Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.mft
File: RN71p33MmqyZw04tcZuLoNBOA9E.mft (raw, json)
Hash identifier: PcWwAUAIu5vPbYcSB5362oEcMYi0hoMHFfs354bYwmM=
Subject key identifier: 89:30:88:BE:B9:0D:96:AA:1C:1A:FD:1C:40:0F:4C:47:24:BF:3B:9A
Authority key identifier: 44:DE:F5:A7:7D:CC:9A:AC:99:C3:4E:2D:71:9B:8B:A0:D0:4E:03:D1
Certificate issuer: /CN=44def5a77dcc9aac99c34e2d719b8ba0d04e03d1
Certificate serial: 0196846C76DD4ADE65E84BF7EA03619DE870
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RN71p33MmqyZw04tcZuLoNBOA9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.mft
Manifest number: 1517
Signing time: Wed 30 Apr 2025 02:00:22 +0000
Manifest this update: Wed 30 Apr 2025 02:00:22 +0000
Manifest next update: Thu 01 May 2025 02:00:22 +0000
Files and hashes: 1: RN71p33MmqyZw04tcZuLoNBOA9E.crl (hash: NxjyBJBoWRtlBRY/ADR5/3PoDdv4E5dQGWGLpl69tB4=)
2: ktIncahrfLa4AKcR1V4yol-a_BI.roa (hash: Mx4NBM7kiKGaNo0WSweTZJBXr6mw6+aPoRI2jYSEHVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/RN71p33MmqyZw04tcZuLoNBOA9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:6c:76:dd:4a:de:65:e8:4b:f7:ea:03:61:9d:e8:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44def5a77dcc9aac99c34e2d719b8ba0d04e03d1
Validity
Not Before: Apr 30 02:00:22 2025 GMT
Not After : May 1 02:00:22 2025 GMT
Subject: CN=893088beb90d96aa1c1afd1c400f4c4724bf3b9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:30:c6:93:c5:10:1e:e8:e8:c2:d0:64:cb:cc:
ff:23:b1:47:64:0e:7a:4e:9b:25:b7:4f:6d:1f:43:
4b:ba:07:5c:a2:a0:1c:1a:b0:07:51:d0:6a:b7:3b:
c9:7c:57:77:a4:45:70:cd:5a:b0:d4:ad:7c:1c:f3:
24:72:c3:15:a6:c0:c2:b5:89:4d:6f:0f:e2:ea:52:
22:e8:13:d8:21:55:54:7c:cd:9d:b2:93:70:e9:0b:
4d:1d:33:30:65:7e:67:15:67:03:63:21:bf:de:1d:
2f:a1:29:b8:3f:f1:d2:9f:68:e8:df:30:b6:93:f5:
8f:7f:90:d9:e1:ee:de:54:48:fd:b2:35:2f:7d:14:
c6:da:8e:b8:69:ab:b1:35:d0:b8:79:a4:d9:ef:43:
9f:aa:6f:9d:af:58:a2:d8:a8:6f:20:e6:fb:df:dd:
b2:49:4e:46:79:cb:49:91:b4:20:7f:5a:aa:79:1a:
23:ee:bc:b8:4e:7d:2c:c3:22:43:bc:0c:6c:3d:d4:
70:d0:e1:4d:80:bb:76:40:ba:bf:28:a0:64:22:d8:
b6:a5:b0:8f:b3:38:44:21:aa:e2:ef:e3:ee:b4:f5:
8f:f3:25:7c:ea:06:28:c0:ac:b2:eb:70:a4:4b:c8:
0b:3e:b4:66:ce:ab:69:11:28:2d:1b:fb:e1:dd:9c:
6a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:30:88:BE:B9:0D:96:AA:1C:1A:FD:1C:40:0F:4C:47:24:BF:3B:9A
X509v3 Authority Key Identifier:
keyid:44:DE:F5:A7:7D:CC:9A:AC:99:C3:4E:2D:71:9B:8B:A0:D0:4E:03:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RN71p33MmqyZw04tcZuLoNBOA9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:a0:84:b0:ce:b6:5d:b3:be:4d:48:61:d2:74:a8:a7:6d:32:
92:19:46:ab:85:d1:a7:48:99:c5:a5:0d:76:87:bd:3c:5e:57:
c8:d8:85:3d:7b:9b:fb:df:c0:c1:fb:1b:de:07:16:64:d7:ea:
25:d6:a7:4e:59:8b:81:64:ca:fb:d1:99:eb:77:c5:08:3c:7b:
ec:84:91:57:cb:70:f4:da:16:e1:99:27:93:32:db:0f:d3:03:
94:39:9f:87:35:f4:a5:28:52:5f:4a:57:68:f4:dc:ad:9d:4f:
2d:d2:cb:8e:8b:cb:b3:a6:1b:16:ae:13:45:b0:dc:d7:15:05:
b3:e1:7f:b1:3a:01:dd:ea:51:b0:a7:4d:b1:b6:2f:dc:37:3d:
64:eb:1b:60:f9:e8:4b:b5:bf:ca:06:c0:7b:5f:36:79:c5:cc:
b7:96:46:2d:c6:38:fc:90:5d:3c:02:78:96:b8:a8:ac:ea:74:
b7:8a:6c:5a:4f:f6:66:e6:36:db:3b:fa:85:f4:e4:e8:0f:37:
e0:df:f1:13:be:46:dc:45:b1:d2:f4:8a:86:6f:f2:c8:ea:f0:
04:53:6a:8b:39:5a:ab:d9:10:5f:af:5b:4c:14:28:1e:6e:8d:
40:b7:d9:c5:52:ab:85:70:5f:3d:28:09:06:6f:43:d1:4c:19:
a7:65:e6:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:44:49 2025 by rpki-client