Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.mft
File: RMDyoqVgB-TEXMxx59oJKGEwWyA.mft (raw, json)
Hash identifier: uYhGmTVP0nbvjzlKXmMnqq/WSa5+p+Y4XKjHf75BrJs=
Subject key identifier: 9D:A4:CA:E1:68:30:87:D0:6F:47:70:44:08:0A:54:33:5B:39:41:C8
Authority key identifier: 44:C0:F2:A2:A5:60:07:E4:C4:5C:CC:71:E7:DA:09:28:61:30:5B:20
Certificate issuer: /CN=44c0f2a2a56007e4c45ccc71e7da092861305b20
Certificate serial: 019676E7F6D2306205820EA0422C4D9318E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RMDyoqVgB-TEXMxx59oJKGEwWyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.mft
Manifest number: 1510
Signing time: Sun 27 Apr 2025 11:00:35 +0000
Manifest this update: Sun 27 Apr 2025 11:00:35 +0000
Manifest next update: Mon 28 Apr 2025 11:00:35 +0000
Files and hashes: 1: JKZSaEq-32SHY-bAWiWwoCf7Nj0.roa (hash: yG2sh1v4s77ObqidFtWCzFl8F2FhijHzBj04Ij6JtCg=)
2: RMDyoqVgB-TEXMxx59oJKGEwWyA.crl (hash: mpsX8HF4EtzNin7AhnDBPzLXf4zFAcFugKlE9z2dX8w=)
3: j-Ifej8p6sYfHH1KeQ_QH-keweY.roa (hash: iVB6o7qwOuA1Lj9sG4cTIYUNVhckFRweng10RlAwHI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RMDyoqVgB-TEXMxx59oJKGEwWyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:e7:f6:d2:30:62:05:82:0e:a0:42:2c:4d:93:18:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44c0f2a2a56007e4c45ccc71e7da092861305b20
Validity
Not Before: Apr 27 11:00:35 2025 GMT
Not After : Apr 28 11:00:35 2025 GMT
Subject: CN=9da4cae1683087d06f477044080a54335b3941c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1b:8d:7d:80:c3:bb:b4:e1:7d:f5:b2:5f:0b:
84:6c:0c:3e:00:d7:20:03:9a:cb:5e:31:e6:6b:87:
26:e7:ed:7d:bc:d1:8b:45:9e:d8:06:61:e8:34:24:
68:ce:b1:47:25:a2:10:f0:b4:06:c6:6a:fd:a4:75:
9a:f2:6e:3a:e4:47:56:e5:bb:9a:de:35:86:94:93:
ce:b6:69:4b:45:51:70:b3:7e:a0:1d:98:71:18:11:
07:8b:4c:c1:24:1f:30:9d:b7:a3:d3:eb:1c:b9:e8:
09:22:52:29:e9:7f:15:35:f7:db:b4:dd:d6:13:b2:
4e:2a:2d:8f:54:e7:f6:08:6f:c0:a4:75:8a:4e:33:
1e:10:6a:d8:27:cb:2e:bd:00:ab:e2:73:09:a2:e8:
03:f8:9c:78:4c:6e:0a:4b:c7:b2:20:06:74:88:2d:
ab:9c:25:f2:69:38:80:02:07:ed:33:88:fa:29:80:
38:0c:0a:88:22:d9:f2:6b:6a:33:8b:c2:16:6f:51:
38:ab:4c:d1:74:a2:8b:fe:5b:15:a5:b2:79:ca:12:
72:bd:34:1f:71:fc:92:88:09:29:f3:b8:08:a0:9a:
65:c5:52:72:0f:a9:0b:a7:3f:16:ba:8e:96:55:6e:
09:f9:08:a7:d8:21:3d:b7:ad:3e:bd:d3:17:71:f2:
b4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:A4:CA:E1:68:30:87:D0:6F:47:70:44:08:0A:54:33:5B:39:41:C8
X509v3 Authority Key Identifier:
keyid:44:C0:F2:A2:A5:60:07:E4:C4:5C:CC:71:E7:DA:09:28:61:30:5B:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMDyoqVgB-TEXMxx59oJKGEwWyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:39:c8:c7:3d:54:c5:46:91:ac:9d:bb:8a:e2:79:c9:2f:ad:
85:d1:ba:10:d8:12:7d:b0:6d:fb:09:07:d1:df:88:4c:4a:b2:
3b:59:fb:1d:ea:ac:0d:08:fe:52:b7:b2:4b:d0:e7:62:14:25:
b6:24:95:44:f6:57:a8:8a:33:7f:d6:0c:7f:e9:0e:1e:17:0d:
03:4a:77:9c:37:5e:f7:9f:f9:a1:a8:9d:5d:8f:24:95:0a:d2:
0f:27:7c:af:60:05:f8:31:8d:b4:08:7c:24:d4:14:a9:6a:6f:
41:6f:6e:8c:0b:4a:23:69:9d:cc:a3:b5:d2:a6:83:50:a5:21:
28:21:66:af:d5:5d:4a:fa:72:47:e0:77:4b:50:13:f0:a7:f1:
95:33:33:08:86:6a:b0:2b:b1:0b:0b:15:1f:3f:6c:43:dd:2d:
6a:e0:80:42:bf:83:34:ef:51:a4:03:1e:68:0c:05:a4:d5:27:
45:74:8a:b1:d0:aa:3b:ae:c5:46:d1:a0:67:45:26:6a:e9:d7:
7c:3e:69:c4:c0:1d:ce:d3:0e:db:01:2f:43:00:69:1c:ef:cf:
c7:89:43:70:85:23:c9:f9:dc:62:ef:01:1f:f2:cb:6f:13:28:
bd:90:40:5d:01:04:50:9c:4e:7c:c7:12:c9:ea:32:30:da:d3:
e8:b5:82:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:51:36 2025 by rpki-client