Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.mft
File: RVffPlRtVtu10jD2EcckxZmnIlE.mft (raw, json)
Hash identifier: O3t5aN101pnuanQkx4rWZXbgip2VyI8C4+wqYuN8Wc8=
Subject key identifier: 84:24:BC:FA:08:17:A8:00:20:6B:17:97:B1:3A:58:BD:A5:92:22:CE
Authority key identifier: 45:57:DF:3E:54:6D:56:DB:B5:D2:30:F6:11:C7:24:C5:99:A7:22:51
Certificate issuer: /CN=4557df3e546d56dbb5d230f611c724c599a72251
Certificate serial: 0196741DC89AE128DCC0FE4F646ED7099DDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RVffPlRtVtu10jD2EcckxZmnIlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.mft
Manifest number: 05F5
Signing time: Sat 26 Apr 2025 22:00:30 +0000
Manifest this update: Sat 26 Apr 2025 22:00:30 +0000
Manifest next update: Sun 27 Apr 2025 22:00:30 +0000
Files and hashes: 1: 8bsQRC6tEXl8CBwmVFzVd76zzgI.roa (hash: C8qiZHuVAIBOKIv/baZ/CLEIEY2S6o8WOpdp6qtA5us=)
2: RVffPlRtVtu10jD2EcckxZmnIlE.crl (hash: IfMrzFiH1nq8ryGu6bBLALamq7tpPuDSPiW3v6Wf1L0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RVffPlRtVtu10jD2EcckxZmnIlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:1d:c8:9a:e1:28:dc:c0:fe:4f:64:6e:d7:09:9d:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4557df3e546d56dbb5d230f611c724c599a72251
Validity
Not Before: Apr 26 22:00:30 2025 GMT
Not After : Apr 27 22:00:30 2025 GMT
Subject: CN=8424bcfa0817a800206b1797b13a58bda59222ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ed:d3:10:d2:14:6b:75:f2:91:c6:42:18:0e:
63:98:ad:11:7a:a4:ec:05:91:e6:8b:f1:b2:80:0f:
09:3d:c8:a5:2d:45:e5:e7:51:35:db:3d:19:11:2b:
e8:a9:2d:f3:77:d4:09:9c:e8:7f:02:db:55:37:ed:
fb:95:67:6f:37:f4:d4:20:d3:b5:b5:4f:9a:1e:e8:
14:00:5f:22:e7:34:05:00:7a:0a:20:96:a1:64:77:
ec:27:aa:cb:fe:1d:8d:4a:7e:c5:61:d2:61:ce:3b:
5e:17:aa:17:41:80:fb:5b:45:f9:e8:e1:3a:8f:30:
66:36:a9:83:c4:09:c3:99:c4:68:52:97:c2:ba:b7:
ad:14:19:18:3e:29:03:33:bf:27:50:6d:70:dd:b0:
93:84:de:23:be:29:9f:df:4a:44:d6:95:31:d5:1b:
9d:ba:ca:a8:4e:80:fe:08:cc:34:ae:2d:34:6a:78:
a2:92:f9:cb:12:91:e6:fd:7f:19:6f:4d:bc:00:1b:
2b:f4:96:6a:0f:f8:08:df:d7:70:1b:7f:67:73:69:
1a:43:0b:c5:03:48:a9:81:c6:98:6f:e9:97:cb:3b:
b2:f0:38:e9:05:ff:b5:c1:7b:a6:f6:5f:88:1a:95:
44:52:49:af:80:44:df:32:a3:9e:ac:c9:99:77:38:
01:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:24:BC:FA:08:17:A8:00:20:6B:17:97:B1:3A:58:BD:A5:92:22:CE
X509v3 Authority Key Identifier:
keyid:45:57:DF:3E:54:6D:56:DB:B5:D2:30:F6:11:C7:24:C5:99:A7:22:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RVffPlRtVtu10jD2EcckxZmnIlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:67:4f:fc:f4:65:a6:7e:37:dc:fd:c8:2a:b6:fb:8b:7d:ac:
47:a5:60:36:b4:63:11:18:59:46:04:24:05:6e:47:18:5a:45:
7f:2f:f5:a1:0e:90:f6:1f:c9:06:94:43:d6:f9:60:ae:d6:28:
d0:12:82:41:22:94:4d:6f:59:c8:3b:ad:8e:7b:6a:3c:34:4b:
3d:97:c0:9a:cb:f5:4f:b6:ef:7e:f9:d3:fe:87:02:f5:20:c2:
97:cd:9c:f3:bf:66:50:60:85:39:ed:ee:00:65:82:af:a9:84:
20:74:fb:04:c2:ff:85:b3:b9:cb:00:2f:c9:6f:95:63:df:66:
4d:03:60:eb:9b:32:82:e3:b8:b8:f7:b5:a8:e9:66:b2:59:1e:
5d:e8:a8:f1:0e:16:19:a4:4f:a5:b6:30:e6:df:2b:69:26:bd:
7f:e4:98:b4:ce:82:f6:38:70:a3:a7:e7:cf:ad:fd:6b:60:e7:
80:e8:40:81:f0:3b:c7:d1:17:24:45:1b:b0:1d:c4:95:b2:7e:
e3:38:33:f8:64:fb:d0:98:eb:c8:92:2f:1c:46:8c:d5:43:a1:
d0:05:10:bc:e8:74:7a:16:51:b5:32:bc:68:b2:bf:a1:b3:25:
7b:5a:ae:58:e9:31:07:ec:3c:8e:fe:d3:f4:9c:de:48:86:36:
3a:68:69:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:28:32 2025 by rpki-client