Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.mft
File: rjrbWMEIuLsT5DwV7qPHiZtko6o.mft (raw, json)
Hash identifier: g4R9RYkSK8bHeA9agypkKWZPv2T5gnBuApKANWjZRIk=
Subject key identifier: 59:35:94:9B:5D:42:F7:43:41:0C:FE:1D:DC:F0:FA:AA:9C:E1:2E:4D
Authority key identifier: AE:3A:DB:58:C1:08:B8:BB:13:E4:3C:15:EE:A3:C7:89:9B:64:A3:AA
Certificate issuer: /CN=ae3adb58c108b8bb13e43c15eea3c7899b64a3aa
Certificate serial: 019676E84E9FF609C9A70F885635CD745DA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rjrbWMEIuLsT5DwV7qPHiZtko6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.mft
Manifest number: 0A01
Signing time: Sun 27 Apr 2025 11:00:57 +0000
Manifest this update: Sun 27 Apr 2025 11:00:57 +0000
Manifest next update: Mon 28 Apr 2025 11:00:57 +0000
Files and hashes: 1: RW_H_ESDaZiZhgwMqK0qV1tKkxQ.roa (hash: 8rlM5Gf4dfcpQSnuob8gpQKJA3IonaJYfplAZEgt4uw=)
2: rjrbWMEIuLsT5DwV7qPHiZtko6o.crl (hash: AfnwkwPArT2NtAc1BrNxUdgt0IqIvfR36a3atL8hcZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/rjrbWMEIuLsT5DwV7qPHiZtko6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 11:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:e8:4e:9f:f6:09:c9:a7:0f:88:56:35:cd:74:5d:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae3adb58c108b8bb13e43c15eea3c7899b64a3aa
Validity
Not Before: Apr 27 11:00:57 2025 GMT
Not After : Apr 28 11:00:57 2025 GMT
Subject: CN=5935949b5d42f743410cfe1ddcf0faaa9ce12e4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f7:f7:72:48:1c:45:c1:b3:f5:ad:59:36:1e:
36:5c:fe:7c:49:1f:51:5b:16:2b:3e:53:e0:74:14:
b2:0f:19:c4:89:bf:26:57:54:fd:54:3d:dc:9d:97:
fa:cb:65:b1:7f:15:f6:cc:b0:36:f4:fa:59:f3:68:
b5:b2:e4:10:e4:bc:00:64:2d:09:03:d3:7f:b2:79:
75:88:67:6a:84:5a:50:e9:e0:d9:5a:46:26:9e:35:
ae:ae:99:68:0c:1f:fe:6e:76:26:ae:b7:6a:8e:2e:
49:47:a3:b7:35:27:31:5f:b7:c0:66:b5:b6:33:d1:
0a:58:c8:7f:8e:0f:c0:44:e9:2f:8d:1a:7d:55:5b:
72:54:a2:36:c0:8f:7b:5a:fc:46:85:e2:bd:97:e0:
04:4e:60:41:5d:dc:6b:3c:da:74:7b:85:6a:4d:b0:
7a:e6:48:70:f2:a4:44:cc:44:14:4c:6c:af:1b:59:
34:c0:56:3a:f8:d6:a9:57:41:76:5e:76:ac:50:fe:
8c:97:7d:3a:53:17:5b:73:f1:37:9e:a5:5b:66:1d:
4e:e5:df:35:cd:09:51:06:b2:b8:e2:4d:49:84:f5:
ea:16:59:50:a3:e7:f9:ca:4a:3f:52:ea:0c:b4:da:
b1:79:73:05:cd:eb:0c:f9:59:46:6f:ca:48:d5:82:
86:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:35:94:9B:5D:42:F7:43:41:0C:FE:1D:DC:F0:FA:AA:9C:E1:2E:4D
X509v3 Authority Key Identifier:
keyid:AE:3A:DB:58:C1:08:B8:BB:13:E4:3C:15:EE:A3:C7:89:9B:64:A3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rjrbWMEIuLsT5DwV7qPHiZtko6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:15:ab:b0:f3:99:36:b1:6d:98:b7:28:9a:82:82:96:39:7c:
fc:45:ab:d4:fd:eb:2c:9e:bc:0f:30:6a:b2:e5:42:2d:56:e8:
97:60:36:ef:62:2c:76:a5:ef:00:6c:d9:09:a1:b4:fe:75:ca:
8f:6e:29:5d:70:3b:c3:0b:64:14:b7:8c:a6:5a:5b:25:3f:75:
42:0b:42:2b:20:5f:4a:f1:fa:0d:e2:0e:d0:f6:53:98:69:78:
54:92:bc:d9:9c:80:03:56:56:44:81:39:5b:c1:ee:20:42:a0:
c1:eb:19:d7:65:be:bd:8b:f5:7c:e1:46:2c:e9:7f:ad:fb:29:
2b:31:cf:9f:aa:54:c0:d7:05:32:86:5e:d5:41:6b:90:5c:fd:
a6:cd:1c:3c:40:d3:d1:21:ce:98:b3:40:02:1f:02:21:67:1c:
64:8d:8b:c7:f7:99:fb:94:85:c6:0a:b1:00:d1:7d:87:05:a5:
19:5b:2f:00:aa:0a:19:58:c2:4d:47:51:04:91:8d:c6:a4:d5:
ea:fc:b6:a5:3b:a8:5b:80:a9:23:fd:be:06:bd:65:b0:14:0f:
ba:86:eb:64:4d:09:7e:0a:e0:03:6b:00:ba:34:d5:34:07:6b:
e4:f5:c5:87:ec:fd:ff:30:f6:e5:2f:30:c1:eb:fb:2f:06:4d:
bb:4d:d5:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:50:37 2025 by rpki-client