Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/a1b15f-7d3d-4af6-b656-65bb1a89f259/1/rNNeDaQ5vqZcSDKc6eixCT9yMAo.mft
File: rNNeDaQ5vqZcSDKc6eixCT9yMAo.mft (raw, json)
Hash identifier: clAtPTucHByJ3mloBoQCl7U6hpxfo79AIJkSdI8MBJk=
Subject key identifier: F5:08:76:3D:1B:1D:6F:48:66:C6:5A:FD:2D:7B:7A:31:1E:A6:4D:56
Authority key identifier: AC:D3:5E:0D:A4:39:BE:A6:5C:48:32:9C:E9:E8:B1:09:3F:72:30:0A
Certificate issuer: /CN=acd35e0da439bea65c48329ce9e8b1093f72300a
Certificate serial: 01967BD78146450E97AF39EF1789F01B3B74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rNNeDaQ5vqZcSDKc6eixCT9yMAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/a1b15f-7d3d-4af6-b656-65bb1a89f259/1/rNNeDaQ5vqZcSDKc6eixCT9yMAo.mft
Manifest number: 0ED7
Signing time: Mon 28 Apr 2025 10:00:43 +0000
Manifest this update: Mon 28 Apr 2025 10:00:43 +0000
Manifest next update: Tue 29 Apr 2025 10:00:43 +0000
Files and hashes: 1: rNNeDaQ5vqZcSDKc6eixCT9yMAo.crl (hash: nObBJHoFkzJi4P2rvhd1jOGrgM/qjvnpDAQgTKNqbtQ=)
2: wMviITx4-Ydrde8DagnvJudrSTQ.roa (hash: Bhx7NILq0TmOVBjEhBEQzkx4nDg+vAlvQ+Bo2NSJwBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/a1b15f-7d3d-4af6-b656-65bb1a89f259/1/rNNeDaQ5vqZcSDKc6eixCT9yMAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/a1b15f-7d3d-4af6-b656-65bb1a89f259/1/rNNeDaQ5vqZcSDKc6eixCT9yMAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rNNeDaQ5vqZcSDKc6eixCT9yMAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:d7:81:46:45:0e:97:af:39:ef:17:89:f0:1b:3b:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acd35e0da439bea65c48329ce9e8b1093f72300a
Validity
Not Before: Apr 28 10:00:43 2025 GMT
Not After : Apr 29 10:00:43 2025 GMT
Subject: CN=f508763d1b1d6f4866c65afd2d7b7a311ea64d56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3b:34:35:f5:c8:b3:78:34:29:56:6e:c4:00:
7d:46:ce:05:8f:d8:10:d6:2a:c5:64:22:37:d9:b7:
60:56:ca:3c:8c:65:76:92:2a:04:4b:d0:0d:a7:73:
f8:4d:cf:86:e3:ac:01:27:f5:df:dc:a7:7a:aa:a8:
9d:e6:f7:f8:9b:3c:c6:13:31:b5:13:a0:b6:21:83:
94:8b:3d:b1:60:12:b1:2d:d2:38:65:82:a8:fe:70:
47:a2:91:fb:6c:c7:1d:89:da:69:2d:42:ee:76:13:
db:78:25:72:30:dc:75:04:d9:7c:b3:27:cd:a0:ff:
4e:0f:59:36:4c:14:e4:19:46:60:39:a8:9b:38:6c:
35:32:c8:9a:8f:72:0b:6d:79:63:98:10:78:78:e3:
de:e1:2c:83:0d:33:33:1a:ad:20:65:b3:77:e0:26:
12:ba:2d:cf:67:ed:05:2b:c6:21:73:c3:97:59:0d:
f8:64:8e:95:8d:e2:7b:17:85:07:1d:d2:55:f4:24:
d3:66:b8:26:2d:8e:16:72:33:66:d9:67:1f:97:49:
10:de:ac:71:5e:03:3b:43:97:cf:f9:e2:18:a7:80:
15:2d:8c:76:22:2a:4b:b3:94:32:4d:d2:ed:45:22:
f4:85:6d:b1:d4:e4:0f:d1:8d:a2:4c:1d:e0:1f:8a:
0b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:08:76:3D:1B:1D:6F:48:66:C6:5A:FD:2D:7B:7A:31:1E:A6:4D:56
X509v3 Authority Key Identifier:
keyid:AC:D3:5E:0D:A4:39:BE:A6:5C:48:32:9C:E9:E8:B1:09:3F:72:30:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rNNeDaQ5vqZcSDKc6eixCT9yMAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/a1b15f-7d3d-4af6-b656-65bb1a89f259/1/rNNeDaQ5vqZcSDKc6eixCT9yMAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/a1b15f-7d3d-4af6-b656-65bb1a89f259/1/rNNeDaQ5vqZcSDKc6eixCT9yMAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:a1:f2:f9:c3:38:f9:0a:f0:20:54:c3:d5:32:1a:75:f2:14:
d3:7b:b0:a7:d7:42:12:30:0b:65:67:2f:e1:83:3a:1e:8b:94:
a2:51:24:08:65:ee:54:10:27:67:23:6b:48:5e:b9:a4:01:7d:
08:db:73:9f:cd:ec:7c:18:99:3d:96:80:16:b8:f1:d5:2f:0a:
1e:6a:cd:91:06:42:5e:62:44:8b:5e:d4:7c:44:b1:cf:4a:97:
c2:0d:f8:3b:72:04:5a:ff:2a:a3:41:51:48:f3:63:50:f1:68:
4c:a2:bd:4f:20:9a:d0:e4:26:4e:60:fc:f3:91:19:82:ff:2b:
cc:a0:91:ba:35:40:e2:a7:c4:76:20:1b:5e:c2:06:fe:88:66:
68:02:b0:34:c9:1c:3d:ba:87:2d:7f:47:d7:bf:63:c6:21:2d:
02:19:61:19:5f:eb:24:6d:f1:2d:5e:75:ec:c7:81:2a:b1:da:
21:c6:00:8f:5d:95:94:0e:84:4b:fd:17:9e:f9:52:39:20:39:
00:32:a2:24:00:41:db:ac:17:ed:cb:b5:68:ff:dd:b3:c4:00:
12:28:07:e4:36:12:dc:4c:96:b0:dd:19:e8:58:26:6e:49:21:
83:36:e1:c4:25:9c:bf:a0:fe:c0:c8:2f:c5:84:b3:05:6b:5c:
9d:a2:05:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:14:12 2025 by rpki-client