Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.mft
File: 81ROkj2IO6zkqj9-9wByr-NRHyg.mft (raw, json)
Hash identifier: ohP5eRlTIPXlpfJ1r/Igef5KklFsvzc22QflIKwz+HA=
Subject key identifier: 83:0B:28:02:28:E6:C0:E7:04:EF:64:64:BC:5A:05:1E:99:FC:DC:2A
Authority key identifier: F3:54:4E:92:3D:88:3B:AC:E4:AA:3F:7E:F7:00:72:AF:E3:51:1F:28
Certificate issuer: /CN=f3544e923d883bace4aa3f7ef70072afe3511f28
Certificate serial: 01968812A352ADE7E67ED1CFCAF286AE7518
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/81ROkj2IO6zkqj9-9wByr-NRHyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.mft
Manifest number: 0257
Signing time: Wed 30 Apr 2025 19:00:44 +0000
Manifest this update: Wed 30 Apr 2025 19:00:44 +0000
Manifest next update: Thu 01 May 2025 19:00:44 +0000
Files and hashes: 1: 81ROkj2IO6zkqj9-9wByr-NRHyg.crl (hash: diJ61PGXVO7Ge5mWmW6da3hjgVY/jx5LpWB0+sMG7TU=)
2: Gv4EnRb88MY5aVLEY17_OZ0Wl08.roa (hash: WkS34pHH/XzAUtEopuzXUXT2LtpQyPdLz2PYfITDjLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/81ROkj2IO6zkqj9-9wByr-NRHyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 19:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:88:12:a3:52:ad:e7:e6:7e:d1:cf:ca:f2:86:ae:75:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3544e923d883bace4aa3f7ef70072afe3511f28
Validity
Not Before: Apr 30 19:00:44 2025 GMT
Not After : May 1 19:00:44 2025 GMT
Subject: CN=830b280228e6c0e704ef6464bc5a051e99fcdc2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4e:5f:6e:7a:2a:84:a0:6b:fb:47:50:04:af:
db:e9:64:7f:00:55:bd:1d:74:0b:ce:ee:12:f6:9e:
60:99:f4:d7:87:af:b0:58:05:7b:62:db:e2:98:e6:
35:1c:ea:3c:54:2b:a7:d9:15:59:fe:64:4b:bc:4e:
79:48:75:10:57:c0:48:60:87:58:43:cc:8b:ca:95:
98:e5:58:4d:0c:0f:11:aa:1a:f6:9d:b5:0d:1f:38:
77:c0:0f:bf:cb:5a:3e:dd:37:ec:19:21:64:ea:f4:
52:a4:ca:8f:f2:70:d9:57:8b:ff:75:fa:8a:85:ac:
21:02:64:65:e9:7c:f5:14:21:ee:c0:ac:78:a7:92:
8d:3f:48:c9:66:bf:45:24:af:ba:a5:73:35:0a:0c:
c8:1d:cf:f6:ef:49:4c:68:02:b9:e9:0a:d2:7d:77:
a1:9e:f8:a4:00:49:ca:83:83:69:7b:61:9a:da:e0:
97:00:c3:35:43:cb:1f:1d:c9:08:96:78:11:d2:49:
e7:87:a8:f4:2b:c5:9a:4c:00:94:78:68:7e:7f:a5:
40:f1:e3:9b:71:88:1a:2e:03:99:00:9d:7c:aa:fb:
d5:51:c9:48:f4:ec:36:ff:63:5f:5a:7c:8f:09:23:
61:f0:d8:42:07:9c:05:db:24:2f:24:e1:10:9f:1c:
4b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:0B:28:02:28:E6:C0:E7:04:EF:64:64:BC:5A:05:1E:99:FC:DC:2A
X509v3 Authority Key Identifier:
keyid:F3:54:4E:92:3D:88:3B:AC:E4:AA:3F:7E:F7:00:72:AF:E3:51:1F:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/81ROkj2IO6zkqj9-9wByr-NRHyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:41:9a:46:39:4c:3d:f6:73:aa:26:14:6a:ba:d0:bc:b0:8b:
19:2c:de:67:04:b3:8c:71:1c:98:05:4c:90:4c:56:0c:ee:aa:
1d:78:35:d7:56:f2:89:dd:79:6c:88:c0:e5:7e:fd:b1:fd:71:
cd:1b:e8:4c:55:2e:5f:88:fe:fb:47:af:f3:3d:e3:ac:06:43:
18:3a:ac:62:d1:04:f5:a6:7b:da:2a:da:e9:36:b7:59:3f:52:
7e:8e:b2:50:85:54:32:d4:b3:0a:66:c7:f4:80:17:2b:eb:a4:
4a:8b:a0:9f:be:ba:5e:d6:5c:ee:fc:36:b1:58:b7:6a:84:a7:
8f:9c:25:d6:19:47:10:28:f6:45:de:64:d5:04:cb:28:f5:a2:
ec:a6:0e:98:d8:89:fd:79:23:c7:2f:dc:3f:4a:00:49:02:a8:
17:2b:cf:53:d9:e5:72:a4:c0:fb:50:a8:08:8a:67:71:22:2d:
33:d9:91:50:74:fc:09:50:16:e6:c3:5e:d2:d1:02:8e:72:df:
87:4c:58:fb:75:be:65:55:d5:05:18:08:1a:af:62:a8:00:c3:
6d:d8:c0:70:b6:96:32:35:ea:8a:78:b2:f2:44:77:cf:58:a9:
78:c6:42:41:18:c1:0d:89:0c:6d:e7:84:9f:eb:41:5a:39:24:
57:e6:de:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:37:49 2025 by rpki-client