Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.mft
File: rd0qgVBgqn5iGiCUNJdYsgNolvA.mft (raw, json)
Hash identifier: xLKMg110uz6LtSP5ut1+wsD9fJ6mXtMkxjGqxlkv8Po=
Subject key identifier: FF:9C:41:E4:64:86:1C:1E:8C:07:22:D8:27:1B:95:01:79:DA:DF:D3
Authority key identifier: AD:DD:2A:81:50:60:AA:7E:62:1A:20:94:34:97:58:B2:03:68:96:F0
Certificate issuer: /CN=addd2a815060aa7e621a2094349758b2036896f0
Certificate serial: 01967AFB54DE2A94C7A939E286EF6EEDA005
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rd0qgVBgqn5iGiCUNJdYsgNolvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.mft
Manifest number: 016B
Signing time: Mon 28 Apr 2025 06:00:13 +0000
Manifest this update: Mon 28 Apr 2025 06:00:13 +0000
Manifest next update: Tue 29 Apr 2025 06:00:13 +0000
Files and hashes: 1: 1-B4mnYUsJDtWU5_HUQ7FJC6tCSw.roa (hash: sHcyd6IuGZiLkLEHDVFO8zkeKGMSe2epXGrDt7jtZiY=)
2: pUwT5WPNwZ36CRQfdZy_qy0h7Bw.roa (hash: jkKjJfJmkg4E68Fod/wXsJ/Vl/Yl+Hk0+HkH2tCfw7I=)
3: rd0qgVBgqn5iGiCUNJdYsgNolvA.crl (hash: M78EjwUqvq4OEZBPBPvwxzzYOSXPd4WodoUgDwcWFHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rd0qgVBgqn5iGiCUNJdYsgNolvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:fb:54:de:2a:94:c7:a9:39:e2:86:ef:6e:ed:a0:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=addd2a815060aa7e621a2094349758b2036896f0
Validity
Not Before: Apr 28 06:00:13 2025 GMT
Not After : Apr 29 06:00:13 2025 GMT
Subject: CN=ff9c41e464861c1e8c0722d8271b950179dadfd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:e3:72:be:0c:4b:38:89:a2:1f:cc:32:cf:64:
8a:19:ec:46:66:3f:f0:00:b8:4d:b7:ec:68:c0:99:
77:a9:3f:0e:28:f0:2d:59:2c:5c:58:bb:70:50:f6:
cc:8a:3c:79:87:5f:21:89:e7:f2:16:4e:78:bc:f4:
63:0a:c9:10:f5:5f:a2:4a:26:98:6f:8c:2d:e2:e6:
a7:a7:1d:d9:d0:d7:6f:76:91:68:de:b6:72:d7:8b:
b1:d8:37:92:14:48:ee:f6:e6:cd:bb:26:64:3d:ce:
8f:22:05:a1:e9:db:13:c1:a3:7c:02:22:ed:7a:39:
1b:5f:15:94:a6:55:9b:b6:9f:ca:60:1a:68:f8:cf:
e8:b1:86:e7:38:76:ef:00:94:7e:fa:49:a7:c1:ba:
ee:73:bc:81:38:ed:d8:f2:9b:0b:95:a8:27:b8:ed:
66:c3:9c:d2:c2:63:b0:6d:d1:af:ef:c7:08:7b:ef:
04:eb:2f:ae:2e:fc:86:3b:92:57:b6:c3:05:83:38:
f4:8d:f3:54:c8:7c:3a:0f:65:3d:c4:fc:12:e3:56:
9a:3e:44:1b:4a:2d:bd:a2:b1:0f:cd:1f:07:29:5a:
11:b3:1a:75:45:26:89:bf:07:f0:d3:35:a0:56:a4:
79:e3:f6:33:19:9c:aa:d1:2d:e9:37:c8:40:cf:5f:
bf:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:9C:41:E4:64:86:1C:1E:8C:07:22:D8:27:1B:95:01:79:DA:DF:D3
X509v3 Authority Key Identifier:
keyid:AD:DD:2A:81:50:60:AA:7E:62:1A:20:94:34:97:58:B2:03:68:96:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rd0qgVBgqn5iGiCUNJdYsgNolvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:88:49:b0:fa:d5:78:89:07:c5:00:e6:13:71:f7:87:af:6a:
21:b7:72:0f:b8:84:eb:f2:73:c1:e7:66:e7:49:8e:ed:26:9b:
78:df:bc:2c:d8:2d:c2:8a:a8:c1:de:a3:9c:cf:be:c7:2b:72:
47:65:40:78:5e:54:43:f6:07:14:65:df:1d:06:be:cd:be:f2:
2c:70:cc:b5:5c:67:cc:ba:61:bc:93:fd:ba:d8:f0:80:9d:9e:
f2:16:24:36:22:f5:00:db:7c:42:a0:33:7a:cc:28:33:fb:bd:
54:46:13:d3:00:df:e7:c2:50:02:f1:8e:89:57:56:2b:d3:58:
ba:aa:b4:4b:d1:7f:30:b9:7c:f3:34:09:c8:14:50:ba:80:a0:
c7:af:91:3c:ee:24:98:65:e8:1e:c4:e4:17:7c:31:2f:f2:cf:
3f:e2:df:8e:a8:92:cb:52:20:1f:df:57:c6:be:46:47:81:a9:
9a:5e:b3:6c:08:ee:76:6f:19:3a:79:13:4a:9b:e1:9a:ad:3a:
1c:23:a5:df:34:23:b6:2e:ee:c3:af:28:8b:c3:ac:95:a9:07:
40:76:96:9d:5c:ed:50:b7:81:03:de:c1:fa:1a:c8:ed:0a:f3:
6b:64:30:12:fc:53:fd:94:28:fa:ee:b8:9f:6d:9a:31:11:37:
8a:5c:04:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:11:35 2025 by rpki-client