Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/17490b-09a6-4e38-b084-14b0e8c4e8e7/1/rEvdnpfyEDcMwwElesFfrrj6Uk4.mft
File: rEvdnpfyEDcMwwElesFfrrj6Uk4.mft (raw, json)
Hash identifier: PlBFH9wMZSGVpv8E8IRl766hqB97E9fC0lhRhXRLv70=
Subject key identifier: 97:12:40:FF:11:09:18:CB:73:9D:07:22:98:21:01:2B:08:6B:6D:4E
Authority key identifier: AC:4B:DD:9E:97:F2:10:37:0C:C3:01:25:7A:C1:5F:AE:B8:FA:52:4E
Certificate issuer: /CN=ac4bdd9e97f210370cc301257ac15faeb8fa524e
Certificate serial: 01967831B4C7A695726D0606F25D91C7B9F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rEvdnpfyEDcMwwElesFfrrj6Uk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/17490b-09a6-4e38-b084-14b0e8c4e8e7/1/rEvdnpfyEDcMwwElesFfrrj6Uk4.mft
Manifest number: 09BB
Signing time: Sun 27 Apr 2025 17:00:45 +0000
Manifest this update: Sun 27 Apr 2025 17:00:45 +0000
Manifest next update: Mon 28 Apr 2025 17:00:45 +0000
Files and hashes: 1: Qh3mzL9VUkWkolAH9jB_GpWhLg0.roa (hash: LSjP0eVYXjK72XpL0ynKNA9slIHH17di2BQFA3XHSqk=)
2: rEvdnpfyEDcMwwElesFfrrj6Uk4.crl (hash: Gbrj4DOI3vu6nvmtWcTs0ZOyKfdlDC7oF1z5z0NI0LQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/17490b-09a6-4e38-b084-14b0e8c4e8e7/1/rEvdnpfyEDcMwwElesFfrrj6Uk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/17490b-09a6-4e38-b084-14b0e8c4e8e7/1/rEvdnpfyEDcMwwElesFfrrj6Uk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rEvdnpfyEDcMwwElesFfrrj6Uk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:31:b4:c7:a6:95:72:6d:06:06:f2:5d:91:c7:b9:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac4bdd9e97f210370cc301257ac15faeb8fa524e
Validity
Not Before: Apr 27 17:00:45 2025 GMT
Not After : Apr 28 17:00:45 2025 GMT
Subject: CN=971240ff110918cb739d07229821012b086b6d4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:95:50:fa:25:d4:8e:c0:45:58:2e:49:4a:12:
a6:70:d5:18:da:5a:62:9a:95:9e:4c:d0:43:7c:d9:
58:38:7f:b0:be:12:17:fd:d7:ed:ec:a4:b2:d1:a9:
b5:91:e5:ed:7c:76:ea:dd:58:4a:d2:d2:a4:94:e8:
77:b6:fc:00:4c:a1:28:c9:06:01:a6:c6:c5:a7:89:
d2:52:b0:4b:68:7a:57:47:e2:03:28:03:d8:6b:40:
c3:be:5e:bc:49:01:a9:a8:ca:0e:a2:4f:81:7d:96:
e7:be:67:37:5d:44:85:8f:06:1e:43:34:63:2b:71:
42:07:ab:ae:d3:ee:14:0c:8c:85:79:86:0c:76:ee:
d6:5d:9b:8d:63:91:a2:ba:47:13:66:74:60:a1:9d:
f6:38:99:cb:d6:c4:c4:53:47:9d:be:68:b7:9f:50:
ee:e7:be:d9:86:28:fb:84:0b:39:d5:e8:03:55:bc:
87:e9:b0:b9:60:ff:d1:79:c6:38:ab:90:e7:ee:d1:
71:70:4d:4c:11:db:cd:e6:9c:ea:2f:60:54:75:88:
4a:d2:a6:07:ff:d8:90:5a:7f:bd:fe:23:5b:18:dc:
d3:d6:28:55:3b:81:32:2c:73:3b:3a:4c:f1:5a:3e:
40:68:ac:b8:22:c1:7a:8e:f1:c1:d3:1d:5d:86:4f:
07:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:12:40:FF:11:09:18:CB:73:9D:07:22:98:21:01:2B:08:6B:6D:4E
X509v3 Authority Key Identifier:
keyid:AC:4B:DD:9E:97:F2:10:37:0C:C3:01:25:7A:C1:5F:AE:B8:FA:52:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rEvdnpfyEDcMwwElesFfrrj6Uk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/17490b-09a6-4e38-b084-14b0e8c4e8e7/1/rEvdnpfyEDcMwwElesFfrrj6Uk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/17490b-09a6-4e38-b084-14b0e8c4e8e7/1/rEvdnpfyEDcMwwElesFfrrj6Uk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:a8:7b:34:20:40:87:0a:c5:0c:3f:88:19:b1:c8:8b:9c:49:
5b:e1:b0:d4:78:97:29:84:a2:0d:2e:7a:05:d7:94:6d:d8:9d:
5c:44:c9:26:0a:da:31:bc:d7:be:f2:01:31:74:88:28:13:7a:
9a:86:b5:af:b9:bb:04:61:18:52:84:4d:ab:cf:63:87:5e:6d:
5b:1d:f0:29:ea:01:68:47:52:6b:87:b5:fb:b6:58:28:b0:5c:
78:f8:c3:27:ff:a2:9c:92:be:65:7d:8c:46:cc:72:a2:b6:86:
15:37:82:fe:40:33:01:42:f8:0c:32:f4:82:29:17:f9:74:8d:
41:e6:ac:4f:57:6a:8e:c6:a8:2e:a7:ca:6e:3d:08:a6:0a:40:
5f:79:08:7a:fe:a0:64:e3:83:23:9a:21:7d:fa:29:08:05:41:
c3:5b:df:2d:e5:5a:b6:d6:14:9a:c3:81:26:81:a9:70:40:da:
e4:ac:48:99:26:97:c3:5e:e3:5a:a6:d8:d1:e6:9a:0f:df:ec:
52:9b:6f:41:38:50:9a:c3:35:c4:c1:58:cf:32:2e:8a:8b:87:
92:13:97:68:04:c5:53:ea:5d:e9:28:cc:e8:bd:92:cf:ce:0e:
b4:50:ae:81:0b:17:aa:a4:53:ee:62:10:d2:54:a4:a9:72:de:
3c:87:bc:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:58:33 2025 by rpki-client