Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.mft
File: Rj-RcHf489DjOMdC6iHWQ1jRnVI.mft (raw, json)
Hash identifier: U1V+j49DQU37/Q8/+sn1rep3QRkX0BTn9e6XRugislE=
Subject key identifier: 3A:44:FD:B1:B0:7B:70:7E:2A:05:6D:32:F8:25:63:3A:64:D4:4F:5A
Authority key identifier: 46:3F:91:70:77:F8:F3:D0:E3:38:C7:42:EA:21:D6:43:58:D1:9D:52
Certificate issuer: /CN=463f917077f8f3d0e338c742ea21d64358d19d52
Certificate serial: 019671F8413C3705B1DEF43753A7E5535801
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rj-RcHf489DjOMdC6iHWQ1jRnVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.mft
Manifest number: 0475
Signing time: Sat 26 Apr 2025 12:00:17 +0000
Manifest this update: Sat 26 Apr 2025 12:00:17 +0000
Manifest next update: Sun 27 Apr 2025 12:00:17 +0000
Files and hashes: 1: K-1cBvMFbalkBJFw0sJ7i1WTZEs.roa (hash: 3Ikel/xplePBRCnzN26gvmaI2UYrfX6N2d00Q4SBcaQ=)
2: Rj-RcHf489DjOMdC6iHWQ1jRnVI.crl (hash: O68XpYELnbq9af65rLzXR/yT24OJdu3m01DzTEdkMeY=)
3: cpmcqEkiElTb72sko05fp48X-FM.roa (hash: xqlsImmQ/9E7U68AUDQtcRJOydRd1Euow8hua9KaN+Y=)
4: moiKPG2LP_pIBJ3oE3uKFFimTvs.roa (hash: 7/+kCaotJP3wY1l3ZzCfImaKj4/imFC7lov/Lv+DrVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rj-RcHf489DjOMdC6iHWQ1jRnVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:71:f8:41:3c:37:05:b1:de:f4:37:53:a7:e5:53:58:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=463f917077f8f3d0e338c742ea21d64358d19d52
Validity
Not Before: Apr 26 12:00:17 2025 GMT
Not After : Apr 27 12:00:17 2025 GMT
Subject: CN=3a44fdb1b07b707e2a056d32f825633a64d44f5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5b:ab:7f:8c:c0:1a:26:40:05:42:a0:d5:eb:
11:7a:63:91:1a:02:92:b6:68:87:3e:7c:f3:09:1c:
5c:c9:e4:26:d5:5b:4d:01:f2:d3:7a:5a:f0:74:e5:
ce:a9:fd:c5:95:14:8c:61:2b:d7:10:5a:ea:25:fc:
63:81:0e:de:12:41:96:6f:9e:52:82:44:51:8e:16:
69:dc:d4:c4:81:61:97:f2:57:32:13:69:6d:3e:bf:
f9:82:aa:ec:0f:99:f5:f0:88:af:af:7e:35:3a:ef:
fd:19:22:65:4d:68:49:1c:32:30:a5:c8:a9:a6:bd:
31:3e:2f:bd:c8:18:94:ec:51:c9:03:23:a8:f3:ec:
65:47:df:9f:e1:0f:56:97:67:d9:bb:da:45:5a:5c:
28:01:3d:20:a7:61:32:78:5c:36:54:45:d8:27:27:
11:ea:df:fd:5c:97:fc:ab:76:15:1e:04:2f:68:ef:
f4:a7:f5:ac:83:4a:96:fc:b1:d8:c1:9f:ae:d8:05:
ad:c5:60:3f:99:f4:a4:6a:e4:14:b2:20:f1:fe:f5:
2b:af:9f:af:39:7f:81:e8:50:2b:6d:4c:c2:c6:18:
c8:07:77:a2:64:1a:6e:33:c5:75:f4:2c:b1:b6:50:
b4:90:f9:72:1d:1f:6a:66:9f:cc:70:60:e7:9e:f6:
f8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:44:FD:B1:B0:7B:70:7E:2A:05:6D:32:F8:25:63:3A:64:D4:4F:5A
X509v3 Authority Key Identifier:
keyid:46:3F:91:70:77:F8:F3:D0:E3:38:C7:42:EA:21:D6:43:58:D1:9D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rj-RcHf489DjOMdC6iHWQ1jRnVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:f4:8d:e1:ea:6b:3c:7c:7f:b2:3e:3f:98:ef:f2:1f:09:a5:
a5:91:cb:ca:e6:40:f1:af:a3:6f:3e:ee:ff:82:31:5e:28:d2:
30:ac:6b:8f:c3:31:30:0b:fb:6d:c4:dc:e0:b9:91:4c:86:e9:
c8:a0:63:4e:70:c5:2b:3e:00:af:c9:ff:d2:77:a5:3c:e2:cc:
17:94:8e:d1:e8:70:52:cd:be:6c:37:5a:c7:8d:76:b7:8c:e1:
fa:b7:00:6b:38:83:26:d0:2e:55:81:e8:29:9a:62:f3:ea:bb:
13:8a:7e:c8:73:72:71:42:39:59:93:da:b3:0a:23:f8:cd:e3:
da:51:12:80:84:da:43:81:e6:32:a8:b4:cc:62:dd:89:12:03:
9f:90:89:36:10:e2:55:9f:5e:ad:55:f5:b4:4d:fd:4e:8c:66:
20:1b:c3:ca:38:fd:77:1f:7d:5e:a5:d8:7c:68:35:38:21:9b:
50:02:42:e9:00:13:af:86:dc:48:c8:b3:e1:62:36:b9:61:aa:
bb:3d:50:17:42:51:fd:96:fc:b8:f0:f5:a7:8c:fc:8d:6b:65:
5e:68:5c:40:63:8d:80:f4:b5:98:54:97:29:f5:53:b6:03:81:
d7:93:fc:5c:3d:7c:8e:cf:c6:d6:56:b3:5e:93:0a:30:64:da:
f2:db:6a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:58:32 2025 by rpki-client