:19:59:ee:b3:dc:a7:c7:d6:
5e:6d:2d:33:fc:b8:f2:40:6a:6c:ce:b2:10:98:07:79:2f:fd:
f7:1c:4e:b1:23:0a:f5:4d:22:ce:e9:97:5d:f0:a0:6b:d2:85:
1b:53:76:f7:90:38:91:dc:fc:53:c0:08:17:46:da:cd:be:d4:
3f:c1:63:7a:63:11:be:66:4f:53:c9:95:2e:07:36:a1:3c:5b:
ea:a8:68:14:74:2b:07:b6:c6:52:17:24:8e:0f:f7:a5:ad:59:
b8:31:f8:89:5b:86:72:40:3f:f7:9b:4f:e6:30:81:dc:a6:bc:
88:33:1a:2e:a7:02:fe:71:a1:4f:e1:ac:50:fb:71:76:7a:ec:
0d:78:fc:e6:01:74:1d:a6:02:8c:02:ea:ee:93:8e:0c:f9:f6:
dc:b2:5b:88:95:b2:5b:d2:4e:91:76:0a:5e:b3:4d:43:bb:56:
42:3a:41:8b:54:9f:28:54:5d:de:c8:a2:f4:00:ed:0d:6e:9b:
1e:31:f0:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 09:48:00 2025 by rpki-client