Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/b90729-83d2-4c18-8063-11fe27d8e170/1/rgQQbzAsAHfpC2Z2LrsiLmEbM90.mft
File: rgQQbzAsAHfpC2Z2LrsiLmEbM90.mft (raw, json)
Hash identifier: SCcQxAxTVBSB/FZaUk1WVUhwGrfyP49dysplQ3w5CaE=
Subject key identifier: 48:88:C5:89:00:79:45:6A:E2:FC:35:6A:1A:39:0D:94:3C:58:6B:32
Authority key identifier: AE:04:10:6F:30:2C:00:77:E9:0B:66:76:2E:BB:22:2E:61:1B:33:DD
Certificate issuer: /CN=ae04106f302c0077e90b66762ebb222e611b33dd
Certificate serial: 0196789F4C91A37DCF0C4F4145229873A738
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rgQQbzAsAHfpC2Z2LrsiLmEbM90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/b90729-83d2-4c18-8063-11fe27d8e170/1/rgQQbzAsAHfpC2Z2LrsiLmEbM90.mft
Manifest number: 0443
Signing time: Sun 27 Apr 2025 19:00:27 +0000
Manifest this update: Sun 27 Apr 2025 19:00:27 +0000
Manifest next update: Mon 28 Apr 2025 19:00:27 +0000
Files and hashes: 1: GOFFPgaA_FNPo8jH9LLALXPdKRA.roa (hash: JZqDVZ5TyXAW6arfyTRJvqhjtcPlVF0bW1jBuVqcZ2U=)
2: rgQQbzAsAHfpC2Z2LrsiLmEbM90.crl (hash: wuPZqWrCYKC2KUZikFfcgrc36R/NcinPPP8y2I/FbYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/b90729-83d2-4c18-8063-11fe27d8e170/1/rgQQbzAsAHfpC2Z2LrsiLmEbM90.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/b90729-83d2-4c18-8063-11fe27d8e170/1/rgQQbzAsAHfpC2Z2LrsiLmEbM90.mft
rsync://rpki.ripe.net/repository/DEFAULT/rgQQbzAsAHfpC2Z2LrsiLmEbM90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:9f:4c:91:a3:7d:cf:0c:4f:41:45:22:98:73:a7:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae04106f302c0077e90b66762ebb222e611b33dd
Validity
Not Before: Apr 27 19:00:27 2025 GMT
Not After : Apr 28 19:00:27 2025 GMT
Subject: CN=4888c5890079456ae2fc356a1a390d943c586b32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:69:c5:ef:2b:93:24:8a:42:e2:a6:1a:8a:9f:
eb:0f:91:da:17:6c:66:0d:9b:0e:d2:2a:82:14:4f:
77:c2:2e:d0:ec:fd:95:a4:74:9a:7f:78:3b:a8:7f:
a7:07:ae:e9:7a:98:4d:c2:d7:59:66:6b:5b:cc:86:
cf:31:02:13:6a:3d:84:a9:7d:6c:b2:83:09:c2:72:
fd:93:07:b4:1f:1d:63:68:56:6e:8c:23:40:b5:30:
87:56:4d:26:38:d8:74:f4:48:79:09:85:dc:c9:9f:
c0:8c:6c:45:58:cf:c2:f9:bf:3d:6f:b9:74:c9:65:
0a:62:99:7a:52:41:d6:61:b6:1c:ba:14:4b:4c:29:
72:a7:b3:56:ce:d3:9d:db:e0:05:90:9c:e8:97:e2:
ca:10:1b:de:a3:b0:38:34:9d:3a:e3:28:f9:01:ae:
07:10:84:3c:d6:e3:2b:0b:94:f9:82:14:b1:98:70:
01:de:e8:7a:bf:4a:7a:38:c1:f1:88:f2:a0:e8:0a:
c3:0e:68:ec:fb:5d:73:f4:cb:5d:bf:59:5d:21:c7:
fd:bb:25:df:48:f1:1c:ff:a4:e5:6d:f7:b9:b3:64:
84:55:14:80:0b:82:84:43:27:16:de:97:4f:4f:e9:
59:fe:5b:c5:6c:3c:90:2a:a9:4b:f9:46:db:eb:b8:
47:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:88:C5:89:00:79:45:6A:E2:FC:35:6A:1A:39:0D:94:3C:58:6B:32
X509v3 Authority Key Identifier:
keyid:AE:04:10:6F:30:2C:00:77:E9:0B:66:76:2E:BB:22:2E:61:1B:33:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rgQQbzAsAHfpC2Z2LrsiLmEbM90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b90729-83d2-4c18-8063-11fe27d8e170/1/rgQQbzAsAHfpC2Z2LrsiLmEbM90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b90729-83d2-4c18-8063-11fe27d8e170/1/rgQQbzAsAHfpC2Z2LrsiLmEbM90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:ed:0d:8a:a3:94:f9:26:e5:c9:24:cd:b5:fa:68:69:13:db:
e2:22:4f:69:e9:e9:da:d8:09:40:a0:74:5c:bd:36:b8:1f:dd:
42:07:fb:7d:b0:c7:ef:d8:41:a0:4c:f1:32:15:bd:0b:97:e6:
a3:b1:fd:ae:6a:9e:40:e4:57:08:d2:54:da:c7:e0:f9:25:30:
74:c4:4a:8c:b6:55:07:a0:0f:15:10:93:4a:e5:8e:49:c7:26:
b6:95:99:94:12:18:df:bf:05:df:7e:f4:bd:a8:f8:a8:31:86:
9a:ed:18:d5:6a:17:d7:4c:f7:b4:fd:ee:3a:54:e2:2c:55:f8:
30:70:42:95:c5:b4:82:b5:af:0b:84:c2:c9:3d:e5:f0:46:51:
87:7b:63:cf:c3:74:08:ee:6e:e7:bb:ce:cd:ab:ab:b5:dd:02:
11:57:82:79:78:33:8b:59:a4:2a:cb:18:70:52:b0:8d:a2:4e:
16:0d:f3:dd:3d:7b:e4:2d:fa:87:0b:d1:f3:8d:40:f4:09:7c:
4e:00:7e:17:ef:02:1d:67:9d:12:b3:bc:e5:e2:b8:f0:9a:45:
52:85:c1:43:0c:0b:9b:64:4a:b2:7d:6f:f2:ee:c6:b8:72:74:
4d:28:0e:35:9e:f5:d8:06:49:8e:dc:ff:bd:d3:67:4a:11:09:
b9:ba:45:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:50:13 2025 by rpki-client