Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/25daa4-f7fa-40fa-9250-996326ca7dd6/1/RvP5tB9FoPl7KmqBHKZ6BAKgR38.mft
File: RvP5tB9FoPl7KmqBHKZ6BAKgR38.mft (raw, json)
Hash identifier: Znm8IRfm/B/TRwPzLIk38BdosBBqNBP/dfp/ipmTpgs=
Subject key identifier: 66:87:9A:5A:86:8D:4A:5C:47:D9:F0:E3:A2:CB:50:17:16:92:3E:A4
Authority key identifier: 46:F3:F9:B4:1F:45:A0:F9:7B:2A:6A:81:1C:A6:7A:04:02:A0:47:7F
Certificate issuer: /CN=46f3f9b41f45a0f97b2a6a811ca67a0402a0477f
Certificate serial: 019676B0FF8DDE2B48D63EE52D98A8CDD6F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RvP5tB9FoPl7KmqBHKZ6BAKgR38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/25daa4-f7fa-40fa-9250-996326ca7dd6/1/RvP5tB9FoPl7KmqBHKZ6BAKgR38.mft
Manifest number: 0F0A
Signing time: Sun 27 Apr 2025 10:00:33 +0000
Manifest this update: Sun 27 Apr 2025 10:00:33 +0000
Manifest next update: Mon 28 Apr 2025 10:00:33 +0000
Files and hashes: 1: RvP5tB9FoPl7KmqBHKZ6BAKgR38.crl (hash: FkjbOEWM1IXkggiPYbD/WycqeVmiuQPlUTA596VJkm8=)
2: mbYI3-hNPDwmapQzW6ANq2gKpA4.roa (hash: lOLT23JUefetUmb19vAU2x5VH7+ec+ZaMiJuuVxV7Oc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/25daa4-f7fa-40fa-9250-996326ca7dd6/1/RvP5tB9FoPl7KmqBHKZ6BAKgR38.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/25daa4-f7fa-40fa-9250-996326ca7dd6/1/RvP5tB9FoPl7KmqBHKZ6BAKgR38.mft
rsync://rpki.ripe.net/repository/DEFAULT/RvP5tB9FoPl7KmqBHKZ6BAKgR38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:b0:ff:8d:de:2b:48:d6:3e:e5:2d:98:a8:cd:d6:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46f3f9b41f45a0f97b2a6a811ca67a0402a0477f
Validity
Not Before: Apr 27 10:00:33 2025 GMT
Not After : Apr 28 10:00:33 2025 GMT
Subject: CN=66879a5a868d4a5c47d9f0e3a2cb501716923ea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:90:f5:95:8a:de:e2:43:f0:95:f5:b1:8e:ba:
e4:01:52:4c:43:d6:b5:d0:62:0c:bd:56:60:1f:25:
d7:0e:65:e7:2d:c2:11:eb:15:c2:15:11:00:12:03:
d2:a7:7c:a1:00:d8:a8:07:e1:8e:c1:ff:d2:da:55:
61:3b:75:ab:40:29:21:b1:07:76:df:90:4e:76:2c:
33:ac:0e:d3:97:55:0b:8d:7c:8d:92:1b:df:c1:37:
d8:a3:d7:06:70:0f:8f:5a:ea:aa:46:2d:09:3e:a4:
04:d7:ac:56:7b:67:cd:44:7e:52:e7:e8:62:ab:75:
e7:71:b7:5e:80:fd:fc:7c:1f:36:c5:cb:a4:8d:a2:
66:61:d4:82:01:5b:b7:92:a5:1f:6f:5d:d1:c8:35:
72:c2:61:ea:05:78:42:16:a9:11:f7:32:e0:cf:37:
d7:c4:f4:61:12:ff:10:b7:28:be:74:d4:8d:6c:62:
17:ea:30:2c:cf:08:30:aa:fb:84:77:74:15:e7:38:
2a:39:9e:1e:92:90:22:65:27:39:41:8b:f0:4c:7e:
f2:7e:0a:3a:f3:ba:2b:d2:f6:29:fc:b7:cf:9c:ee:
e4:7f:5a:0f:9e:72:96:d6:fb:f8:48:af:3e:9a:17:
e9:94:8c:44:4a:a8:48:e2:8e:be:6f:f1:d7:49:2f:
56:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:87:9A:5A:86:8D:4A:5C:47:D9:F0:E3:A2:CB:50:17:16:92:3E:A4
X509v3 Authority Key Identifier:
keyid:46:F3:F9:B4:1F:45:A0:F9:7B:2A:6A:81:1C:A6:7A:04:02:A0:47:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RvP5tB9FoPl7KmqBHKZ6BAKgR38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/25daa4-f7fa-40fa-9250-996326ca7dd6/1/RvP5tB9FoPl7KmqBHKZ6BAKgR38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/25daa4-f7fa-40fa-9250-996326ca7dd6/1/RvP5tB9FoPl7KmqBHKZ6BAKgR38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:8f:da:a0:1e:5c:7b:53:0f:cc:a2:39:c0:88:a7:32:72:fa:
de:4f:61:7a:b4:26:33:16:87:a9:dc:44:87:27:62:dc:2e:46:
03:f5:5a:30:e0:3e:d0:f0:17:11:20:a9:0c:63:f2:c3:ec:bd:
5f:c5:90:92:d9:0b:e3:21:17:32:ce:23:ff:34:e0:0a:59:be:
29:6e:78:9e:5d:3e:24:99:51:a8:14:27:4b:29:3c:ab:bb:4f:
7b:28:bc:a7:8c:5e:27:60:75:f2:8b:6f:8d:78:91:2c:34:32:
ce:7d:e9:3e:fb:c0:51:d9:99:c0:a2:c8:f8:8f:25:9a:1b:cc:
53:0e:d6:c1:78:4d:7a:e1:96:3c:ab:62:2e:ba:cf:f3:23:2c:
b3:6f:fd:71:32:5c:52:3a:27:b5:30:bd:00:7d:b0:1a:0c:ff:
03:01:6d:1b:45:03:17:cb:c1:e6:7f:4c:48:55:27:91:3e:f6:
cb:0e:c8:b8:84:78:5f:73:b8:93:29:42:2b:f2:48:a8:6c:ac:
1c:c7:69:f9:16:e2:c1:5b:d3:ed:4f:5f:17:1d:bc:55:a2:fc:
c9:56:43:f0:3d:b7:da:fe:43:0c:55:19:41:c4:67:e0:a3:2b:
86:eb:57:3a:5a:08:e9:84:88:e2:35:67:70:a1:bf:70:70:55:
b1:b3:06:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:13:15 2025 by rpki-client