Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.mft
File: r4j95vrbtrLB22_kH4KdHyAVvgs.mft (raw, json)
Hash identifier: /il3nJg6jQtfGrn4ATOYHmrUXi3tFvG372Yidx07Gzg=
Subject key identifier: E7:32:91:61:B5:6A:BC:CC:09:AC:AA:FE:17:32:1E:48:6C:36:8D:A0
Authority key identifier: AF:88:FD:E6:FA:DB:B6:B2:C1:DB:6F:E4:1F:82:9D:1F:20:15:BE:0B
Certificate issuer: /CN=af88fde6fadbb6b2c1db6fe41f829d1f2015be0b
Certificate serial: 019674FA3EC1E8742B98F252581FEF0142BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4j95vrbtrLB22_kH4KdHyAVvgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.mft
Manifest number: 0BA8
Signing time: Sun 27 Apr 2025 02:01:19 +0000
Manifest this update: Sun 27 Apr 2025 02:01:19 +0000
Manifest next update: Mon 28 Apr 2025 02:01:19 +0000
Files and hashes: 1: RHreYh0WmNugHNPOVP5GHBEiSQE.roa (hash: lDEy9crc1E/w31v0jSsa/vEhnHdpcWtnPtxtDbNUjjc=)
2: r4j95vrbtrLB22_kH4KdHyAVvgs.crl (hash: /oSqCxXeeec96E5bzcHmrnyR8PWp4nb/HPHTc6QrIDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/r4j95vrbtrLB22_kH4KdHyAVvgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:fa:3e:c1:e8:74:2b:98:f2:52:58:1f:ef:01:42:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af88fde6fadbb6b2c1db6fe41f829d1f2015be0b
Validity
Not Before: Apr 27 02:01:19 2025 GMT
Not After : Apr 28 02:01:19 2025 GMT
Subject: CN=e7329161b56abccc09acaafe17321e486c368da0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b2:91:49:e6:d7:0a:ff:37:a0:4c:92:39:00:
5d:b4:5c:80:c0:89:a0:a7:ab:87:0f:de:35:66:cc:
f4:20:1f:d0:9b:a6:17:07:aa:73:50:b6:f9:92:5a:
eb:1e:c1:b5:b3:dd:0f:87:26:6e:7d:39:3d:6f:29:
be:54:88:8f:bb:3b:a0:0f:50:6d:27:bb:41:ae:65:
b7:f9:fd:eb:db:6f:ce:d5:a8:06:53:92:49:6b:5a:
87:63:5e:46:20:98:09:24:d3:d4:97:5c:f1:47:59:
99:5c:16:c2:07:87:ba:78:97:d4:9a:74:27:02:4f:
79:97:30:db:47:32:a8:b2:fd:03:7f:4f:a6:bc:83:
28:97:27:47:d8:4c:81:1e:0c:39:a9:53:ff:c6:de:
e1:91:18:86:03:6d:9d:65:5c:6f:f3:0d:5a:e6:bc:
3f:9f:cf:a1:e5:ee:d3:fd:2b:a2:8b:35:a7:3c:9f:
6a:d5:ed:6e:af:ad:34:4c:be:ef:bf:87:f8:c3:ee:
1c:dd:5a:e6:1a:b2:79:f1:3e:7f:33:8d:14:1c:ef:
5b:70:b9:ee:71:5c:92:56:bc:93:10:a8:c2:9c:74:
1a:92:c9:47:82:f2:60:87:c9:ae:ba:b6:6f:c8:04:
46:b5:2d:96:13:91:b2:da:09:a0:c0:cb:74:0e:bc:
ee:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:32:91:61:B5:6A:BC:CC:09:AC:AA:FE:17:32:1E:48:6C:36:8D:A0
X509v3 Authority Key Identifier:
keyid:AF:88:FD:E6:FA:DB:B6:B2:C1:DB:6F:E4:1F:82:9D:1F:20:15:BE:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4j95vrbtrLB22_kH4KdHyAVvgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:f4:8c:00:6a:ba:d0:68:56:04:71:42:fe:98:de:e1:7b:4e:
e6:8f:4a:4d:35:3b:65:b0:4a:8e:d3:41:79:be:9d:e3:b0:65:
cb:07:97:e3:12:f1:47:32:dd:d2:2e:be:8f:a8:3d:a8:62:71:
1c:d6:b7:4d:2b:07:98:52:d8:3e:98:e8:52:be:d8:6b:de:cf:
6d:73:03:33:e8:ca:15:7b:8f:7f:47:3f:10:a0:15:0b:87:1e:
6a:a1:51:a0:9f:3b:7e:ec:53:a0:17:f1:01:70:64:c7:e3:45:
92:e7:c8:cb:46:3a:64:70:3e:09:4b:7d:e0:81:25:14:10:af:
c0:e1:a2:4c:ac:f3:c5:31:a3:90:f5:87:c0:17:00:a3:80:a1:
09:6b:82:93:d9:67:4c:1c:37:4d:c5:77:ad:66:cb:79:9b:2f:
96:e9:3f:85:4a:ad:59:09:2f:50:5a:91:71:08:8d:32:70:93:
1d:66:0f:69:80:61:f7:8e:9e:65:76:d7:f1:9f:22:fc:b2:d2:
b2:8d:d3:d2:b3:a9:ed:9a:79:13:32:fb:c0:27:d6:69:e7:bd:
88:bd:c9:71:4d:ac:2d:ed:76:fd:01:9d:e5:df:3d:22:2b:44:
83:13:09:c8:97:86:1d:3e:30:45:71:b5:db:4d:69:6d:9c:ba:
28:cb:a3:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:49:57 2025 by rpki-client