Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/RNPMWRzro4YTDzyfdCZFi4iHwus.mft
File: RNPMWRzro4YTDzyfdCZFi4iHwus.mft (raw, json)
Hash identifier: PR3pP6s7p4cCB6bXaL6CsRiORwGsqrroBptbKKdqpBw=
Subject key identifier: 42:55:BA:47:4B:DA:37:54:9D:9D:9D:5D:B6:AB:F4:B0:1A:E1:BE:50
Authority key identifier: 44:D3:CC:59:1C:EB:A3:86:13:0F:3C:9F:74:26:45:8B:88:87:C2:EB
Certificate issuer: /CN=44d3cc591ceba386130f3c9f7426458b8887c2eb
Certificate serial: 019675D50577632F76B86649F3C0889B6288
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RNPMWRzro4YTDzyfdCZFi4iHwus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/RNPMWRzro4YTDzyfdCZFi4iHwus.mft
Manifest number: 0539
Signing time: Sun 27 Apr 2025 06:00:16 +0000
Manifest this update: Sun 27 Apr 2025 06:00:16 +0000
Manifest next update: Mon 28 Apr 2025 06:00:16 +0000
Files and hashes: 1: 5_5ZxyaYymDkazwik4_YUJ_u6nk.roa (hash: 0ihJyb/8cvHev60hCuqr7j7mSBpvAI6EqaNQNOqgNHg=)
2: RNPMWRzro4YTDzyfdCZFi4iHwus.crl (hash: 5XWcJiOiwIsr22dr2xwJwO3w//wFP+OsgN2y3Rye9i4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/RNPMWRzro4YTDzyfdCZFi4iHwus.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/RNPMWRzro4YTDzyfdCZFi4iHwus.mft
rsync://rpki.ripe.net/repository/DEFAULT/RNPMWRzro4YTDzyfdCZFi4iHwus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 06:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:d5:05:77:63:2f:76:b8:66:49:f3:c0:88:9b:62:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44d3cc591ceba386130f3c9f7426458b8887c2eb
Validity
Not Before: Apr 27 06:00:16 2025 GMT
Not After : Apr 28 06:00:16 2025 GMT
Subject: CN=4255ba474bda37549d9d9d5db6abf4b01ae1be50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f4:35:e5:49:a3:81:9c:0b:7b:e5:64:60:86:
f1:2e:ab:a9:76:88:b1:68:cc:72:1b:35:0a:93:1e:
73:77:2a:e4:83:4b:36:83:62:b1:e6:3f:a9:95:55:
a8:7f:ec:c5:d9:d5:9c:dd:2a:b3:bb:25:ca:42:0a:
50:1a:2f:08:57:22:53:ed:ac:ed:71:bc:b7:f6:1e:
8f:59:f7:6e:3a:d8:bb:20:e0:2b:1f:ea:48:d5:32:
52:a8:93:90:d9:c1:04:6c:03:2a:62:cf:2e:71:53:
ea:12:3c:cc:21:0f:26:d8:16:57:dc:48:a2:39:72:
82:22:d4:4d:01:fc:4b:f9:d5:25:34:20:c7:68:a0:
42:6b:44:50:28:7f:d3:85:33:2f:d5:29:9f:95:ff:
00:fe:04:56:6f:08:38:70:0a:5f:44:09:84:29:1a:
f6:86:fd:92:ae:df:ec:c3:ce:36:d1:17:c5:7c:c9:
79:fc:4e:a7:1e:b6:e5:45:2b:dd:a7:08:d1:f8:d6:
1d:4a:8f:f7:6b:ba:ae:80:0c:e7:b2:a7:d0:e5:3f:
0c:d5:e2:1c:7d:ea:93:cb:20:bf:ca:84:5b:00:53:
9d:34:21:09:5d:ee:1e:0a:7f:01:10:de:66:a8:0d:
bd:64:72:c4:ad:dc:d1:e4:9b:3e:58:99:1f:0d:9b:
22:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:55:BA:47:4B:DA:37:54:9D:9D:9D:5D:B6:AB:F4:B0:1A:E1:BE:50
X509v3 Authority Key Identifier:
keyid:44:D3:CC:59:1C:EB:A3:86:13:0F:3C:9F:74:26:45:8B:88:87:C2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RNPMWRzro4YTDzyfdCZFi4iHwus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/RNPMWRzro4YTDzyfdCZFi4iHwus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/RNPMWRzro4YTDzyfdCZFi4iHwus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:a3:95:e8:20:d8:45:b4:5b:8f:10:3c:f5:53:3c:8d:a4:65:
cb:8f:f5:9e:07:04:fe:41:4e:4e:47:c6:1e:ce:b1:65:cc:e3:
3f:fa:ad:49:7a:ed:a0:27:cb:d2:af:13:63:81:e9:69:a0:40:
09:a9:f6:74:3a:9f:90:c5:aa:d1:3e:48:64:1a:21:fd:81:34:
71:48:3a:c7:a4:26:b6:ad:e7:f4:eb:ec:ff:26:a1:2c:d3:f0:
75:be:93:cc:3e:ac:1c:5a:4f:9d:4b:d7:ff:28:23:67:6b:d3:
64:65:dc:50:69:8f:eb:b7:ca:3f:dc:11:03:08:96:64:dc:f9:
10:18:1c:2b:80:84:e0:a6:f4:23:52:2c:17:0e:8f:06:a9:2a:
3b:8e:c4:ec:4c:00:d4:8b:d7:74:63:b5:a7:70:59:dc:4c:a8:
12:bc:c9:f5:b3:25:92:fa:5c:bf:27:35:aa:0e:d7:d8:e6:ab:
e3:19:da:7b:c7:31:7d:56:ec:ad:cd:b7:c8:ab:4f:27:bb:2b:
76:ab:9d:cd:79:06:cc:bb:6a:a0:c4:06:2d:40:19:3e:26:b0:
47:94:18:3c:b7:92:8d:f7:c0:fd:32:cd:e7:63:cf:eb:cc:ba:
48:6f:24:44:2a:19:53:49:ad:fd:53:fc:27:a3:30:0d:e8:07:
a6:44:53:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:15:02 2025 by rpki-client