Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.mft
File: r0b7jUGkckKuPujOHw-o74EWmLU.mft (raw, json)
Hash identifier: bbQ8d9RVTpm0lRWMB/GANCYOfAbSh/nbt5DE1S+vXhE=
Subject key identifier: D2:A7:0B:DD:BC:78:5B:32:FB:6A:F8:9F:AB:CA:CD:6F:6C:F0:38:35
Authority key identifier: AF:46:FB:8D:41:A4:72:42:AE:3E:E8:CE:1F:0F:A8:EF:81:16:98:B5
Certificate issuer: /CN=af46fb8d41a47242ae3ee8ce1f0fa8ef811698b5
Certificate serial: 01967AC470A69395C03669BB8037E69444E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r0b7jUGkckKuPujOHw-o74EWmLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.mft
Manifest number: 1510
Signing time: Mon 28 Apr 2025 05:00:16 +0000
Manifest this update: Mon 28 Apr 2025 05:00:16 +0000
Manifest next update: Tue 29 Apr 2025 05:00:16 +0000
Files and hashes: 1: PtQPD0TcWGGlrHrTKtFaghUGI8Q.roa (hash: M4698F1pGrbgP6S//HBwAHD8jz/cn5NjY1ncpneTdfY=)
2: r0b7jUGkckKuPujOHw-o74EWmLU.crl (hash: xi7QBLP8HuRdCa2G/4cPaoKxlSHXBk84i0rOHqfdnQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/r0b7jUGkckKuPujOHw-o74EWmLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 05:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:c4:70:a6:93:95:c0:36:69:bb:80:37:e6:94:44:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af46fb8d41a47242ae3ee8ce1f0fa8ef811698b5
Validity
Not Before: Apr 28 05:00:16 2025 GMT
Not After : Apr 29 05:00:16 2025 GMT
Subject: CN=d2a70bddbc785b32fb6af89fabcacd6f6cf03835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fc:2c:97:e3:ac:83:2d:d9:9d:8b:1f:80:42:
31:7f:7f:7a:47:9a:d2:72:95:ec:81:c5:62:46:39:
04:90:0b:6b:28:ca:a3:2e:88:16:d8:01:f4:3d:b7:
e6:48:a8:4e:13:3e:07:ec:6d:ac:36:0f:b6:dc:34:
4b:d9:74:aa:a3:3d:02:1f:31:c0:e2:58:54:6b:c7:
cf:da:65:fb:93:27:19:ee:79:cc:3b:91:02:59:d6:
4c:c2:f4:4e:7f:28:b2:36:1e:ed:f1:85:c6:a1:c8:
a1:a7:0e:a7:06:b8:e6:27:95:63:47:7b:c6:de:f0:
cd:49:78:7a:2d:ab:f9:22:56:4d:50:bd:fc:5e:2b:
27:bc:53:7c:24:9d:86:6e:6e:49:de:d6:22:84:14:
a1:1f:06:df:a5:54:b3:d6:3b:74:a8:d8:51:28:55:
be:8b:34:7a:a5:5b:05:31:c7:ae:4a:36:f0:d7:4d:
7b:6c:e0:55:d1:4b:df:87:98:73:50:1e:f2:c8:66:
bd:54:f3:a4:42:c8:6f:18:c0:5c:6f:99:3b:aa:ff:
c2:25:52:ab:26:12:0f:dc:92:59:d3:db:12:c4:5a:
55:6e:61:5a:f1:45:15:61:29:a9:16:72:6a:8b:6e:
b4:d8:ef:6f:22:72:f6:23:9b:27:3c:a4:59:f8:57:
de:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:A7:0B:DD:BC:78:5B:32:FB:6A:F8:9F:AB:CA:CD:6F:6C:F0:38:35
X509v3 Authority Key Identifier:
keyid:AF:46:FB:8D:41:A4:72:42:AE:3E:E8:CE:1F:0F:A8:EF:81:16:98:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r0b7jUGkckKuPujOHw-o74EWmLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:b0:96:dc:5a:a0:3f:71:76:87:a8:8b:45:8a:9e:34:72:f4:
17:7b:82:c4:28:98:61:d9:4c:d0:ae:cf:ed:9b:a8:21:98:e3:
d1:1a:07:a1:a4:21:d2:b0:73:6e:b7:96:74:cf:5d:c1:65:5c:
09:6a:bf:bd:82:5f:81:da:73:e8:65:16:ff:fe:ef:f8:98:d4:
f7:84:6d:0d:6f:8d:47:89:04:87:12:33:b0:8b:4a:d3:65:eb:
e8:02:34:c9:f6:2e:d2:6d:30:38:42:12:24:a4:08:2b:b3:fb:
11:1f:f7:29:36:2b:a1:71:3f:8b:f2:51:06:8d:1d:08:d9:87:
41:3e:ae:15:a8:04:d4:2b:e2:de:ba:d7:23:04:25:fc:9f:3e:
17:c7:8c:c5:66:e2:6f:c4:e2:62:e2:e9:79:b1:bc:43:c3:4f:
0b:f1:81:4d:27:ae:94:0c:2a:bb:73:60:22:16:78:7d:f8:6b:
f7:d5:e1:a3:61:0e:a2:98:1f:a5:cc:30:f4:72:8f:79:d0:49:
66:69:36:52:be:f2:fc:83:4a:99:a0:2e:c0:84:97:2a:7a:18:
19:10:d8:04:6d:b0:88:3c:f1:70:f9:77:aa:ac:44:be:15:de:
dd:28:cc:1f:aa:bb:8a:36:9b:0a:9f:14:69:9f:fe:65:d3:74:
2f:ad:e3:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:57:17 2025 by rpki-client