Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.mft
File: 45VXJQVD5Edq-IxGEtSolTExO1c.mft (raw, json)
Hash identifier: PZAsdjrrkLCZ1h16GW8MRP8ABNnkzpk1y2IVQtVtm74=
Subject key identifier: 89:DB:96:65:4A:9F:9F:23:AE:47:1C:6D:2A:0E:D1:93:30:E6:95:A5
Authority key identifier: E3:95:57:25:05:43:E4:47:6A:F8:8C:46:12:D4:A8:95:31:31:3B:57
Certificate issuer: /CN=e39557250543e4476af88c4612d4a89531313b57
Certificate serial: 019677FADCD768AFE561EC5516D0FA329A06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/45VXJQVD5Edq-IxGEtSolTExO1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.mft
Manifest number: B1
Signing time: Sun 27 Apr 2025 16:00:51 +0000
Manifest this update: Sun 27 Apr 2025 16:00:51 +0000
Manifest next update: Mon 28 Apr 2025 16:00:51 +0000
Files and hashes: 1: 45VXJQVD5Edq-IxGEtSolTExO1c.crl (hash: R30ggtVhV59EkkzFUiBXrITNuPZCP2qsINfCrnzJGHM=)
2: vt4FgfPRrWl7Z_yLjoZZHEYX9X8.roa (hash: YsuZLkluKAbvOnVqbYvnKkP5bLLApSYx0tCzxSCaii4=)
3: zgHXXKhV6x08Iidi9kP_MDBdZ8U.roa (hash: taGLV+d4sUR0Mcx4A09Hc66ht4Rh+KLaRG3MKoCgLM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/45VXJQVD5Edq-IxGEtSolTExO1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fa:dc:d7:68:af:e5:61:ec:55:16:d0:fa:32:9a:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e39557250543e4476af88c4612d4a89531313b57
Validity
Not Before: Apr 27 16:00:51 2025 GMT
Not After : Apr 28 16:00:51 2025 GMT
Subject: CN=89db96654a9f9f23ae471c6d2a0ed19330e695a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4e:98:2d:75:9c:10:04:08:d5:88:c4:da:c3:
00:87:b4:c0:53:83:ad:a3:5f:af:29:ef:e8:6d:8b:
da:9c:34:d7:79:0e:5d:f8:dc:36:c3:b7:08:8d:70:
ad:c3:c6:47:9b:94:61:f7:43:49:0c:43:75:d7:46:
c5:fe:7c:5c:94:59:32:72:5f:1f:36:92:00:f5:d7:
e0:c4:7e:a6:b3:15:38:f9:d5:23:4f:7f:52:b5:07:
a2:b5:1e:fb:e1:7b:26:90:bd:99:74:55:cf:58:1e:
4d:74:38:27:d4:08:60:6a:72:b0:75:c4:9a:ec:36:
73:b8:a3:69:e1:83:77:0c:fb:5b:7e:6d:83:3a:b9:
05:b1:bf:1b:7d:3d:1b:38:62:dc:74:6d:50:e1:f7:
ed:99:01:ad:86:2f:5f:b1:e4:77:39:f6:0d:b3:f3:
2f:3b:61:68:f3:c8:08:7a:bc:33:f5:bf:76:0f:05:
78:74:06:6b:e0:3e:66:e9:e7:55:29:ad:13:ea:bc:
97:a7:2c:fe:5e:bb:94:4d:6f:b3:aa:af:89:fc:9c:
34:20:15:94:39:57:05:90:7c:a4:a7:fd:a6:8f:c4:
4f:67:49:5c:30:e8:0c:62:29:87:38:a2:aa:2b:a9:
d9:78:bc:e4:cc:2f:7e:7c:06:da:84:d5:d9:de:9b:
65:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:DB:96:65:4A:9F:9F:23:AE:47:1C:6D:2A:0E:D1:93:30:E6:95:A5
X509v3 Authority Key Identifier:
keyid:E3:95:57:25:05:43:E4:47:6A:F8:8C:46:12:D4:A8:95:31:31:3B:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/45VXJQVD5Edq-IxGEtSolTExO1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:c7:0e:da:69:c5:c6:6d:07:43:e9:ea:0d:3d:73:a3:9b:e5:
99:44:c2:37:22:69:2a:6e:20:ec:56:62:a0:0e:ce:eb:c6:74:
46:c5:0c:d0:97:92:2e:5c:8c:1f:95:c6:19:bd:00:8c:3f:d0:
81:93:8f:72:3c:7a:6f:92:db:7a:43:45:3e:8f:32:f4:5b:c7:
61:07:85:86:b3:af:0a:78:11:1c:cf:f1:d9:e3:6b:4e:57:a2:
62:c0:53:3c:d3:9c:f8:b2:0e:d4:5c:1b:7b:5f:12:00:08:a9:
92:de:ca:96:df:f2:95:ae:5e:ef:9d:ec:ed:0c:a7:6a:cf:3f:
4d:87:56:6d:b3:e3:81:24:fc:09:61:3d:4f:f5:54:68:34:89:
ac:30:1c:7b:57:5b:7a:e7:fe:ab:7b:77:cf:11:48:db:ec:2f:
82:78:e4:1c:4b:c4:0e:18:a9:8f:db:3d:1f:cc:ed:7f:f5:f2:
af:8d:73:f8:02:d6:45:a5:a5:dd:74:31:88:df:6b:93:ba:68:
04:34:02:f7:b9:d6:4c:6a:67:04:ee:45:29:4a:96:54:09:2b:
ee:51:7b:0d:ac:e7:59:5c:f9:c5:3a:11:2a:58:85:f6:b9:6c:
44:31:7e:40:27:6a:91:df:d1:0d:35:5d:2b:6f:a6:29:c0:c8:
45:36:24:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:17:25 2025 by rpki-client