Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/373414-9ce4-46f5-940e-49c24292e9bd/1/RlDGwCqb3k4XGH8FsOypUEg7-S0.mft
File: RlDGwCqb3k4XGH8FsOypUEg7-S0.mft (raw, json)
Hash identifier: 12fE7lcq9t6t+/md04w1SxPiT5eNdO3ZmS1oXV3cqQE=
Subject key identifier: D8:E0:8E:B1:00:E4:AA:5E:3B:E7:6C:A1:08:AF:8C:E7:15:CB:5E:14
Authority key identifier: 46:50:C6:C0:2A:9B:DE:4E:17:18:7F:05:B0:EC:A9:50:48:3B:F9:2D
Certificate issuer: /CN=4650c6c02a9bde4e17187f05b0eca950483bf92d
Certificate serial: 01967F0F7F175DF4AA711A986F1596B671EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RlDGwCqb3k4XGH8FsOypUEg7-S0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/373414-9ce4-46f5-940e-49c24292e9bd/1/RlDGwCqb3k4XGH8FsOypUEg7-S0.mft
Manifest number: 1514
Signing time: Tue 29 Apr 2025 01:00:44 +0000
Manifest this update: Tue 29 Apr 2025 01:00:44 +0000
Manifest next update: Wed 30 Apr 2025 01:00:44 +0000
Files and hashes: 1: 3NLIuHMmWgQs4wJxVy9Hy-aW-pg.roa (hash: E1YEQO+V+WEVpKPvVd6pcBugEFAnXKdDCtGzwwDY3UY=)
2: RlDGwCqb3k4XGH8FsOypUEg7-S0.crl (hash: dNR//t0h3aRjZ0OGWQnqZJGFtyTVVyggktjQUc7Yj+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/373414-9ce4-46f5-940e-49c24292e9bd/1/RlDGwCqb3k4XGH8FsOypUEg7-S0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/373414-9ce4-46f5-940e-49c24292e9bd/1/RlDGwCqb3k4XGH8FsOypUEg7-S0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RlDGwCqb3k4XGH8FsOypUEg7-S0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:0f:7f:17:5d:f4:aa:71:1a:98:6f:15:96:b6:71:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4650c6c02a9bde4e17187f05b0eca950483bf92d
Validity
Not Before: Apr 29 01:00:44 2025 GMT
Not After : Apr 30 01:00:44 2025 GMT
Subject: CN=d8e08eb100e4aa5e3be76ca108af8ce715cb5e14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:74:cc:ca:f0:e2:53:fb:af:06:25:dc:f7:5c:
8c:38:f1:d9:55:8b:9c:02:47:02:52:50:62:96:2b:
46:d5:04:ae:01:f5:ec:e3:f5:64:5a:06:d6:5f:b1:
a9:0e:de:68:40:cc:ef:90:67:16:b2:63:11:6f:c6:
04:29:c9:f4:a0:d7:42:de:fe:b7:2f:e9:8e:c4:96:
de:78:55:9b:92:bc:3d:db:69:d5:0d:a3:da:bd:39:
73:2a:b8:01:c1:65:b9:d3:69:6c:4a:bf:9e:b8:7d:
e6:3f:0f:ac:bc:da:b6:1e:78:e1:ed:2e:34:d1:15:
e7:28:36:40:f0:28:6f:7e:48:e9:2d:d2:26:0d:91:
79:d3:ee:fc:24:be:14:97:a2:2a:03:49:7c:7b:dc:
9a:2c:be:3e:bd:65:ea:d0:62:de:b4:cb:d9:66:af:
6b:e4:32:4b:77:3f:a3:5a:db:92:e9:83:cc:c3:94:
39:15:f4:3f:57:22:eb:25:b1:38:17:13:3a:fc:5a:
3b:e1:cb:22:cd:3d:43:1a:52:0c:6d:05:97:74:4d:
72:aa:75:dd:01:23:f4:77:32:f0:2b:37:af:3b:95:
1f:02:1d:4f:af:47:04:9c:e8:6c:76:22:cf:ab:ec:
f6:f1:bf:d0:04:e9:c5:06:46:f1:bd:45:45:34:c9:
ce:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:E0:8E:B1:00:E4:AA:5E:3B:E7:6C:A1:08:AF:8C:E7:15:CB:5E:14
X509v3 Authority Key Identifier:
keyid:46:50:C6:C0:2A:9B:DE:4E:17:18:7F:05:B0:EC:A9:50:48:3B:F9:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RlDGwCqb3k4XGH8FsOypUEg7-S0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/373414-9ce4-46f5-940e-49c24292e9bd/1/RlDGwCqb3k4XGH8FsOypUEg7-S0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/373414-9ce4-46f5-940e-49c24292e9bd/1/RlDGwCqb3k4XGH8FsOypUEg7-S0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:24:1e:7c:4a:e3:22:3c:4c:4f:ef:6d:9f:77:64:8f:3f:da:
c8:54:43:3f:2c:21:20:0d:f2:4a:63:1c:dc:4c:bf:bd:8b:7b:
aa:4f:97:63:b7:32:fc:10:cc:cc:86:25:2c:f1:e5:e5:3f:5d:
93:23:ea:00:1b:e7:d5:80:36:8e:3e:cb:b8:d9:2d:79:3a:29:
73:51:86:3f:5d:cb:91:74:b5:72:e6:ea:ad:1b:8a:c2:32:87:
46:4c:d5:d0:93:4e:f5:9b:14:d8:73:4c:a5:c9:d0:0c:02:20:
f4:d2:60:cd:3b:05:f4:74:0f:ee:0f:62:04:17:95:50:ad:40:
a1:d0:7b:3b:bd:9a:62:9c:1d:68:3a:b7:08:02:b9:f8:66:fe:
87:0d:91:42:ef:7e:8e:c8:53:ae:dc:88:70:61:2e:1d:7a:77:
0b:2b:e7:7d:75:62:d1:c0:d4:2d:4f:90:fb:6f:7f:15:9e:12:
9d:15:fc:e5:02:f4:b7:a3:f1:4a:b5:a9:99:1f:21:ca:d4:c8:
92:0d:ee:03:7e:0f:e0:3f:af:7a:23:f5:d4:f0:6d:24:9b:30:
f2:be:d9:ef:21:8a:2a:bd:da:57:83:e2:0b:31:bb:5b:9a:e9:
7d:75:d9:c5:4a:cb:32:29:6e:6e:48:97:19:0e:16:8c:c5:ea:
1f:ff:14:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:24:58 2025 by rpki-client