Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.mft
File: rLwtpPrHe7qtKaWYa0EH9THtLj4.mft (raw, json)
Hash identifier: jYQrwy4Zv/EJJc0WPnU42oPxe+GDsSVu8RpJ2eZtlG8=
Subject key identifier: 94:75:E6:C6:A8:5F:87:63:0D:E9:93:FE:53:81:48:CA:D2:68:8C:18
Authority key identifier: AC:BC:2D:A4:FA:C7:7B:BA:AD:29:A5:98:6B:41:07:F5:31:ED:2E:3E
Certificate issuer: /CN=acbc2da4fac77bbaad29a5986b4107f531ed2e3e
Certificate serial: 019674F99AE9D8B486B87CC94D70A1A3ECCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rLwtpPrHe7qtKaWYa0EH9THtLj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.mft
Manifest number: 13C4
Signing time: Sun 27 Apr 2025 02:00:37 +0000
Manifest this update: Sun 27 Apr 2025 02:00:37 +0000
Manifest next update: Mon 28 Apr 2025 02:00:37 +0000
Files and hashes: 1: idTCOx8-4Tst-Qoz7K6F7H3dYN4.roa (hash: arkT/3jnb38g6YOrTZp9aafP6pWkmdDHWiUSBAjozQo=)
2: rLwtpPrHe7qtKaWYa0EH9THtLj4.crl (hash: 67A5byCmOqyD5f0oCH+l5f9qaIonbyTZO0ziNeiCz9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rLwtpPrHe7qtKaWYa0EH9THtLj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:f9:9a:e9:d8:b4:86:b8:7c:c9:4d:70:a1:a3:ec:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acbc2da4fac77bbaad29a5986b4107f531ed2e3e
Validity
Not Before: Apr 27 02:00:37 2025 GMT
Not After : Apr 28 02:00:37 2025 GMT
Subject: CN=9475e6c6a85f87630de993fe538148cad2688c18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4a:cf:c9:82:bb:b1:ac:f7:f0:ea:77:41:56:
1f:0b:a8:42:c8:36:3f:73:43:30:68:42:bf:d9:d5:
64:b5:57:ca:3e:51:33:35:05:a7:51:d2:04:97:74:
ae:27:0d:f9:b3:d2:fd:ca:b5:5c:dc:71:5d:52:8d:
ae:00:d4:55:3e:08:30:5c:8a:42:00:2c:81:ca:a7:
07:c3:d1:2e:32:51:c5:e9:8f:78:ff:0a:99:5c:6e:
a4:9e:54:66:49:a7:56:c8:95:66:40:6a:b0:1b:62:
f1:63:79:cc:53:02:f8:86:21:9e:6a:2e:20:23:e0:
60:45:e2:5c:4e:91:98:74:c4:f8:ff:99:1b:47:0a:
9e:90:16:e0:41:14:79:b5:26:26:39:be:65:68:7e:
a8:14:65:d6:f4:bd:49:70:31:48:24:20:7e:b5:29:
8e:31:aa:53:27:fa:4e:65:30:0c:9b:dc:95:9c:79:
9a:3b:12:be:f7:0f:01:3f:9e:0a:79:0c:3c:a0:97:
5d:c5:67:14:eb:db:05:70:ad:99:4a:c6:af:9c:63:
03:32:ce:17:fe:84:04:52:b2:0f:27:e1:69:55:f8:
5f:87:ec:38:a3:26:ec:45:d8:ef:93:3e:6b:a2:c8:
b9:ed:37:d6:82:b8:72:0a:1d:fe:3a:bf:14:cd:50:
7d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:75:E6:C6:A8:5F:87:63:0D:E9:93:FE:53:81:48:CA:D2:68:8C:18
X509v3 Authority Key Identifier:
keyid:AC:BC:2D:A4:FA:C7:7B:BA:AD:29:A5:98:6B:41:07:F5:31:ED:2E:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLwtpPrHe7qtKaWYa0EH9THtLj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:10:9c:05:b3:3f:ef:eb:9b:8c:eb:29:53:0b:fb:a2:14:fe:
b3:e6:b9:ec:ee:44:ad:e8:db:1f:c1:5f:21:f8:57:4b:86:c6:
6f:d5:3c:f9:ba:06:42:6a:f8:94:b1:63:c9:5c:ec:66:07:b5:
1e:9e:17:72:a8:f9:9f:cc:b9:4f:e9:74:52:f0:d2:45:99:1c:
a9:45:bd:f7:c2:87:02:75:39:c7:e4:51:1a:ce:71:df:16:bf:
46:3c:bc:27:22:ed:48:96:ed:19:c0:d3:06:84:43:f2:7c:8e:
ef:2c:ff:7f:28:24:a4:c3:d3:c2:b6:57:fc:b1:38:47:22:53:
c4:42:76:60:be:f8:61:14:eb:68:8d:0c:19:a3:62:1b:09:34:
8e:07:4b:d6:1f:83:d1:3b:b9:85:a7:b4:03:d8:b7:c8:b7:6d:
0c:c5:ea:46:f0:57:8b:76:a3:9e:4b:2b:cc:7c:03:c4:90:be:
f6:c1:0c:ee:75:f7:8f:c6:c8:be:41:28:83:d8:80:65:68:40:
ae:44:0d:0b:7c:ac:d2:6f:96:d3:74:e4:99:a8:5e:b5:14:57:
53:85:ab:85:81:8d:38:c4:7a:a8:38:78:8b:45:4d:8c:d5:84:
4f:18:1b:a3:ce:de:bf:ba:a4:a1:3c:b1:b2:3e:9d:db:74:67:
d2:98:be:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:29:16 2025 by rpki-client