Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/c45l-wPm1gfYviBDRdbgWkYLmk8.mft
File: c45l-wPm1gfYviBDRdbgWkYLmk8.mft (raw, json)
Hash identifier: 3jzU8nfl84Mdzv8qAQzKSjXlGg2B+Rwc3HPeX9XbZEY=
Subject key identifier: FA:6A:5C:EB:37:60:DF:92:45:06:9A:ED:C4:6A:82:43:21:F6:45:36
Authority key identifier: 73:8E:65:FB:03:E6:D6:07:D8:BE:20:43:45:D6:E0:5A:46:0B:9A:4F
Certificate issuer: /CN=738e65fb03e6d607d8be204345d6e05a460b9a4f
Certificate serial: 0196760CF4F6141C844918DAE786B8A8400F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c45l-wPm1gfYviBDRdbgWkYLmk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/c45l-wPm1gfYviBDRdbgWkYLmk8.mft
Manifest number: 0D10
Signing time: Sun 27 Apr 2025 07:01:22 +0000
Manifest this update: Sun 27 Apr 2025 07:01:22 +0000
Manifest next update: Mon 28 Apr 2025 07:01:22 +0000
Files and hashes: 1: Bm65E--O4RsSyCzNAmCOH5DCwbg.roa (hash: Dk5vtQSO5xVuQ/klL2R5yHYHzC51XBPO7azd9yPCmHY=)
2: c45l-wPm1gfYviBDRdbgWkYLmk8.crl (hash: 2gtd5UPZNp/SrQFEL+guNTLx/2mkkyKRKxPUqUw4Nao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/c45l-wPm1gfYviBDRdbgWkYLmk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/c45l-wPm1gfYviBDRdbgWkYLmk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/c45l-wPm1gfYviBDRdbgWkYLmk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:f4:f6:14:1c:84:49:18:da:e7:86:b8:a8:40:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=738e65fb03e6d607d8be204345d6e05a460b9a4f
Validity
Not Before: Apr 27 07:01:22 2025 GMT
Not After : Apr 28 07:01:22 2025 GMT
Subject: CN=fa6a5ceb3760df9245069aedc46a824321f64536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:d3:2c:8d:7d:3a:d4:ca:71:0d:56:db:6d:52:
60:ea:2a:6f:77:b0:92:84:a1:4e:0e:15:46:a0:8e:
62:1d:ca:12:7f:0b:a6:6b:99:62:84:94:24:7a:d0:
99:42:5a:9c:41:1e:0b:8e:f8:5d:b3:3b:8d:bc:e8:
48:61:90:1a:6d:28:4e:6a:bb:86:e4:71:63:f2:fe:
0d:ce:49:10:7a:8e:24:ae:2b:00:d0:e5:0a:43:d0:
bb:a2:dc:2f:d6:c9:19:09:b5:1c:99:b2:c7:48:c3:
56:8a:12:55:90:36:e4:8c:69:4b:05:73:e0:fd:76:
1c:73:e7:a5:73:88:c9:6a:30:dc:67:cb:db:63:b4:
8b:75:98:d9:72:5f:eb:80:ae:6f:0c:f7:76:53:d9:
56:40:4a:ca:3c:e8:87:48:d0:e0:a2:66:ad:50:a3:
01:04:e7:0c:db:9a:c7:a6:fa:55:7c:a4:33:00:b1:
67:20:2d:07:4e:2e:bf:8d:b0:5b:50:6e:e6:d4:dc:
1c:af:6e:93:f1:f8:99:32:dc:4c:c9:ae:1c:ae:ae:
fe:ea:03:9d:aa:1e:02:f8:09:53:b1:50:43:3a:11:
da:3f:54:03:7e:ca:b0:90:b2:8d:00:4d:a1:8c:bc:
0f:07:61:68:76:b6:da:c4:9e:2d:34:ef:d9:46:36:
20:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:6A:5C:EB:37:60:DF:92:45:06:9A:ED:C4:6A:82:43:21:F6:45:36
X509v3 Authority Key Identifier:
keyid:73:8E:65:FB:03:E6:D6:07:D8:BE:20:43:45:D6:E0:5A:46:0B:9A:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c45l-wPm1gfYviBDRdbgWkYLmk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/c45l-wPm1gfYviBDRdbgWkYLmk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/c45l-wPm1gfYviBDRdbgWkYLmk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:6c:74:41:23:53:42:e4:1f:69:6b:d9:62:af:ce:2c:92:50:
5e:f6:a2:d1:12:2d:8e:8f:35:53:4c:6a:d0:dc:9c:bf:f2:83:
97:a5:ea:71:d3:69:f9:be:fd:df:df:a6:ad:38:17:f0:f3:25:
d1:f5:43:b8:f2:01:43:f3:ee:f0:24:e4:5a:b3:8c:d7:6d:94:
08:9d:ad:50:32:8a:c6:e9:ea:c5:04:26:08:61:41:ee:8f:59:
12:61:6a:e6:36:1d:27:91:dc:4d:6e:9d:a6:27:44:e7:52:30:
3a:5d:83:6d:c0:6b:27:fe:de:7f:30:0b:0d:7c:a1:34:e4:33:
57:af:58:42:7f:bd:fa:5e:25:b7:1c:88:72:3b:5d:69:dc:d4:
97:95:a2:85:21:f1:8f:97:bb:63:34:90:f0:63:f9:ba:48:9a:
b2:6d:41:9b:90:f7:0c:ea:58:97:f4:a6:5c:43:8b:df:9e:5e:
6e:06:86:34:84:35:09:4d:a4:c5:f3:ff:29:ba:f4:0e:2a:dd:
cb:20:3b:51:6e:84:18:88:67:38:b0:aa:a0:cf:5a:ea:07:1b:
f9:65:19:81:c3:80:8e:02:17:97:a1:1f:4a:fe:63:15:1a:b0:
30:ab:c3:4f:b2:11:eb:31:46:0e:64:34:bd:6d:e2:b3:bd:03:
78:46:24:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:30:28 2025 by rpki-client