Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.mft
File: RoFcoV1ypaaW-LzfSG9YAZZncrs.mft (raw, json)
Hash identifier: tt2WQygAsk/aa8pJJr111qZ5ku8GObrB8+1avi9ErhY=
Subject key identifier: 5C:9E:C7:4B:3E:CB:F7:4F:38:7C:B8:CC:80:4C:92:12:A3:FA:B7:BC
Authority key identifier: 46:81:5C:A1:5D:72:A5:A6:96:F8:BC:DF:48:6F:58:01:96:67:72:BB
Certificate issuer: /CN=46815ca15d72a5a696f8bcdf486f5801966772bb
Certificate serial: 019699AB3E72E05939FA3806B4784F3344ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RoFcoV1ypaaW-LzfSG9YAZZncrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.mft
Manifest number: 1524
Signing time: Sun 04 May 2025 05:00:58 +0000
Manifest this update: Sun 04 May 2025 05:00:58 +0000
Manifest next update: Mon 05 May 2025 05:00:58 +0000
Files and hashes: 1: RoFcoV1ypaaW-LzfSG9YAZZncrs.crl (hash: rmWZJD6ugMVSd31KZTx7gx3lA1QhnU4LoWP9IBWkzLQ=)
2: y-V1yK9vxrj09da641p9Hiek_2g.roa (hash: udxLfSkFKIgNgCHKRTpeUD7DXLySMYrTSVkfdRkc/p8=)
3: ylDxYeIa2SMufUNoGN045nwzMh4.roa (hash: sRZ+peR7WDCmRDdGsVvnCpA1L4kwjYlkcczeyuG+uuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RoFcoV1ypaaW-LzfSG9YAZZncrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:99:ab:3e:72:e0:59:39:fa:38:06:b4:78:4f:33:44:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46815ca15d72a5a696f8bcdf486f5801966772bb
Validity
Not Before: May 4 05:00:58 2025 GMT
Not After : May 5 05:00:58 2025 GMT
Subject: CN=5c9ec74b3ecbf74f387cb8cc804c9212a3fab7bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b1:87:c2:3e:cd:f2:c5:c8:1c:b5:0f:db:63:
8a:4f:d6:e3:54:71:f3:07:77:77:55:93:8a:3e:34:
15:15:bd:a8:8d:a2:76:b9:16:f6:ab:ba:ad:a1:b5:
7b:ac:4f:f5:1f:bb:bd:e2:ae:24:aa:35:5e:e1:2e:
6a:8e:6a:05:14:3f:6a:22:12:cb:98:46:c9:ca:a8:
ab:ce:4e:e2:0e:55:00:9d:47:a7:5d:19:36:f3:48:
62:66:97:d4:d9:e4:f6:eb:a6:67:3d:5e:e3:db:8b:
28:24:d8:cf:7a:a0:08:58:7f:b9:e7:12:09:7c:b9:
62:0d:19:d8:b1:c6:d7:fc:44:b0:d1:7d:bc:71:7c:
47:3d:44:bc:2f:09:d9:59:5a:73:03:fc:da:61:fe:
44:9e:e2:36:91:9e:ac:00:8b:34:9d:21:62:01:74:
4d:7e:fc:5d:8e:25:3e:4e:f2:b5:bf:d6:f6:89:35:
53:55:48:20:eb:61:7c:24:01:12:08:1e:a9:73:24:
22:b7:f2:df:ff:b9:d2:8f:51:81:17:3d:04:08:b3:
3a:94:1c:dd:e5:41:bd:e0:3b:d1:72:f3:d5:6d:4f:
92:93:11:af:ae:f1:2d:9b:67:c1:65:f5:42:0e:e9:
48:4f:2d:22:dd:a1:b4:47:1f:a6:dc:2a:9a:6e:54:
a4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:9E:C7:4B:3E:CB:F7:4F:38:7C:B8:CC:80:4C:92:12:A3:FA:B7:BC
X509v3 Authority Key Identifier:
keyid:46:81:5C:A1:5D:72:A5:A6:96:F8:BC:DF:48:6F:58:01:96:67:72:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RoFcoV1ypaaW-LzfSG9YAZZncrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:4d:f1:2f:9e:1a:85:ae:39:05:04:1e:d9:d5:28:a1:e1:e1:
13:22:4e:5b:06:e0:7f:07:a9:0b:6d:b6:af:99:6e:ca:a3:30:
fa:89:e0:95:01:70:fa:c8:48:27:d6:a3:7d:d2:6b:5c:e1:aa:
30:77:d2:f3:0c:32:c5:b9:d4:42:63:9a:52:f0:13:a8:1f:3d:
07:c8:08:e7:37:3b:3d:3d:25:d3:f6:8c:c5:65:92:ad:54:cf:
63:2f:0d:8b:f7:5d:cd:ad:07:64:20:ca:65:b0:70:87:28:9b:
dd:7d:a9:a7:a2:7a:e1:e1:4d:8a:23:54:3b:af:e2:ea:60:17:
dc:30:90:ee:2b:68:5e:bf:cb:1e:5a:56:f8:bf:90:10:8c:73:
e4:69:19:2c:2a:8d:3a:f1:9d:49:6a:ed:bd:31:32:0e:0c:39:
3a:a9:30:c7:44:b0:f2:93:35:a9:1f:07:0f:4e:b2:cc:78:f6:
5a:b3:42:ba:9d:de:51:78:6b:49:de:4a:5f:6e:66:14:53:a4:
66:34:7a:35:0f:77:21:c5:8a:e0:21:3a:f0:75:8c:ef:5e:a8:
29:33:bd:cb:b0:af:e6:9e:75:29:28:94:76:fa:e3:04:85:0e:
63:56:52:da:a1:de:42:cc:a9:b5:24:73:1d:d6:83:ad:99:de:
43:c8:fc:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 06:58:27 2025 by rpki-client