Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.mft
File: Rq9sozU0uFMLnyFOyOqT3SW9H88.mft (raw, json)
Hash identifier: 81C6SN2xWw35TlJSWvwdlZ54LH6EFI8qvSmCxR/41OI=
Subject key identifier: C9:35:C8:EF:B2:A1:00:2D:A2:20:4D:D8:8C:8F:F7:CF:82:8E:DD:01
Authority key identifier: 46:AF:6C:A3:35:34:B8:53:0B:9F:21:4E:C8:EA:93:DD:25:BD:1F:CF
Certificate issuer: /CN=46af6ca33534b8530b9f214ec8ea93dd25bd1fcf
Certificate serial: 01967AFB81D8485F575D6CD18455918EE287
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rq9sozU0uFMLnyFOyOqT3SW9H88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.mft
Manifest number: 0ABC
Signing time: Mon 28 Apr 2025 06:00:25 +0000
Manifest this update: Mon 28 Apr 2025 06:00:25 +0000
Manifest next update: Tue 29 Apr 2025 06:00:25 +0000
Files and hashes: 1: 1-DjrG4WtOf5mfvjc_0ex1qmM7_0.roa (hash: hnXFvQKmTthNRY+MRdmK+ICiF4IvzT+rwNQnD35oyyk=)
2: Rq9sozU0uFMLnyFOyOqT3SW9H88.crl (hash: OThvvW3Oli/jgdVMchzEBmD+D8f+fSGt7Ml0FrMEUCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rq9sozU0uFMLnyFOyOqT3SW9H88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 06:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:fb:81:d8:48:5f:57:5d:6c:d1:84:55:91:8e:e2:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46af6ca33534b8530b9f214ec8ea93dd25bd1fcf
Validity
Not Before: Apr 28 06:00:25 2025 GMT
Not After : Apr 29 06:00:25 2025 GMT
Subject: CN=c935c8efb2a1002da2204dd88c8ff7cf828edd01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:74:53:e5:fe:4b:10:9c:14:eb:45:7f:6e:36:
74:83:69:8e:b8:84:a6:16:3d:1a:7c:54:5d:97:a6:
ac:d3:c8:cc:e6:d4:8b:62:57:e9:ee:d6:43:f8:fd:
5f:08:67:ef:09:b9:18:80:c8:c2:fa:1b:d6:fe:91:
4f:22:2b:f5:89:53:47:bb:3c:d5:5e:2c:45:e9:31:
9d:39:08:d2:ca:34:bb:c5:ba:d7:a7:e9:6a:75:9b:
c8:6b:12:22:a1:ef:82:3d:fd:14:2e:7e:3c:2c:0a:
56:05:73:a4:ff:ea:6a:f6:36:9f:f8:45:56:93:78:
b4:d6:03:77:4b:ec:0e:db:e6:36:b2:35:0b:db:12:
43:b1:8f:fd:f1:ce:58:32:84:fa:9d:5a:2b:42:13:
1e:0c:be:48:5f:76:d7:ee:3a:90:f8:70:53:0e:5f:
01:4d:a4:ed:22:e6:63:b3:94:30:c0:96:83:77:81:
2e:c3:89:b9:d5:9c:5d:b5:72:7a:fb:37:7e:19:52:
47:c0:d1:45:75:c0:0b:0f:e9:1f:01:e0:09:ba:6e:
52:d7:31:18:e3:79:e3:90:de:ee:97:5d:29:c2:c1:
15:20:57:13:05:e3:8e:82:a7:24:10:bb:4a:c5:ff:
f7:00:c9:77:da:40:ab:3a:58:41:91:2a:ec:f5:03:
e6:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:35:C8:EF:B2:A1:00:2D:A2:20:4D:D8:8C:8F:F7:CF:82:8E:DD:01
X509v3 Authority Key Identifier:
keyid:46:AF:6C:A3:35:34:B8:53:0B:9F:21:4E:C8:EA:93:DD:25:BD:1F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rq9sozU0uFMLnyFOyOqT3SW9H88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:18:c8:32:8c:1e:cc:01:f2:95:94:d2:20:59:51:df:db:34:
ef:3d:6f:6b:43:7a:c6:02:52:9c:d7:5c:93:c6:65:25:3a:06:
ff:4d:57:e3:6d:41:6f:4c:59:a3:0e:06:f4:09:20:73:58:70:
e3:3e:2b:27:a2:e3:3f:78:98:4f:3b:b2:40:a0:7b:08:d3:5c:
3e:d7:ef:d1:8a:1a:96:68:db:a0:b9:01:5f:fd:09:e9:dc:a8:
18:cd:3a:95:c1:9a:31:3b:aa:e4:74:c8:5f:97:d4:fb:08:80:
9a:8c:b0:3a:a8:3c:8f:39:5c:d0:23:86:c3:1d:23:3e:37:75:
d0:b4:bb:03:01:e5:bd:7f:75:ad:6c:35:c0:fa:10:cd:4a:59:
27:48:6a:48:e7:26:aa:a4:4e:33:fb:98:b7:e0:ef:26:45:d1:
95:c7:b3:aa:05:8a:a0:69:f2:ce:6f:e0:fd:3b:ad:b4:b4:5f:
2f:ba:bb:39:5b:76:da:4b:84:8f:46:b3:3f:08:3b:dc:de:02:
80:b2:3a:3d:37:0a:7c:5e:17:89:0a:86:41:14:a9:1f:a4:a5:
b0:4b:5f:b3:44:9b:eb:5c:81:83:4e:3a:b9:62:4f:90:30:7e:
84:ec:b7:7e:c0:57:f8:c1:7b:15:6c:68:b3:53:7b:d9:89:c2:
15:7f:ee:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:47:47 2025 by rpki-client