Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.mft
File: RDSBQfxG3AGHCHy8hlVumkSe4ec.mft (raw, json)
Hash identifier: ETjyNk2G40097DSGuaQeVEM4dngxJ7oJUvDYLoG9EhE=
Subject key identifier: B1:72:C1:2A:19:5B:02:C5:ED:6F:3E:7B:6A:EB:6A:BF:0D:D3:A5:00
Authority key identifier: 44:34:81:41:FC:46:DC:01:87:08:7C:BC:86:55:6E:9A:44:9E:E1:E7
Certificate issuer: /CN=44348141fc46dc0187087cbc86556e9a449ee1e7
Certificate serial: 01967B699977F30FF691D8CD80AE9B2C3846
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RDSBQfxG3AGHCHy8hlVumkSe4ec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.mft
Manifest number: 1512
Signing time: Mon 28 Apr 2025 08:00:39 +0000
Manifest this update: Mon 28 Apr 2025 08:00:39 +0000
Manifest next update: Tue 29 Apr 2025 08:00:39 +0000
Files and hashes: 1: HUIjR9WK2Lr5ogt7lVoiyA1Q06s.roa (hash: PMZpn3mSe7dzqUCZsgF/pY1r/L52E+g3ibBHFvHVhL0=)
2: RDSBQfxG3AGHCHy8hlVumkSe4ec.crl (hash: qbBz+iuYImzJUMNSfOjZi0zLuQgpXxBbplVYrlmRX8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.mft
rsync://rpki.ripe.net/repository/DEFAULT/RDSBQfxG3AGHCHy8hlVumkSe4ec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:69:99:77:f3:0f:f6:91:d8:cd:80:ae:9b:2c:38:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44348141fc46dc0187087cbc86556e9a449ee1e7
Validity
Not Before: Apr 28 08:00:39 2025 GMT
Not After : Apr 29 08:00:39 2025 GMT
Subject: CN=b172c12a195b02c5ed6f3e7b6aeb6abf0dd3a500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e3:ac:7f:8c:5d:7c:15:ae:77:27:65:53:cd:
49:97:d4:ad:91:70:f8:cd:ad:88:47:2b:90:67:c3:
d5:7b:fd:86:e7:2e:74:84:46:7e:bb:38:71:e9:58:
7f:19:ab:a0:c1:9f:ac:5a:3a:05:e8:da:8b:8d:47:
33:69:33:59:75:49:4c:dd:03:00:80:32:d0:d3:7d:
c6:3b:38:00:03:3f:84:d8:0d:56:8b:e4:37:d9:8a:
62:ea:b9:78:6c:ac:3d:d8:96:ca:be:bf:7b:43:50:
5d:d4:47:7b:e7:42:37:f9:1c:28:bc:cb:19:7d:9a:
cd:f2:5a:e5:cc:b0:f6:b2:c0:49:e7:aa:86:a4:70:
0b:c4:18:75:96:c7:49:99:0b:bc:51:0e:bc:fe:00:
68:35:24:fa:e6:ca:cb:bc:47:b5:21:e7:cd:7e:d0:
98:8c:9e:cf:55:84:fe:f2:6a:6a:5d:21:c6:1f:73:
d4:36:f1:a1:ba:fa:3b:43:71:37:59:62:7f:a8:af:
fd:4a:62:8e:18:a4:33:5e:6c:a8:34:2c:33:35:f4:
db:81:ef:d6:cc:bc:c1:0c:4c:0d:1d:cb:ba:3f:be:
f7:c7:71:97:de:03:97:86:00:b7:88:d5:24:65:09:
e7:cc:d3:d7:a1:e0:93:c5:9d:7e:8a:91:89:2c:08:
11:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:72:C1:2A:19:5B:02:C5:ED:6F:3E:7B:6A:EB:6A:BF:0D:D3:A5:00
X509v3 Authority Key Identifier:
keyid:44:34:81:41:FC:46:DC:01:87:08:7C:BC:86:55:6E:9A:44:9E:E1:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RDSBQfxG3AGHCHy8hlVumkSe4ec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:a5:e7:5a:d0:8e:5b:3a:03:6f:16:ab:c8:7a:b4:8d:a3:e4:
a1:93:ca:38:b0:5e:e0:78:c8:e8:15:8c:74:0e:25:19:a7:5d:
a4:d9:b9:4d:dd:4e:25:ae:bc:46:0f:b7:37:f9:ff:75:22:b8:
0a:d0:d3:0f:7a:78:4b:9e:21:27:fd:f9:f1:2c:bd:91:5f:88:
e5:2b:21:74:1f:43:f4:71:a6:e7:66:48:f0:16:3a:01:54:77:
87:3b:ac:a4:b8:ec:51:7b:e4:93:7e:ab:49:f2:b1:e3:4e:3a:
d7:38:da:98:f2:87:8a:ab:e3:a9:37:e0:0d:1e:9f:61:65:ca:
38:87:c0:64:8a:c1:75:55:ab:4c:0e:1d:72:95:c4:18:b3:ed:
51:47:67:0c:2a:f8:83:a8:00:cd:88:bd:88:b3:35:be:0a:0a:
13:f9:53:68:2e:c2:48:ba:c8:10:f7:91:eb:4a:e2:5d:43:21:
ae:bb:17:0b:be:ed:a3:c9:ba:4c:0b:db:51:8d:36:ed:43:67:
94:24:14:41:83:67:a1:5c:2b:8d:86:3a:7d:f9:65:88:2d:a9:
1c:38:f1:a4:ee:98:1f:17:ec:8c:58:07:05:e4:f8:10:1d:d4:
2e:7c:2d:da:ce:ee:e1:07:45:cf:1c:67:de:fa:d7:1f:fd:3f:
aa:f4:22:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:57:32 2025 by rpki-client