Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/18b690-c5ae-4fb4-8bf8-63a0be6a8e5f/1/rujl3-xoOuXxoOvg-5b6JWswR2I.mft
File: rujl3-xoOuXxoOvg-5b6JWswR2I.mft (raw, json)
Hash identifier: ren0RSKWAXdaCEcRTVqcvmVXBilZj/X6yLXx5Jt4aNI=
Subject key identifier: 40:2C:1A:17:9D:37:EF:5B:CE:08:79:25:89:6B:6A:F0:0B:36:7C:34
Authority key identifier: AE:E8:E5:DF:EC:68:3A:E5:F1:A0:EB:E0:FB:96:FA:25:6B:30:47:62
Certificate issuer: /CN=aee8e5dfec683ae5f1a0ebe0fb96fa256b304762
Certificate serial: 01967A56CA776E81CF0C1B130BD60B0B544F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rujl3-xoOuXxoOvg-5b6JWswR2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/18b690-c5ae-4fb4-8bf8-63a0be6a8e5f/1/rujl3-xoOuXxoOvg-5b6JWswR2I.mft
Manifest number: 0DCE
Signing time: Mon 28 Apr 2025 03:00:30 +0000
Manifest this update: Mon 28 Apr 2025 03:00:30 +0000
Manifest next update: Tue 29 Apr 2025 03:00:30 +0000
Files and hashes: 1: I1hQSc_aI8nnk6g1vpjyTdXYNJI.roa (hash: h2IeKZyMJz7T7nR3ubhVngPyKXqYp/CJM8eA4imhJCk=)
2: rujl3-xoOuXxoOvg-5b6JWswR2I.crl (hash: g2SSdKaPUb+PuO6147EAWiP+Nh2ZHXWzQjwCivcmaiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/18b690-c5ae-4fb4-8bf8-63a0be6a8e5f/1/rujl3-xoOuXxoOvg-5b6JWswR2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/18b690-c5ae-4fb4-8bf8-63a0be6a8e5f/1/rujl3-xoOuXxoOvg-5b6JWswR2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/rujl3-xoOuXxoOvg-5b6JWswR2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:56:ca:77:6e:81:cf:0c:1b:13:0b:d6:0b:0b:54:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aee8e5dfec683ae5f1a0ebe0fb96fa256b304762
Validity
Not Before: Apr 28 03:00:30 2025 GMT
Not After : Apr 29 03:00:30 2025 GMT
Subject: CN=402c1a179d37ef5bce087925896b6af00b367c34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:07:15:94:9e:63:49:75:a1:a1:f8:22:f2:b7:
98:9d:78:90:86:c2:4f:dc:cc:1d:8e:d5:00:f4:b6:
be:05:18:84:0d:82:3d:e7:cd:d1:15:60:e5:2a:c7:
2d:d2:58:67:30:bc:d1:ea:5a:fd:f7:da:f3:aa:9d:
06:3a:76:8c:b3:f6:7b:90:b5:b6:21:f6:69:f4:d8:
dc:51:75:a7:c2:55:4f:45:83:ef:6b:db:3d:f2:94:
97:52:84:7b:f9:9e:c4:4f:e4:49:54:18:1b:1d:ce:
47:4f:7d:95:2d:db:aa:d0:ac:a9:4b:2c:d9:0d:81:
77:4d:ae:3a:cf:b4:be:53:0c:54:1c:71:f0:72:b5:
8b:12:5e:46:c3:ee:67:38:4c:5a:9b:56:0d:31:4b:
50:90:4f:e1:fc:9f:55:93:3f:60:15:45:b5:73:b4:
05:fd:f8:f8:e5:c3:42:32:8e:ff:a8:6b:21:1a:8b:
7d:76:59:09:54:cf:a0:9a:ec:8d:49:19:d5:5e:2e:
2e:a8:69:4d:a5:a1:e1:47:8f:fe:11:6f:c4:74:7d:
2f:77:e9:db:6c:5e:a9:7b:13:8a:80:8e:ca:32:e8:
56:91:22:b0:1d:e3:8b:10:d3:42:3b:b0:5d:1d:f2:
15:4f:5a:14:c0:f4:20:fb:00:15:f8:d2:67:20:4c:
f7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:2C:1A:17:9D:37:EF:5B:CE:08:79:25:89:6B:6A:F0:0B:36:7C:34
X509v3 Authority Key Identifier:
keyid:AE:E8:E5:DF:EC:68:3A:E5:F1:A0:EB:E0:FB:96:FA:25:6B:30:47:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rujl3-xoOuXxoOvg-5b6JWswR2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/18b690-c5ae-4fb4-8bf8-63a0be6a8e5f/1/rujl3-xoOuXxoOvg-5b6JWswR2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/18b690-c5ae-4fb4-8bf8-63a0be6a8e5f/1/rujl3-xoOuXxoOvg-5b6JWswR2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:d1:1f:6e:ef:58:ee:81:a4:3f:10:ee:07:24:f5:56:cf:1d:
39:6e:aa:34:41:cf:c7:a6:a5:97:c7:3e:ca:06:7f:a7:9f:07:
a6:3b:b2:ad:e6:43:84:fb:b5:7e:33:40:2a:f9:01:dd:33:b0:
8b:39:d5:00:d1:43:7d:3d:54:c1:4a:f1:9a:01:fd:97:88:32:
aa:65:61:bf:61:d8:64:0d:ac:66:d8:52:49:f5:0e:86:ca:cd:
62:33:36:d9:53:22:92:da:be:03:9c:20:15:b8:79:a6:5e:53:
e4:b8:25:26:07:b1:fb:4c:2b:72:1e:18:73:ca:ca:68:43:5d:
cf:50:50:cc:60:c4:fe:99:b8:55:85:6a:e8:f1:44:2b:63:5d:
8e:ea:d3:e0:32:53:19:8b:a8:0a:78:97:2d:80:af:70:ef:44:
70:3a:c6:d2:e9:50:f7:06:37:57:51:ce:b3:32:fa:5a:74:e5:
09:a0:53:6e:60:df:30:79:1a:79:b5:09:c4:94:7f:75:eb:dc:
c5:80:44:f9:37:10:66:96:c4:15:70:a3:3c:8c:15:a0:46:4f:
4c:ae:9b:62:8c:70:92:f9:76:4f:ed:9f:a0:c5:33:66:dd:60:
e0:3d:ce:2c:93:4a:ab:50:9a:6c:48:38:2c:3e:c7:d4:17:51:
ea:db:08:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 07:22:59 2025 by rpki-client