Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/4da5d5-3152-4f54-a0a9-a95aef9c91d9/1/dF5kPQIextIbR1rkYN3tz35rP2Y.mft
File: dF5kPQIextIbR1rkYN3tz35rP2Y.mft (raw, json)
Hash identifier: 8pb7nGxOKr/pM2T35Zrzh7l3yGvodaDjOJaOuqopzV8=
Subject key identifier: 0A:B4:EE:57:ED:B9:4B:99:46:F2:1E:BB:A2:28:2C:72:26:BA:53:13
Authority key identifier: 74:5E:64:3D:02:1E:C6:D2:1B:47:5A:E4:60:DD:ED:CF:7E:6B:3F:66
Certificate issuer: /CN=745e643d021ec6d21b475ae460ddedcf7e6b3f66
Certificate serial: 0196797B2CFF69CAB090B8D94B0DACEA761A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dF5kPQIextIbR1rkYN3tz35rP2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/4da5d5-3152-4f54-a0a9-a95aef9c91d9/1/dF5kPQIextIbR1rkYN3tz35rP2Y.mft
Manifest number: 04E2
Signing time: Sun 27 Apr 2025 23:00:37 +0000
Manifest this update: Sun 27 Apr 2025 23:00:37 +0000
Manifest next update: Mon 28 Apr 2025 23:00:37 +0000
Files and hashes: 1: 1hVW1hVDzUMh4lZ8GR7cUAl7v8M.roa (hash: /ppjOJyvYU9AU0zUdXonk4kTMm986gK2/zEUEbCwwMQ=)
2: dF5kPQIextIbR1rkYN3tz35rP2Y.crl (hash: lkNtmYf6KX8Q+sLTPf0cfK8mDnOYztyno5ZES0E/WQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/4da5d5-3152-4f54-a0a9-a95aef9c91d9/1/dF5kPQIextIbR1rkYN3tz35rP2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/4da5d5-3152-4f54-a0a9-a95aef9c91d9/1/dF5kPQIextIbR1rkYN3tz35rP2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/dF5kPQIextIbR1rkYN3tz35rP2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:7b:2c:ff:69:ca:b0:90:b8:d9:4b:0d:ac:ea:76:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=745e643d021ec6d21b475ae460ddedcf7e6b3f66
Validity
Not Before: Apr 27 23:00:37 2025 GMT
Not After : Apr 28 23:00:37 2025 GMT
Subject: CN=0ab4ee57edb94b9946f21ebba2282c7226ba5313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7e:7f:6c:5e:10:4c:84:e1:cc:d7:1f:21:01:
b0:d7:ef:bd:16:67:a6:a2:f3:98:47:dc:a4:63:52:
b8:2f:5b:98:3d:0d:f4:28:af:d6:93:f1:f0:18:a1:
a4:38:47:81:60:40:bf:3b:1a:b6:27:ec:e0:0f:27:
9e:26:b4:74:7a:e0:59:cd:35:4d:be:a7:03:ef:2d:
0f:14:cc:18:67:b2:80:48:39:75:92:d3:d2:06:7e:
de:1f:cf:45:b4:78:0a:11:0f:ea:06:25:cb:08:a8:
cc:73:0e:7f:7f:f2:80:f1:07:0c:53:38:ed:e3:f4:
7b:c7:fa:d0:57:46:cb:89:35:ce:1c:49:85:a8:8d:
43:51:18:b8:67:7c:6d:e0:b3:c2:04:84:d8:2f:11:
b1:8b:7f:5a:6b:0b:df:df:9a:15:f8:96:e8:a8:80:
19:34:d2:49:07:7f:d3:75:04:26:e0:02:d4:15:aa:
ed:12:03:a1:1f:b6:1d:aa:28:b5:d4:fe:81:6e:5f:
67:b3:2d:24:64:28:b2:70:e0:0b:b2:69:ac:cc:49:
01:2e:54:7e:0a:c0:64:f5:bb:28:ed:95:33:63:2f:
b4:da:92:4d:93:30:e6:5e:f8:3d:c4:2d:1b:5a:75:
6a:89:6d:37:68:83:b9:cf:8e:05:bf:52:d5:47:77:
1a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:B4:EE:57:ED:B9:4B:99:46:F2:1E:BB:A2:28:2C:72:26:BA:53:13
X509v3 Authority Key Identifier:
keyid:74:5E:64:3D:02:1E:C6:D2:1B:47:5A:E4:60:DD:ED:CF:7E:6B:3F:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dF5kPQIextIbR1rkYN3tz35rP2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4da5d5-3152-4f54-a0a9-a95aef9c91d9/1/dF5kPQIextIbR1rkYN3tz35rP2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4da5d5-3152-4f54-a0a9-a95aef9c91d9/1/dF5kPQIextIbR1rkYN3tz35rP2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:e3:94:38:bf:61:6d:20:37:f8:84:05:76:1e:b3:8b:e3:a3:
cd:41:81:91:be:56:9f:33:c1:2b:2a:34:8f:a6:a7:ff:86:d5:
cb:1d:41:19:37:e7:ed:86:75:1a:28:e9:78:f2:d7:6a:d8:96:
bc:24:0c:2f:5c:5f:ae:65:94:ef:ed:6a:b2:7c:22:72:f1:f4:
4a:87:29:1f:58:a8:bf:28:cc:9e:96:04:9d:94:cf:4c:1f:e9:
7f:97:80:44:1e:bc:96:47:22:9c:30:45:74:f7:0d:63:c1:d3:
9c:35:b2:2a:30:a2:26:2f:28:6c:a1:4b:8b:7b:db:2a:dc:8d:
ec:d0:26:70:90:70:3a:0a:e6:21:35:0a:99:1e:49:3c:df:fc:
c8:e5:3e:d9:6b:fd:d4:d0:5b:5b:e9:8b:d8:58:06:5e:ea:e0:
71:57:68:a8:28:4c:56:e2:35:d4:d8:df:ad:32:8b:fc:3e:bc:
5d:96:70:e2:ce:f9:d1:07:09:fb:13:44:3d:e1:fc:4d:62:a0:
7c:4d:67:94:7e:1b:84:5b:4d:80:b5:6b:23:32:7c:63:62:fb:
60:93:d5:58:53:82:c1:cc:b8:2b:a3:74:f9:fa:9f:fe:ed:ea:
36:e6:b4:58:54:4c:64:09:39:1b:e0:68:7a:21:a8:a3:0c:9b:
b2:2d:94:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:59:12 2025 by rpki-client