Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/fef13d-8b98-451d-8e01-b7b3affc6ec9/1/V7u8R7HGflV76rDyxtGL8CbDBuA.mft
File: V7u8R7HGflV76rDyxtGL8CbDBuA.mft (raw, json)
Hash identifier: J2UTgSPuEogHs3r7qpAPNN1bdc7WX2Yn/C6GFogHdyQ=
Subject key identifier: 4E:25:6B:E2:86:B8:FD:11:E4:C8:E3:A7:29:37:E2:81:8E:47:6C:97
Authority key identifier: 57:BB:BC:47:B1:C6:7E:55:7B:EA:B0:F2:C6:D1:8B:F0:26:C3:06:E0
Certificate issuer: /CN=57bbbc47b1c67e557beab0f2c6d18bf026c306e0
Certificate serial: 0196786870B2E880ECA83DB5E1AE0FF0763C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V7u8R7HGflV76rDyxtGL8CbDBuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/fef13d-8b98-451d-8e01-b7b3affc6ec9/1/V7u8R7HGflV76rDyxtGL8CbDBuA.mft
Manifest number: 04CE
Signing time: Sun 27 Apr 2025 18:00:32 +0000
Manifest this update: Sun 27 Apr 2025 18:00:32 +0000
Manifest next update: Mon 28 Apr 2025 18:00:32 +0000
Files and hashes: 1: IN75Wo0DtghUohhXp1U5nsAv_wI.roa (hash: nJLnAhkfX/7UpoKrRsvnQaA4L9D5o2XedZEPGYHEFLA=)
2: V7u8R7HGflV76rDyxtGL8CbDBuA.crl (hash: WOut5S3+ysc6DmoyR1uPwOWMkCxXsIFBoUf1xMYftAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/fef13d-8b98-451d-8e01-b7b3affc6ec9/1/V7u8R7HGflV76rDyxtGL8CbDBuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/fef13d-8b98-451d-8e01-b7b3affc6ec9/1/V7u8R7HGflV76rDyxtGL8CbDBuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/V7u8R7HGflV76rDyxtGL8CbDBuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:68:70:b2:e8:80:ec:a8:3d:b5:e1:ae:0f:f0:76:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57bbbc47b1c67e557beab0f2c6d18bf026c306e0
Validity
Not Before: Apr 27 18:00:32 2025 GMT
Not After : Apr 28 18:00:32 2025 GMT
Subject: CN=4e256be286b8fd11e4c8e3a72937e2818e476c97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:51:50:41:35:3c:b7:1c:56:d7:d6:45:3e:c3:
1e:22:be:18:ff:cd:a7:09:18:94:93:bb:f7:84:8c:
fc:29:37:1a:ec:b9:9b:ef:64:e8:ef:7e:b9:c7:40:
62:f5:f8:25:93:09:51:76:13:84:5a:a1:e1:6a:40:
1a:bc:51:2e:d3:e6:e0:5e:da:11:1e:6c:86:ed:b0:
9c:39:09:0a:ff:1f:92:5f:4e:43:fe:84:fc:11:e8:
0d:94:27:71:65:c4:cb:07:28:e9:03:5a:25:13:f0:
4d:16:de:95:7b:83:dd:ba:0f:1a:37:d5:d8:f9:0d:
41:30:19:cb:11:46:1f:8e:ac:20:29:8a:82:d5:c5:
25:0b:53:f1:84:c6:fb:62:e1:31:35:e3:8a:e4:1b:
f0:d5:9d:f6:a3:a9:07:4c:c5:9b:07:8f:99:db:08:
c9:f2:c5:cf:3a:1c:13:1e:7f:6c:2d:a9:b5:71:25:
dc:be:f7:3c:04:ed:54:7b:81:a4:3a:a8:f7:3e:9d:
e2:ed:72:bc:a5:2d:ed:d2:32:16:77:4d:79:0b:ad:
61:fd:b8:89:9a:fd:c0:b6:6c:40:e0:f7:86:b9:40:
43:a5:17:9a:87:89:9c:2b:2c:31:34:db:82:d9:7e:
5d:16:2f:7b:56:98:3c:ca:23:c7:c3:3e:b3:c5:9f:
01:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:25:6B:E2:86:B8:FD:11:E4:C8:E3:A7:29:37:E2:81:8E:47:6C:97
X509v3 Authority Key Identifier:
keyid:57:BB:BC:47:B1:C6:7E:55:7B:EA:B0:F2:C6:D1:8B:F0:26:C3:06:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7u8R7HGflV76rDyxtGL8CbDBuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/fef13d-8b98-451d-8e01-b7b3affc6ec9/1/V7u8R7HGflV76rDyxtGL8CbDBuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/fef13d-8b98-451d-8e01-b7b3affc6ec9/1/V7u8R7HGflV76rDyxtGL8CbDBuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:6b:45:29:98:16:16:e6:1d:c6:ec:73:77:9b:12:d7:2e:78:
8e:a4:16:57:04:af:c6:7d:39:86:d5:39:a7:9f:39:94:96:c4:
68:42:16:75:29:ee:d4:54:d5:24:57:71:03:80:c8:72:6e:16:
b0:6d:33:9b:80:cc:a1:e2:e9:01:a5:e0:c4:cc:39:3f:41:12:
83:f6:52:25:5e:e6:bf:b5:30:a3:f1:6d:13:53:31:0b:6b:86:
12:34:2a:b1:94:af:04:b5:74:29:bf:ab:7e:80:63:88:da:42:
d4:64:bb:c7:c2:38:74:25:7d:13:53:f0:83:e7:23:cd:60:6d:
c6:37:df:55:dd:54:03:f7:d3:34:5c:9b:92:91:ad:4a:44:3b:
7a:63:97:d5:9c:ca:b2:78:68:66:d2:1d:42:d3:12:9e:f8:78:
63:61:13:37:5c:16:8f:89:c0:1f:c2:06:eb:e8:e0:33:23:94:
f0:5f:f5:15:a1:22:9b:a8:a6:f0:3b:6c:d6:a4:31:19:21:8a:
3f:41:2a:d5:23:fc:ce:80:28:bc:82:73:28:3c:80:8b:25:e7:
71:8d:44:9d:0e:e9:44:b9:59:ac:25:08:63:14:d7:58:e8:e4:
a1:5c:32:c6:1a:57:8f:ba:ed:62:a9:cc:97:d0:e0:c2:cb:47:
e5:22:16:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:17:48 2025 by rpki-client