Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/r-b4yudJLQZOAwcckUc5Lu3UW8c.mft
File: r-b4yudJLQZOAwcckUc5Lu3UW8c.mft (raw, json)
Hash identifier: gCWTxQDRK184+CCGIL9OaQYt4Z7wbh/ShSZwyEIkico=
Subject key identifier: DD:F4:C3:98:85:95:61:B9:7E:3B:DD:A4:67:E3:84:48:4F:4F:D3:27
Authority key identifier: AF:E6:F8:CA:E7:49:2D:06:4E:03:07:1C:91:47:39:2E:ED:D4:5B:C7
Certificate issuer: /CN=afe6f8cae7492d064e03071c9147392eedd45bc7
Certificate serial: 019677FA8FB9EFCE0DB647CE76F539151CE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-b4yudJLQZOAwcckUc5Lu3UW8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/r-b4yudJLQZOAwcckUc5Lu3UW8c.mft
Manifest number: 0FD1
Signing time: Sun 27 Apr 2025 16:00:31 +0000
Manifest this update: Sun 27 Apr 2025 16:00:31 +0000
Manifest next update: Mon 28 Apr 2025 16:00:31 +0000
Files and hashes: 1: H4Dt1RaXNjrSuf7dIzKd6HI74Xw.roa (hash: 1FMAIN7AWHSRrarcSi8q0q/CcQ+uq+tcfRyHiGa5Hko=)
2: kemSd2KPq5UUT0EZWa92ek2Cwpc.roa (hash: kh0wd5NltixPwrZZXBgelPgGkebz79/WC48Vz4n628s=)
3: r-b4yudJLQZOAwcckUc5Lu3UW8c.crl (hash: lk3DLbGCCGkRORC23ZpOEBTXJwnzx+9/FCAe+H4hDM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/r-b4yudJLQZOAwcckUc5Lu3UW8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/r-b4yudJLQZOAwcckUc5Lu3UW8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-b4yudJLQZOAwcckUc5Lu3UW8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fa:8f:b9:ef:ce:0d:b6:47:ce:76:f5:39:15:1c:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afe6f8cae7492d064e03071c9147392eedd45bc7
Validity
Not Before: Apr 27 16:00:31 2025 GMT
Not After : Apr 28 16:00:31 2025 GMT
Subject: CN=ddf4c398859561b97e3bdda467e384484f4fd327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:23:b5:a9:9b:36:4d:af:b5:fc:74:ba:c9:6e:
34:23:4f:05:00:64:79:d4:47:5c:84:4a:f7:ba:eb:
76:b2:c6:dd:05:db:47:ae:91:e9:0f:15:5c:24:cd:
60:0c:4e:4a:0b:32:ed:3e:73:a8:16:d9:27:e0:13:
0d:68:38:32:9d:1c:d7:55:ca:5b:6b:00:04:4f:11:
62:7e:9c:6e:e4:c4:3d:29:2e:0d:1e:e4:1b:21:6f:
52:49:67:06:e1:24:f0:0e:99:bb:88:6d:4c:08:b7:
a3:e5:40:58:1a:3b:fe:99:42:36:b0:d8:b5:68:12:
85:ab:20:5c:b0:c7:a9:89:df:17:ff:cf:86:a6:1f:
cb:f8:04:3c:0c:43:c3:f3:40:94:02:4d:ac:5e:b9:
85:f0:aa:6f:23:86:83:3b:11:88:a8:38:80:44:e8:
44:aa:59:7e:f1:d9:db:69:4d:c6:0d:13:92:43:b2:
78:58:8d:28:f6:6a:f0:77:06:db:1c:d5:2e:d3:e3:
cb:18:2b:ff:d4:47:5b:8c:a5:c5:32:d8:10:db:7a:
d5:2c:5e:ca:87:30:b1:7c:4e:1b:3d:11:59:f5:ba:
a0:70:92:09:e7:81:9e:f2:21:8a:00:6e:ca:56:5e:
ab:93:ff:f7:e8:63:3d:3d:4a:8d:06:3a:2d:2a:15:
be:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:F4:C3:98:85:95:61:B9:7E:3B:DD:A4:67:E3:84:48:4F:4F:D3:27
X509v3 Authority Key Identifier:
keyid:AF:E6:F8:CA:E7:49:2D:06:4E:03:07:1C:91:47:39:2E:ED:D4:5B:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-b4yudJLQZOAwcckUc5Lu3UW8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/r-b4yudJLQZOAwcckUc5Lu3UW8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/r-b4yudJLQZOAwcckUc5Lu3UW8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:f3:63:eb:a3:57:8d:68:ac:a0:aa:cc:3a:47:9b:6a:ce:69:
13:3f:9b:13:d3:07:69:7c:9d:3c:9c:4e:4d:0d:4d:37:45:5e:
54:e2:c6:f3:45:ae:ee:08:e0:a5:63:6b:7e:aa:c6:5a:39:62:
80:7f:6b:f7:25:9f:17:f6:f3:39:6e:ec:34:27:19:f3:3d:11:
b7:f3:7b:ab:73:59:d4:93:99:54:c0:47:1d:92:b6:2d:8b:09:
5c:81:50:44:eb:26:2c:d4:ed:fe:05:eb:de:4f:b8:16:a5:95:
c5:67:3a:cb:4f:cd:d3:72:bc:7a:a0:b6:ad:3b:c1:05:2b:ac:
c4:f9:0a:5a:7d:9d:06:d6:66:e3:83:6c:1f:56:23:55:e1:5e:
5e:1a:b2:9c:91:dd:8b:47:84:1e:54:f4:85:a8:ef:62:bc:c5:
b5:f7:54:a5:df:ee:56:ed:33:b9:be:b5:68:fd:0e:58:5b:22:
d8:fa:09:69:5e:2e:c3:f2:5b:ba:cd:1f:8e:17:28:07:42:51:
1a:85:c4:17:4a:1f:5c:6e:12:a5:cf:60:3d:19:41:1a:27:32:
2f:1a:a3:3a:89:8c:20:90:76:aa:b0:0e:05:7c:99:c8:6f:ff:
ae:d7:28:16:9f:5e:1b:c1:55:51:3d:01:42:d5:ac:6c:d5:5c:
8d:cc:ab:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:05:16 2025 by rpki-client