Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/323c3f-aab3-4684-81c7-c5815118e52f/1/P7eM0aMQyZ1jdxQOUoqj5uDcq58.mft
File: P7eM0aMQyZ1jdxQOUoqj5uDcq58.mft (raw, json)
Hash identifier: FE0Bm0ygmlJenxTm0iPV+pgptDuNUBOo9hSxUhuAHPU=
Subject key identifier: 55:9F:1F:C2:1F:BB:7E:48:9B:B1:E2:D5:D6:91:6B:B7:98:5C:28:87
Authority key identifier: 3F:B7:8C:D1:A3:10:C9:9D:63:77:14:0E:52:8A:A3:E6:E0:DC:AB:9F
Certificate issuer: /CN=3fb78cd1a310c99d6377140e528aa3e6e0dcab9f
Certificate serial: 019676E7BF14A3EB653B1F43F2ED1705D0D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P7eM0aMQyZ1jdxQOUoqj5uDcq58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/323c3f-aab3-4684-81c7-c5815118e52f/1/P7eM0aMQyZ1jdxQOUoqj5uDcq58.mft
Manifest number: 45
Signing time: Sun 27 Apr 2025 11:00:21 +0000
Manifest this update: Sun 27 Apr 2025 11:00:21 +0000
Manifest next update: Mon 28 Apr 2025 11:00:21 +0000
Files and hashes: 1: P7eM0aMQyZ1jdxQOUoqj5uDcq58.crl (hash: 1SG+wIY7m2X2GfXKps2K7Gkm/Vav409zSh1QO9tFHXo=)
2: tO945n8IOH4m4HY-IByza0kUANU.roa (hash: 1Y70k1PM1fySvFZtbmtzuB2FgWQvwNTM4axab3kjR2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/323c3f-aab3-4684-81c7-c5815118e52f/1/P7eM0aMQyZ1jdxQOUoqj5uDcq58.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/323c3f-aab3-4684-81c7-c5815118e52f/1/P7eM0aMQyZ1jdxQOUoqj5uDcq58.mft
rsync://rpki.ripe.net/repository/DEFAULT/P7eM0aMQyZ1jdxQOUoqj5uDcq58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:e7:bf:14:a3:eb:65:3b:1f:43:f2:ed:17:05:d0:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fb78cd1a310c99d6377140e528aa3e6e0dcab9f
Validity
Not Before: Apr 27 11:00:21 2025 GMT
Not After : Apr 28 11:00:21 2025 GMT
Subject: CN=559f1fc21fbb7e489bb1e2d5d6916bb7985c2887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:8d:43:ab:d3:00:0f:c1:37:21:a7:27:40:eb:
5b:f3:ea:a6:d7:01:17:83:82:77:d8:a1:04:61:91:
ab:19:23:72:15:84:f9:fc:19:e9:42:76:e5:60:af:
64:e9:ed:46:63:2c:c0:93:62:75:28:c6:10:ca:8b:
25:3a:00:39:74:49:c3:fb:7f:bd:1e:89:34:d3:40:
64:4f:56:27:29:a1:ea:0c:32:d5:b7:d0:56:a0:90:
6a:f7:46:eb:4d:fd:c7:84:45:0d:a6:d4:7b:43:35:
0c:93:b9:2a:d8:0f:10:9f:b8:51:d1:ff:d5:d4:e4:
55:a5:16:d3:3e:9d:1d:d8:aa:4a:4f:24:c3:7c:95:
87:dd:7c:ec:c3:44:14:1b:aa:9e:f6:ff:48:8c:11:
bd:03:9b:9b:37:63:f6:0b:cd:42:f5:d6:f8:df:83:
56:af:1e:43:2b:45:5b:b9:42:79:e9:19:d4:98:38:
bc:60:c1:1e:e5:ec:ce:a6:57:d9:85:ae:7b:8b:d4:
cd:37:cc:e6:f1:31:d1:46:a7:78:6f:51:be:ea:da:
47:d6:9e:31:41:f2:d4:51:ea:d6:af:bf:28:be:69:
98:e2:87:f2:e0:34:82:4b:55:b2:28:cb:2d:9d:79:
2c:0e:e7:82:db:4d:6f:c2:95:b8:4d:64:ae:c6:5a:
3e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:9F:1F:C2:1F:BB:7E:48:9B:B1:E2:D5:D6:91:6B:B7:98:5C:28:87
X509v3 Authority Key Identifier:
keyid:3F:B7:8C:D1:A3:10:C9:9D:63:77:14:0E:52:8A:A3:E6:E0:DC:AB:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P7eM0aMQyZ1jdxQOUoqj5uDcq58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/323c3f-aab3-4684-81c7-c5815118e52f/1/P7eM0aMQyZ1jdxQOUoqj5uDcq58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/323c3f-aab3-4684-81c7-c5815118e52f/1/P7eM0aMQyZ1jdxQOUoqj5uDcq58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:bd:21:46:eb:67:fa:92:b5:48:7d:f6:e3:e7:31:ba:45:85:
57:c4:e1:32:8d:a2:c9:40:8a:36:01:df:bd:7b:26:04:e5:eb:
7b:a5:f5:d8:81:90:f3:05:56:ee:7f:24:16:36:b7:f0:70:4e:
04:01:cb:77:37:fd:30:96:71:c8:f4:6d:0b:e0:d4:f8:09:b4:
54:76:52:7c:68:80:16:7b:6f:50:c5:05:44:12:af:fd:8c:ba:
a4:d9:47:43:42:79:f2:85:c7:d6:58:2c:5d:ae:fc:ef:a3:09:
2a:ac:7f:3a:02:f8:4c:4f:b8:13:d2:a9:30:fe:b5:2e:09:8c:
89:1f:d3:43:8c:b6:cf:31:df:70:98:18:87:71:95:6a:84:4b:
58:45:2a:55:7c:7e:9d:31:2a:54:07:83:b7:bd:79:84:0b:17:
21:76:cd:c5:3d:16:ab:a6:5c:ae:d4:0a:9c:3c:35:66:b0:76:
b6:77:59:af:4c:3e:24:da:a0:0e:35:03:f0:72:50:29:9a:cd:
bd:dd:fc:01:f3:0e:69:4e:ae:f0:1c:80:27:27:a4:4a:3e:1f:
cc:21:d9:ca:21:bf:4b:34:c8:59:9f:5e:b2:65:d4:49:a4:b5:
a7:27:f6:a0:4f:0f:be:3f:b0:9d:74:61:35:f7:0c:84:ff:08:
32:98:87:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:02:43 2025 by rpki-client