Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.mft
File: RFHoPa4So3HB3UnbNNm9Uqloi0o.mft (raw, json)
Hash identifier: Nm1YsHAEiwDQI5yMK16owpO+R8tjqH1aRKDp0hLczdc=
Subject key identifier: 17:43:37:E6:79:8A:D9:EF:BC:1F:67:66:FF:A0:85:F3:D5:EE:33:06
Authority key identifier: 44:51:E8:3D:AE:12:A3:71:C1:DD:49:DB:34:D9:BD:52:A9:68:8B:4A
Certificate issuer: /CN=4451e83dae12a371c1dd49db34d9bd52a9688b4a
Certificate serial: 0196771EAA54A97BDA99CC025F9611C15A62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFHoPa4So3HB3UnbNNm9Uqloi0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.mft
Manifest number: 0771
Signing time: Sun 27 Apr 2025 12:00:20 +0000
Manifest this update: Sun 27 Apr 2025 12:00:20 +0000
Manifest next update: Mon 28 Apr 2025 12:00:20 +0000
Files and hashes: 1: ET2huy81m3aucqPbuMYcz_TF2tw.roa (hash: E/ipcayMB6DPjVGiBr8hCFyBMlmTehPjlv7rgttgSjU=)
2: RFHoPa4So3HB3UnbNNm9Uqloi0o.crl (hash: l2nV/NMU8H04/ugvCjLzgoSe4uOwCJ1Gthp4d63wKI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFHoPa4So3HB3UnbNNm9Uqloi0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 12:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:1e:aa:54:a9:7b:da:99:cc:02:5f:96:11:c1:5a:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4451e83dae12a371c1dd49db34d9bd52a9688b4a
Validity
Not Before: Apr 27 12:00:20 2025 GMT
Not After : Apr 28 12:00:20 2025 GMT
Subject: CN=174337e6798ad9efbc1f6766ffa085f3d5ee3306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b2:ff:7e:5f:03:e1:9a:f9:3a:8e:bc:d3:5d:
12:9b:9a:d9:c6:dc:0c:3a:6a:f8:d1:55:80:c0:d4:
9c:56:15:53:aa:2f:fe:1c:c0:65:3e:bf:27:f0:d1:
e3:a1:cd:6c:03:be:53:e7:e8:92:9c:3a:92:0a:2c:
dc:33:e5:0c:b4:81:fe:70:0a:9f:6b:19:ad:20:5d:
24:1c:db:d0:d8:4d:46:2f:ba:47:2f:34:62:3e:46:
9f:80:d8:31:59:93:43:46:99:ed:9b:b3:ce:43:62:
e9:b8:a4:66:1e:28:11:4f:6f:83:a6:6e:06:62:82:
29:bd:c6:e3:c0:6b:10:f7:87:27:65:12:51:ef:e0:
d5:a3:d0:8d:e2:32:74:6e:f9:cf:5e:a1:1b:0c:5d:
e7:00:17:85:6a:6e:8d:72:21:71:23:7c:77:92:bb:
ad:ef:2b:06:31:57:bb:89:2f:ef:29:31:38:58:3d:
5a:91:09:c0:8c:28:6b:75:ae:43:9a:70:98:70:e8:
d1:e5:aa:7d:3f:eb:f3:f7:21:43:cf:28:ec:cb:53:
d0:24:4d:00:eb:0a:cd:61:40:4b:99:66:6a:e7:59:
13:36:ff:9a:a5:b7:41:53:ed:d9:1f:c2:bf:c6:cf:
ab:12:5e:db:c5:fd:05:6b:98:bc:62:b7:e9:b2:f0:
7b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:43:37:E6:79:8A:D9:EF:BC:1F:67:66:FF:A0:85:F3:D5:EE:33:06
X509v3 Authority Key Identifier:
keyid:44:51:E8:3D:AE:12:A3:71:C1:DD:49:DB:34:D9:BD:52:A9:68:8B:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFHoPa4So3HB3UnbNNm9Uqloi0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:7d:80:c9:c9:b3:fb:6b:b1:76:34:58:82:7c:62:d6:21:0d:
ee:ba:63:c5:0c:3a:b4:42:c9:96:ff:fb:78:74:6e:f3:7c:5e:
66:e4:25:ce:11:89:8d:31:42:d6:b2:a0:64:26:ed:14:35:dd:
27:cd:1a:e2:07:e9:5e:2a:bc:8a:8c:f6:a9:29:8e:e7:87:5e:
da:83:e3:4b:e1:46:cf:f6:fa:11:e4:c8:bc:5e:b0:cb:92:5b:
74:e0:16:a6:f4:40:b6:cb:44:cf:c6:6b:2c:0f:01:72:38:1e:
5a:78:58:a7:b9:fb:4d:94:5e:99:88:88:6c:08:fc:55:a8:10:
ec:32:14:fd:a2:9f:3d:8e:da:eb:6b:ab:6e:57:5a:c6:43:98:
e9:7d:88:4c:d0:6f:49:05:44:06:ee:3e:2d:13:68:68:01:96:
64:6a:ea:66:b8:72:c2:ce:0f:44:9c:3f:f8:2b:df:af:42:86:
b6:21:f7:8d:8c:ac:e2:4a:e2:2b:7e:1d:f6:6c:a7:2e:c8:8d:
d0:d9:fd:7d:dc:5d:5c:d6:32:8c:2a:d1:56:57:c1:d5:b6:f9:
ba:6b:6b:0d:30:83:9b:50:06:1b:7c:85:80:b9:e8:12:07:6e:
94:34:3f:cf:cb:33:f0:c1:a3:0b:eb:73:61:b5:b8:5a:59:4e:
73:49:95:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:05:26 2025 by rpki-client