Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.mft
File: RzC917vMVv6TebEYysfh-SBSp64.mft (raw, json)
Hash identifier: E9/aT+kwMdArsVI2/8VeXNXWRiXFnO2xEasbFw+ilv0=
Subject key identifier: D5:23:32:42:BD:A2:FF:AA:A0:36:15:56:03:38:51:8E:93:4A:35:05
Authority key identifier: 47:30:BD:D7:BB:CC:56:FE:93:79:B1:18:CA:C7:E1:F9:20:52:A7:AE
Certificate issuer: /CN=4730bdd7bbcc56fe9379b118cac7e1f92052a7ae
Certificate serial: 019677FB45D643D05A1837942FF1A02C726F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzC917vMVv6TebEYysfh-SBSp64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.mft
Manifest number: 02CE
Signing time: Sun 27 Apr 2025 16:01:18 +0000
Manifest this update: Sun 27 Apr 2025 16:01:18 +0000
Manifest next update: Mon 28 Apr 2025 16:01:18 +0000
Files and hashes: 1: RzC917vMVv6TebEYysfh-SBSp64.crl (hash: MWJP9C06NQ/dbNGue7VsHugX2gZdyBCrzEy6RILsU6o=)
2: _Bq_ahlry5PbsLgSqWTDBgCzrGg.roa (hash: ALTa8b/7lEoVgTQ9zQyYwW//fRwrl5PxAgGHVIW0QVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzC917vMVv6TebEYysfh-SBSp64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fb:45:d6:43:d0:5a:18:37:94:2f:f1:a0:2c:72:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4730bdd7bbcc56fe9379b118cac7e1f92052a7ae
Validity
Not Before: Apr 27 16:01:18 2025 GMT
Not After : Apr 28 16:01:18 2025 GMT
Subject: CN=d5233242bda2ffaaa03615560338518e934a3505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4d:f7:bb:f1:88:ed:5b:65:2b:b7:58:3d:8b:
6c:17:39:1c:b5:2f:0b:ba:fe:e1:64:b0:44:60:27:
d7:48:63:b7:c2:85:a6:60:b9:ac:06:2f:56:03:31:
2a:0d:51:92:b7:c9:e4:cd:b5:b9:85:7a:ef:2b:f3:
87:d2:8f:1b:0f:60:d3:bf:ca:6d:56:80:a7:ca:41:
1b:cb:42:60:53:85:03:03:14:34:6e:7a:24:b1:4f:
c2:f7:ac:2b:c0:a5:3b:f2:e7:a2:39:e8:99:7e:4c:
23:87:09:dc:16:7f:0b:92:fe:a4:ac:ea:01:08:ff:
62:0b:c5:46:84:65:ea:15:3e:36:19:f2:ca:b4:e5:
00:37:11:82:ed:d9:43:29:69:b6:a3:4b:5b:d8:5e:
e7:f7:ef:59:32:46:89:1e:93:7b:fa:8b:f2:95:e0:
a8:39:28:66:32:5d:46:ea:19:ba:24:be:ce:ef:46:
17:bd:d8:10:f3:8e:b9:b3:2b:ea:ca:b1:c7:0f:fb:
18:22:0d:37:ff:c1:65:2c:67:3a:1f:70:d9:00:bb:
d6:b3:e5:ea:09:f9:bd:c7:6f:41:ff:f6:b4:15:8d:
6b:34:23:c0:e0:d6:08:2f:7a:db:57:0d:d1:dc:df:
a7:e4:5c:3f:17:6f:aa:5c:de:44:21:b2:78:8b:7b:
67:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:23:32:42:BD:A2:FF:AA:A0:36:15:56:03:38:51:8E:93:4A:35:05
X509v3 Authority Key Identifier:
keyid:47:30:BD:D7:BB:CC:56:FE:93:79:B1:18:CA:C7:E1:F9:20:52:A7:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzC917vMVv6TebEYysfh-SBSp64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:7b:f9:2c:16:ac:22:ae:9c:82:e8:18:0f:f4:99:6b:74:8f:
e8:a7:19:2e:ef:8e:b2:80:ec:5f:b9:0a:f0:9d:17:16:27:16:
50:94:5f:14:89:57:8d:2a:02:50:26:ec:88:50:10:9e:30:17:
79:32:bf:92:52:92:10:33:a2:4e:a3:7d:a3:09:eb:e2:5e:f2:
67:13:f2:0a:25:25:68:3a:47:ac:b7:d4:95:f9:e2:91:7e:c6:
86:b5:49:fd:b7:0e:be:32:aa:ab:ff:a5:4d:4e:a0:03:bc:ce:
33:4a:ee:f7:3d:89:c0:51:91:19:cb:da:cc:bf:2c:ab:45:cd:
b9:b1:43:14:a5:77:cb:17:b1:53:fd:4b:d4:fb:b6:98:3b:6f:
b9:f7:b8:ac:50:07:74:6c:5f:f8:d5:97:1b:a7:7d:e2:7f:a9:
5a:ed:a8:1c:84:95:cb:c8:e6:5c:5e:48:e1:d2:51:d6:83:df:
1b:d3:d3:a8:cc:cc:fc:e3:6e:c7:b7:df:1c:ae:5c:2d:c7:b7:
bd:f2:88:cc:ad:09:6e:35:70:81:84:c2:82:60:9c:6f:a2:00:
32:6b:4f:2d:f1:57:f9:34:c1:a8:87:79:12:75:c3:42:7e:b3:
3b:ac:20:93:5c:12:0a:5b:d4:f9:b4:51:ce:fa:15:f2:e6:35:
cf:e0:a0:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:59:07 2025 by rpki-client