Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.mft
File: 43O80yVaDa1fSjUNEdyJH6C-BDc.mft (raw, json)
Hash identifier: o5VSXbA91wK7bWkpFf0wXEhoTf94W5AVw/U3n8l5R14=
Subject key identifier: C2:58:E1:7D:A7:21:DB:D7:F1:7E:1D:C8:65:6E:A4:CD:83:D9:CB:E3
Authority key identifier: E3:73:BC:D3:25:5A:0D:AD:5F:4A:35:0D:11:DC:89:1F:A0:BE:04:37
Certificate issuer: /CN=e373bcd3255a0dad5f4a350d11dc891fa0be0437
Certificate serial: 01967B32777A8F9E750FD598CD15B0A2B69E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43O80yVaDa1fSjUNEdyJH6C-BDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.mft
Manifest number: 05E1
Signing time: Mon 28 Apr 2025 07:00:27 +0000
Manifest this update: Mon 28 Apr 2025 07:00:27 +0000
Manifest next update: Tue 29 Apr 2025 07:00:27 +0000
Files and hashes: 1: 1-AKJmO9q5axmG2bLlo_CKWpT7rI.roa (hash: IzbOHhtlqnCQLwohTNVhlpmomMZIZO83L4rK6yCvODA=)
2: 43O80yVaDa1fSjUNEdyJH6C-BDc.crl (hash: u37zS0OR2aeeSXpPTgL2JhSeWTSqYrSI3cFjtdnr9dQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/43O80yVaDa1fSjUNEdyJH6C-BDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:32:77:7a:8f:9e:75:0f:d5:98:cd:15:b0:a2:b6:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e373bcd3255a0dad5f4a350d11dc891fa0be0437
Validity
Not Before: Apr 28 07:00:27 2025 GMT
Not After : Apr 29 07:00:27 2025 GMT
Subject: CN=c258e17da721dbd7f17e1dc8656ea4cd83d9cbe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:be:68:97:f8:bb:12:f9:10:25:78:41:39:ab:
b8:9a:d3:9d:01:bf:e3:5f:f1:61:84:8f:ec:df:93:
ad:8d:03:89:41:a5:cd:71:62:1b:5a:c6:60:ec:c4:
95:bb:c1:8c:62:85:4b:5a:cb:09:77:d3:85:68:21:
e1:d2:16:88:2d:24:2c:be:32:1f:3d:da:a3:d5:21:
ae:c7:83:d7:32:40:f6:59:bf:7b:69:68:18:55:f0:
bb:72:83:75:8e:81:e5:7f:f2:87:78:c1:f4:0e:03:
38:ee:99:4d:c9:d0:6b:96:4d:1f:9e:f0:fe:b0:6c:
5f:76:e9:74:15:d4:90:38:84:4f:ca:e7:c7:fd:79:
a2:af:1f:de:46:c2:ac:a0:c4:a1:ec:96:da:c5:80:
c3:f6:8c:8f:ef:a2:29:07:46:29:e9:4d:bd:78:cb:
07:6f:c5:60:78:84:51:01:df:9d:d3:55:3d:b1:3f:
7b:43:4b:2e:99:33:2b:ec:9f:78:d0:b3:c1:10:1c:
31:70:43:49:cb:dd:08:91:8c:4b:07:64:7f:5d:0d:
36:d1:61:58:38:58:76:97:84:ce:72:4e:7c:03:d8:
15:1d:4d:ba:a7:6c:34:3a:b8:26:9c:a4:35:d1:e8:
b2:3f:ae:8d:8d:dc:78:7f:43:c5:ab:d1:69:8a:da:
37:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:58:E1:7D:A7:21:DB:D7:F1:7E:1D:C8:65:6E:A4:CD:83:D9:CB:E3
X509v3 Authority Key Identifier:
keyid:E3:73:BC:D3:25:5A:0D:AD:5F:4A:35:0D:11:DC:89:1F:A0:BE:04:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43O80yVaDa1fSjUNEdyJH6C-BDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:1a:36:a2:4b:c3:18:d3:cd:4c:09:6b:57:42:f8:9c:81:03:
a3:7e:d3:6c:f0:d8:93:f9:18:ed:24:5a:3b:0b:1b:84:31:58:
ae:cd:1b:8a:29:95:b9:87:09:e9:93:39:c6:be:2e:58:dc:2b:
22:50:0c:e4:16:bb:45:75:e8:35:69:28:80:33:88:bd:36:7d:
2c:3e:48:ba:0d:89:46:8e:c5:25:0e:2b:cb:4b:3d:6b:aa:8e:
43:57:78:b5:1e:81:75:e5:28:ef:92:59:05:8d:24:87:82:de:
df:fe:15:f9:04:0b:5f:9b:c1:94:8e:05:2b:1a:a0:14:fa:32:
68:10:48:ab:55:99:15:74:88:9d:5f:f7:18:e6:db:43:71:dd:
3d:c5:98:a6:e7:48:8d:a1:3d:81:de:c4:69:8d:03:4f:bf:0a:
1f:84:1b:cd:82:ea:ca:6c:53:eb:7e:98:43:f5:63:2a:81:a9:
43:4d:9a:7b:73:22:8d:1a:f1:c3:78:cc:92:2a:1a:b6:da:da:
f5:45:ff:f4:dd:83:c6:10:69:e4:9e:8b:db:25:6e:ed:2a:8b:
01:e3:78:fd:d3:34:9e:9e:30:42:7e:6f:7d:c3:66:63:42:ca:
a0:8f:35:b6:24:7c:d0:20:28:ba:1f:bb:da:24:86:e5:e4:0a:
50:00:27:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:15:25 2025 by rpki-client