Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.mft
File: Rk2NgKs3p1e503SClf5mn04JOyM.mft (raw, json)
Hash identifier: VA89zcqrRbPv6GXEyxU1uKNA91pUyX127TBzTPyxO+Y=
Subject key identifier: 6D:51:58:62:EB:EB:40:94:3F:0E:DF:1E:9D:38:7A:DD:91:04:C9:FF
Authority key identifier: 46:4D:8D:80:AB:37:A7:57:B9:D3:74:82:95:FE:66:9F:4E:09:3B:23
Certificate issuer: /CN=464d8d80ab37a757b9d3748295fe669f4e093b23
Certificate serial: 01967CEA257DD7EEC1F52946367E5BB29575
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rk2NgKs3p1e503SClf5mn04JOyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.mft
Manifest number: 0F5B
Signing time: Mon 28 Apr 2025 15:00:41 +0000
Manifest this update: Mon 28 Apr 2025 15:00:41 +0000
Manifest next update: Tue 29 Apr 2025 15:00:41 +0000
Files and hashes: 1: Rk2NgKs3p1e503SClf5mn04JOyM.crl (hash: FtKrt9UPsji4yJD6VqYyRp46kj7D7RfwRnGfK4Ogpfs=)
2: xJnPr2RyvvePQVXn-sWgNe1aA9M.roa (hash: yJ4J4gghIQZp1yxWa+HqkTzf9ODjqBVN9nX0iZFZokQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rk2NgKs3p1e503SClf5mn04JOyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:ea:25:7d:d7:ee:c1:f5:29:46:36:7e:5b:b2:95:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464d8d80ab37a757b9d3748295fe669f4e093b23
Validity
Not Before: Apr 28 15:00:41 2025 GMT
Not After : Apr 29 15:00:41 2025 GMT
Subject: CN=6d515862ebeb40943f0edf1e9d387add9104c9ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:42:97:01:d4:38:a0:d0:3c:9b:5d:69:e9:bb:
2b:b3:41:7b:bd:14:d1:28:55:b4:f9:43:7a:02:20:
ed:47:1c:06:c1:6a:b8:fd:21:6a:c8:43:3c:d7:00:
d0:ed:d2:1a:9c:9f:2b:d6:9b:cd:f2:2a:f6:48:78:
b4:9f:0c:a3:c2:88:87:70:ad:af:2c:d0:8b:89:56:
71:c9:96:96:fa:aa:8c:f1:0e:42:c0:28:c0:5d:7e:
03:a0:88:6b:9f:95:08:5a:69:9b:06:63:f4:15:d9:
d3:cc:6b:49:00:ea:70:8a:2b:8b:d4:d6:fb:c7:d4:
5d:c2:72:09:c4:b1:97:c3:fa:18:5e:42:2e:d9:bf:
49:08:56:dd:b7:25:94:b0:53:65:d1:54:c2:6f:53:
c1:f9:10:7d:e2:c6:7d:a5:d4:97:05:3c:e9:3a:a3:
33:0b:09:9f:c1:c6:5a:89:99:7a:ba:72:6c:32:18:
67:e6:9b:35:5b:34:90:8a:01:dd:73:27:89:d7:96:
18:b2:91:92:d0:8a:b4:81:92:bd:b1:6c:b3:93:d1:
5b:62:38:77:bc:0f:90:c9:a9:ac:40:f5:d9:b7:6c:
2c:dc:ae:91:52:b5:63:6b:30:ae:d5:1f:ee:45:22:
1f:9d:98:63:63:09:a1:53:45:c0:7d:5d:f5:05:0e:
bf:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:51:58:62:EB:EB:40:94:3F:0E:DF:1E:9D:38:7A:DD:91:04:C9:FF
X509v3 Authority Key Identifier:
keyid:46:4D:8D:80:AB:37:A7:57:B9:D3:74:82:95:FE:66:9F:4E:09:3B:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rk2NgKs3p1e503SClf5mn04JOyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:d4:06:26:38:10:bd:31:dd:50:ef:7f:27:9d:0c:ec:63:59:
bd:19:2b:b7:8d:13:ed:91:bf:2c:6e:aa:2d:44:14:ea:d7:f7:
5d:9c:1b:b1:bc:6b:5f:6d:1e:f6:91:17:96:d7:4a:43:28:8b:
14:76:6c:4f:05:99:96:f2:26:08:93:8c:6e:e6:f4:ee:fb:a6:
39:7b:d3:08:4a:3b:bb:98:ea:ef:5a:01:6e:30:cd:18:3c:53:
b5:2a:97:54:6f:04:02:b3:40:9c:97:27:ca:e3:ce:6f:73:a0:
c9:23:76:f0:fa:63:fc:93:05:6c:3d:f5:22:75:bd:3c:d9:d7:
20:2e:44:e2:8b:42:da:39:7e:1b:d2:45:1c:75:18:c2:80:5f:
f9:00:cf:89:da:3e:1d:11:4c:5c:7d:fe:8e:b8:2a:bf:da:ad:
73:01:08:11:2c:61:f2:5e:3a:2a:c2:4f:27:34:cc:60:fd:69:
bf:78:48:51:13:f7:21:76:6e:a2:1b:ac:5f:cc:79:68:b4:eb:
97:db:47:2a:82:87:8f:62:ac:72:f4:6e:ec:72:97:41:85:02:
7e:d6:07:af:3e:c6:98:f3:6d:ba:ef:5c:b6:b7:78:84:c5:5e:
d6:ba:e1:d3:4f:86:f3:db:07:4f:a3:b9:f0:ea:2c:72:ad:3e:
c1:ac:59:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:02:42 2025 by rpki-client