Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/RkXJxY1aSZm13OngcNMvSI4zH1I.mft
File: RkXJxY1aSZm13OngcNMvSI4zH1I.mft (raw, json)
Hash identifier: p+Xf5QVt2+/t63+fpOkUYQkagC0wdokEgOHxtwR+l0Q=
Subject key identifier: 26:3A:A3:8E:9F:6C:4E:13:8E:16:84:F4:D6:DC:DB:FE:77:C1:F1:73
Authority key identifier: 46:45:C9:C5:8D:5A:49:99:B5:DC:E9:E0:70:D3:2F:48:8E:33:1F:52
Certificate issuer: /CN=4645c9c58d5a4999b5dce9e070d32f488e331f52
Certificate serial: 01967CE9D71FAB26B5D336E422B2CF3F559B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RkXJxY1aSZm13OngcNMvSI4zH1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/RkXJxY1aSZm13OngcNMvSI4zH1I.mft
Manifest number: 034B
Signing time: Mon 28 Apr 2025 15:00:21 +0000
Manifest this update: Mon 28 Apr 2025 15:00:21 +0000
Manifest next update: Tue 29 Apr 2025 15:00:21 +0000
Files and hashes: 1: RkXJxY1aSZm13OngcNMvSI4zH1I.crl (hash: zynGfSqQplDyU9B26uxyCgeNREPNNtJyYokH/NBPX4I=)
2: S8w484i2So0upLimT4DivXMFWTc.roa (hash: Xwh1nJvihxD2+JIu0EcE5o1EcOXEFkB9P4xQdM683xQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/RkXJxY1aSZm13OngcNMvSI4zH1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/RkXJxY1aSZm13OngcNMvSI4zH1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/RkXJxY1aSZm13OngcNMvSI4zH1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:e9:d7:1f:ab:26:b5:d3:36:e4:22:b2:cf:3f:55:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4645c9c58d5a4999b5dce9e070d32f488e331f52
Validity
Not Before: Apr 28 15:00:21 2025 GMT
Not After : Apr 29 15:00:21 2025 GMT
Subject: CN=263aa38e9f6c4e138e1684f4d6dcdbfe77c1f173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a2:f7:c4:e9:55:02:3e:20:1c:ca:56:cf:4d:
a3:8e:0a:18:40:02:02:5c:28:f9:b9:ea:45:54:e8:
94:b4:df:ad:00:e5:6d:7b:c7:86:0b:7e:cf:13:f9:
b1:72:c8:02:4c:73:41:25:31:d2:f2:48:01:6a:bd:
77:35:fe:91:34:ee:56:46:c8:5e:d6:b9:ff:20:c5:
6d:1e:33:48:3e:43:11:fb:da:9d:16:c7:72:6d:bb:
5e:47:5b:1e:24:8e:bc:57:ee:a2:21:b4:fe:55:b4:
df:3e:54:23:b5:50:c3:ff:1b:02:fd:cb:dc:87:a6:
a1:d3:4d:f7:a5:92:3b:fb:b9:25:c4:80:21:cd:21:
35:ba:9a:52:b4:b7:c3:e2:f9:11:37:ce:dd:fd:03:
ff:8b:01:e8:6a:b9:9d:e0:7c:8c:be:8e:de:37:10:
ad:3e:05:09:c5:83:3c:ff:57:e5:30:9a:84:e2:a4:
76:48:47:b2:71:1a:dd:6d:2f:54:76:cf:bc:fa:9d:
c4:a5:ea:9b:4c:f6:59:72:df:1e:e5:06:d8:8b:8c:
60:1b:82:a4:68:93:68:29:7b:1d:19:d4:9d:69:5c:
74:17:73:fa:02:39:4b:a9:a3:bd:d0:93:97:2c:41:
2e:ef:70:6d:f0:03:13:c1:da:ec:8b:56:b1:45:58:
43:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:3A:A3:8E:9F:6C:4E:13:8E:16:84:F4:D6:DC:DB:FE:77:C1:F1:73
X509v3 Authority Key Identifier:
keyid:46:45:C9:C5:8D:5A:49:99:B5:DC:E9:E0:70:D3:2F:48:8E:33:1F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RkXJxY1aSZm13OngcNMvSI4zH1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/RkXJxY1aSZm13OngcNMvSI4zH1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/RkXJxY1aSZm13OngcNMvSI4zH1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:a4:d5:88:62:bc:68:b1:db:18:3f:55:71:49:e3:96:83:cc:
3e:78:7f:4a:49:70:8d:f2:83:51:7e:0c:c3:f5:72:ba:66:b7:
89:e0:0c:2e:8a:4a:ef:33:4c:a8:37:c0:a5:0a:ee:f3:b1:d8:
47:b0:97:56:be:c6:8b:22:5c:18:20:a2:24:45:1c:ac:f9:dc:
19:58:20:b8:1b:d1:7e:5b:ee:80:10:75:cb:43:2f:99:cd:b3:
03:6e:8e:63:6d:83:c4:11:71:f3:10:65:d7:af:ae:f2:1a:27:
63:71:23:40:c8:7e:8b:9c:ee:1f:38:43:15:da:54:c3:82:3e:
2b:c0:49:63:3f:96:a3:28:13:be:4e:64:9f:63:e4:13:bd:dc:
e4:a5:e6:0a:ef:1b:4d:72:50:fb:52:51:9a:cc:a2:60:d4:21:
fd:62:1d:5b:ce:5a:c5:65:d3:27:7c:5b:d2:36:f6:0d:57:b5:
30:69:e9:9a:24:55:5b:4b:64:9b:6a:81:7a:43:e0:9a:97:78:
90:0e:fa:f9:05:ed:a0:c9:60:86:43:b1:c5:55:53:48:a5:e3:
89:a2:2d:22:a3:4b:fe:8d:d1:47:45:57:d0:fa:6f:7c:f2:e6:
5b:9e:bb:47:05:a5:0b:4f:fb:52:15:f6:4e:0e:00:e8:dc:bd:
6b:76:c9:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:52:25 2025 by rpki-client