Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.mft
File: RiIx5xPw-DS9CcP3bhLiUOdzwpA.mft (raw, json)
Hash identifier: /TuO8xcnd7cFnusFtPs7CWHujNUSIzSQQa8WczdYjQ8=
Subject key identifier: 40:A8:DD:B7:4D:5A:8B:CF:5E:1C:16:C1:F0:F3:54:87:FC:A1:F4:52
Authority key identifier: 46:22:31:E7:13:F0:F8:34:BD:09:C3:F7:6E:12:E2:50:E7:73:C2:90
Certificate issuer: /CN=462231e713f0f834bd09c3f76e12e250e773c290
Certificate serial: 01967C45AB260EF2083DCCC06B1E57779D15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RiIx5xPw-DS9CcP3bhLiUOdzwpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.mft
Manifest number: 1422
Signing time: Mon 28 Apr 2025 12:01:02 +0000
Manifest this update: Mon 28 Apr 2025 12:01:02 +0000
Manifest next update: Tue 29 Apr 2025 12:01:02 +0000
Files and hashes: 1: RiIx5xPw-DS9CcP3bhLiUOdzwpA.crl (hash: XIgcM3kLDt2YxjJN2otslwq9mHXx1ZTvziIRFEp+Zh4=)
2: xmUpqD4NUMAqisL66k_x6MTYnaQ.roa (hash: dGRcbHkgyhvucFtnmzWvrILS2aHk2c8SQDJ6rOX+JL4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RiIx5xPw-DS9CcP3bhLiUOdzwpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 12:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:45:ab:26:0e:f2:08:3d:cc:c0:6b:1e:57:77:9d:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=462231e713f0f834bd09c3f76e12e250e773c290
Validity
Not Before: Apr 28 12:01:02 2025 GMT
Not After : Apr 29 12:01:02 2025 GMT
Subject: CN=40a8ddb74d5a8bcf5e1c16c1f0f35487fca1f452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8a:a6:62:0d:dc:05:93:73:ed:31:5c:6c:fd:
4f:de:98:b6:50:60:dd:45:ab:37:7d:ff:c3:6b:60:
7a:7d:e1:ab:47:44:0c:9d:7e:23:0b:62:9f:8d:ae:
7a:22:95:25:40:f0:e5:28:8a:28:7a:bd:3c:e3:e2:
c0:2d:68:dd:80:e2:d8:ea:4f:89:d5:54:47:1c:9f:
9b:12:bf:c6:81:63:a8:cf:93:e8:70:e5:ee:96:24:
11:a7:71:df:d6:3d:ee:66:a2:44:e6:d6:6c:6d:e3:
5b:1b:ad:87:19:d6:49:ac:78:ef:d2:57:6d:79:b5:
31:02:6a:ca:8c:e6:d2:0c:4e:57:88:7d:ba:e3:80:
7c:a3:01:ae:40:a9:22:36:e8:d8:07:3a:be:28:4a:
eb:b2:22:01:6f:9c:61:95:44:f7:b6:85:e7:74:2a:
cd:d6:ce:4c:c5:55:23:f5:64:25:94:db:e7:8f:e0:
d2:bc:2b:9a:6a:ca:e1:ae:20:dc:6e:96:54:79:af:
56:d5:74:2c:a5:90:7d:9c:54:e9:ed:00:ae:a4:88:
4a:97:f5:9b:11:82:39:df:7d:0b:47:5b:af:ef:be:
69:cd:d6:3f:5c:28:21:f0:45:8a:1d:ac:b8:d9:89:
0a:68:f7:cd:e1:e9:da:18:f4:d1:66:a1:06:42:2d:
b7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A8:DD:B7:4D:5A:8B:CF:5E:1C:16:C1:F0:F3:54:87:FC:A1:F4:52
X509v3 Authority Key Identifier:
keyid:46:22:31:E7:13:F0:F8:34:BD:09:C3:F7:6E:12:E2:50:E7:73:C2:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RiIx5xPw-DS9CcP3bhLiUOdzwpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:ea:2b:97:7e:d4:98:fa:91:09:10:ed:9b:7d:65:a8:c5:ac:
fd:33:04:c4:f5:44:7c:55:7d:77:3b:0b:72:1f:40:d5:59:74:
00:0f:2e:52:71:00:eb:24:54:e8:75:57:1a:d5:69:75:05:a9:
75:9a:91:e2:3c:30:63:e6:7d:af:bb:ab:df:8a:10:ba:f7:ce:
54:dc:1b:12:6b:90:a2:6a:90:10:fe:0c:af:d2:ab:70:06:c8:
91:a2:f1:7f:c9:ea:88:4a:ee:f5:e1:a1:1c:d2:35:e6:db:41:
63:54:36:35:28:de:be:24:91:bf:dc:4d:43:93:42:98:7d:82:
fd:7c:e3:f9:c5:67:ab:6a:95:ea:d3:a1:b1:c2:06:9f:7e:1f:
b8:8b:1f:77:98:2c:db:45:ea:6d:3d:b4:2b:02:71:d7:3d:b4:
83:08:65:3f:1a:d9:5d:4f:f0:57:f2:b2:64:cb:86:a9:e4:d8:
88:c8:73:37:94:47:22:f8:67:5b:ff:74:31:21:b4:f6:8a:4f:
c8:a2:9b:58:0b:84:18:4f:f0:59:7b:fe:1c:e8:c9:b5:0f:0e:
f0:ab:0e:81:55:c4:37:82:c9:63:9d:81:59:54:90:95:ba:99:
a5:80:36:13:2a:2e:34:22:4b:62:58:4c:a4:48:10:a6:3f:9c:
aa:94:37:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 16:57:00 2025 by rpki-client