Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/RjUoxUCm1XfC0cwabuoXEks5I4Y.mft
File: RjUoxUCm1XfC0cwabuoXEks5I4Y.mft (raw, json)
Hash identifier: qH38ZobGCGPo+hbiW0888l3lVlVugwex6iGw4ku30fE=
Subject key identifier: 47:C3:EA:D1:40:AA:23:0A:B1:4D:14:73:5D:57:9C:3E:08:39:4B:F8
Authority key identifier: 46:35:28:C5:40:A6:D5:77:C2:D1:CC:1A:6E:EA:17:12:4B:39:23:86
Certificate issuer: /CN=463528c540a6d577c2d1cc1a6eea17124b392386
Certificate serial: 0196865B45D53C5E09D670CF205167D86ED5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RjUoxUCm1XfC0cwabuoXEks5I4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/RjUoxUCm1XfC0cwabuoXEks5I4Y.mft
Manifest number: 151B
Signing time: Wed 30 Apr 2025 11:00:50 +0000
Manifest this update: Wed 30 Apr 2025 11:00:50 +0000
Manifest next update: Thu 01 May 2025 11:00:50 +0000
Files and hashes: 1: CgYapJdE3lATpkmQavkm2MlhTAs.roa (hash: leTUYkK/UbPoz5ypT99weLoqPEKtLynpZc0EJfzHDjs=)
2: RjUoxUCm1XfC0cwabuoXEks5I4Y.crl (hash: CXZjyxawSoo0hIm1UIcDboNBxFawEOwDqMYnsO0RRO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/RjUoxUCm1XfC0cwabuoXEks5I4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/RjUoxUCm1XfC0cwabuoXEks5I4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/RjUoxUCm1XfC0cwabuoXEks5I4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:5b:45:d5:3c:5e:09:d6:70:cf:20:51:67:d8:6e:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=463528c540a6d577c2d1cc1a6eea17124b392386
Validity
Not Before: Apr 30 11:00:50 2025 GMT
Not After : May 1 11:00:50 2025 GMT
Subject: CN=47c3ead140aa230ab14d14735d579c3e08394bf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:78:26:2b:88:a7:2f:04:66:75:d9:b2:66:cf:
ce:77:55:de:c5:17:e4:d3:06:e9:d7:ec:f5:1f:d6:
cf:4d:27:ec:d6:38:37:14:29:86:b5:97:fc:91:4d:
3c:0e:3e:79:34:aa:ca:2a:e7:f8:75:73:bd:58:a7:
5a:71:0c:77:ed:b4:b1:91:29:cb:2d:1f:de:93:92:
d2:22:bc:5e:d7:69:5a:df:12:cb:cb:e4:6b:8e:97:
8e:32:44:d7:59:46:ba:15:23:92:f6:c4:27:c4:83:
d7:fb:bf:08:db:08:62:a3:a2:2b:e5:ef:39:0b:f9:
17:80:ee:05:dc:e7:3e:f4:f3:87:ab:d5:b4:d5:5b:
86:eb:79:e2:d4:29:01:1f:70:56:55:82:0b:0d:b3:
29:5a:fd:cd:b1:73:72:ea:04:35:27:4e:8c:04:4f:
3e:e0:80:e8:2d:e8:ff:5a:73:c2:92:2a:1a:5f:f2:
e9:8a:3f:9f:36:3c:e3:26:d2:34:9b:e9:25:a9:92:
14:0b:14:61:4d:f3:2d:ed:44:ce:61:ab:ac:19:e7:
87:c5:b0:0f:a2:d2:e7:15:ab:a4:b4:8f:10:13:65:
f7:bc:5e:e8:b7:54:bc:69:da:bd:66:7f:2b:2b:46:
05:16:a3:78:e9:a1:5a:ef:80:38:e3:bf:d4:56:13:
b7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:C3:EA:D1:40:AA:23:0A:B1:4D:14:73:5D:57:9C:3E:08:39:4B:F8
X509v3 Authority Key Identifier:
keyid:46:35:28:C5:40:A6:D5:77:C2:D1:CC:1A:6E:EA:17:12:4B:39:23:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RjUoxUCm1XfC0cwabuoXEks5I4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/RjUoxUCm1XfC0cwabuoXEks5I4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/RjUoxUCm1XfC0cwabuoXEks5I4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:93:7f:a5:b2:cd:a4:7c:29:d7:af:44:57:0a:d7:3e:f7:ae:
c7:8d:a7:ea:90:3a:ca:44:7e:48:84:62:7b:fb:40:20:4f:41:
bc:ce:47:67:a5:fe:04:e7:05:31:fe:1f:69:44:a0:54:f2:e9:
3d:72:e1:05:38:dd:4a:13:40:ad:f4:1f:84:a6:92:8a:8f:15:
bb:15:a6:d8:43:d8:33:31:38:72:72:20:b4:29:cf:24:c4:3b:
83:a8:79:1e:02:16:67:f2:9d:ce:ea:bc:89:bb:e3:7a:88:dc:
eb:df:ac:d4:26:0a:8e:5a:a1:d5:e4:e6:5a:d5:04:1d:44:73:
e4:7c:37:a6:67:33:68:54:1d:37:59:21:fa:0b:3f:be:29:7a:
f2:b2:e1:a0:07:f9:32:a6:5a:c0:fc:66:32:be:d3:88:af:ea:
81:93:b0:43:a7:4d:21:99:ef:a3:6d:58:96:7b:92:1c:de:e6:
be:97:65:12:4c:08:3b:ad:82:99:f6:21:cc:84:21:c4:e3:bb:
eb:f4:2f:de:f0:68:7e:98:2d:bd:de:b3:56:59:c1:f6:b9:f8:
e5:9b:25:fc:49:7f:aa:83:16:5e:b1:96:3a:65:f3:2e:fd:5f:
4f:bd:c3:6c:69:fb:9b:b6:01:74:fb:bb:72:ec:9a:9c:bd:09:
13:7b:4a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:20:11 2025 by rpki-client