Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.mft
File: R01HT5RpSoEE9eQTqyucCVWbefA.mft (raw, json)
Hash identifier: 3HyLYxGuXqwHgei9mbvTXJNJJ8Fw7LECqelD5wqSuiM=
Subject key identifier: 8D:81:51:42:26:FC:53:88:72:B6:AD:11:90:6F:38:23:65:71:F1:E4
Authority key identifier: 47:4D:47:4F:94:69:4A:81:04:F5:E4:13:AB:2B:9C:09:55:9B:79:F0
Certificate issuer: /CN=474d474f94694a8104f5e413ab2b9c09559b79f0
Certificate serial: 01967ED87FFE4172E30FC46B6B834863D05C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R01HT5RpSoEE9eQTqyucCVWbefA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.mft
Manifest number: 0136
Signing time: Tue 29 Apr 2025 00:00:39 +0000
Manifest this update: Tue 29 Apr 2025 00:00:39 +0000
Manifest next update: Wed 30 Apr 2025 00:00:39 +0000
Files and hashes: 1: K09nrG0KqTizFLHUaMNyxM0z2ro.roa (hash: cExkaCJNm1PmYW065hiBGP/O4kugBu6fZ2Nczp2MsYg=)
2: R01HT5RpSoEE9eQTqyucCVWbefA.crl (hash: hIN5YSDYA9tGlkvn/TfEabXIsaNnoLzTscu/0JxLcJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.mft
rsync://rpki.ripe.net/repository/DEFAULT/R01HT5RpSoEE9eQTqyucCVWbefA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:d8:7f:fe:41:72:e3:0f:c4:6b:6b:83:48:63:d0:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=474d474f94694a8104f5e413ab2b9c09559b79f0
Validity
Not Before: Apr 29 00:00:39 2025 GMT
Not After : Apr 30 00:00:39 2025 GMT
Subject: CN=8d81514226fc538872b6ad11906f38236571f1e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:94:b8:53:c2:b3:4a:30:16:46:05:2e:41:0c:
a8:c6:f6:5e:31:14:7b:9c:cb:69:53:b9:74:77:2c:
08:22:da:ca:f7:d9:24:1b:8a:1a:1a:78:02:81:cc:
b0:74:65:b9:a8:92:0a:a7:0e:42:d8:4e:70:f5:2f:
6d:90:94:ed:fd:65:22:5c:e8:9f:09:b9:fd:5d:a9:
9d:c9:71:ed:a9:da:94:67:56:08:8c:c7:d2:12:96:
ac:96:be:26:7f:5a:6e:e6:1b:4b:be:3a:ed:67:b2:
c4:77:3b:8d:85:9f:fc:e5:da:75:c0:4e:33:5c:b2:
88:c3:da:90:12:55:52:74:16:ae:58:82:37:a6:03:
c8:9c:3e:dd:7f:13:a4:4e:3f:65:80:de:d3:28:67:
a5:fe:a8:61:07:c7:80:05:7c:dd:c0:fe:ad:37:0a:
db:5a:77:79:00:dd:3a:7e:5f:39:37:61:48:52:56:
fd:b6:88:ec:6a:cd:16:e8:6d:4a:58:4b:7d:7f:86:
53:39:b2:8d:2a:1e:60:9b:11:4e:ee:f6:67:e4:9f:
58:28:ce:bc:94:05:07:ec:d2:11:63:6f:24:b9:29:
70:10:8c:62:e5:39:0b:78:4b:50:d4:7c:6c:7d:1b:
ee:4e:fb:04:40:4c:b4:8a:78:d7:41:06:bf:66:d9:
da:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:81:51:42:26:FC:53:88:72:B6:AD:11:90:6F:38:23:65:71:F1:E4
X509v3 Authority Key Identifier:
keyid:47:4D:47:4F:94:69:4A:81:04:F5:E4:13:AB:2B:9C:09:55:9B:79:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R01HT5RpSoEE9eQTqyucCVWbefA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:70:97:37:89:f9:5f:3a:14:d5:8e:66:e6:e0:8c:73:c4:83:
ad:aa:2d:2e:d7:0b:21:72:e2:49:70:54:12:33:0f:93:c9:ab:
aa:3e:e6:f9:de:d4:9d:3c:6e:89:c5:d4:0b:36:f7:31:f9:a3:
6f:f0:cc:bf:87:c0:dc:18:62:4b:89:20:b0:84:dc:2e:dd:40:
f5:3d:b5:04:7a:d8:32:3a:9a:3e:75:ec:40:24:f4:fd:c7:23:
a2:ce:83:ae:8e:0e:19:b5:6a:64:2f:f9:09:72:c6:4a:65:90:
19:28:0b:ae:38:39:cd:25:c8:7d:36:46:60:ae:cd:46:05:fc:
6a:64:94:83:19:67:c9:b2:29:1d:94:8a:75:6c:68:9c:bf:65:
9e:b9:92:c3:c6:cc:91:3d:52:55:95:f1:98:72:5c:fe:22:40:
72:f4:60:1a:8c:ea:bd:17:b8:f8:f0:ce:84:94:70:b2:b6:57:
85:59:38:45:55:da:d4:54:2d:09:6a:df:a0:55:c1:55:77:1c:
03:40:5a:8b:d0:83:f4:9c:46:86:16:2e:78:a5:2e:16:71:50:
d8:d6:93:7a:bf:83:84:8d:6f:0f:fc:64:7c:6b:cb:9c:88:0f:
ba:b4:bf:5a:81:81:d0:05:9b:da:bf:80:5d:35:01:36:4f:49:
82:a2:c8:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:18:19 2025 by rpki-client