Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft
File: Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft (raw, json)
Hash identifier: pxUlOWAaJa3aI86MAXqK/0oa2EX56YonboN7ifLpfEY=
Subject key identifier: 90:55:90:4D:CA:95:07:7E:95:0C:47:2C:27:58:12:06:6F:35:1A:A7
Authority key identifier: 46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F
Certificate issuer: /CN=464dcfa96399716692d245a804887c09da451f8f
Certificate serial: 019678314B5C9048A49CE2870A7312F5DA02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft
Manifest number: 13A2
Signing time: Sun 27 Apr 2025 17:00:18 +0000
Manifest this update: Sun 27 Apr 2025 17:00:18 +0000
Manifest next update: Mon 28 Apr 2025 17:00:18 +0000
Files and hashes: 1: Cg1rIwAa6O9b5pHj9iMwHAZ7fSE.roa (hash: 4N+U7+PRWNjJVqJ2KygRwPrjK1Ien5sO5KXTSIsM0Ro=)
2: Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl (hash: L5oo1sW3SEh128EVB1UbHXuFSYm3AaTywU6GM02C/bs=)
3: jEJLoTRCi4k3NEVL7X3pLoKEmFE.roa (hash: Lc1enY7HbrV71Kk7B0ntI6Fug2DvBrGWJwGE9EwyfTM=)
4: mbp15f0zxyh0dCrGSwd4xsonIIo.roa (hash: sfiOy/EdM6txH5f3xqJYHSVySCyvLRH3tGusFyVii6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:31:4b:5c:90:48:a4:9c:e2:87:0a:73:12:f5:da:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464dcfa96399716692d245a804887c09da451f8f
Validity
Not Before: Apr 27 17:00:18 2025 GMT
Not After : Apr 28 17:00:18 2025 GMT
Subject: CN=9055904dca95077e950c472c275812066f351aa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:71:bc:51:dc:c2:67:14:4f:de:79:d7:dc:6d:
f6:98:f2:37:f0:de:8a:67:6f:87:ed:f9:24:37:53:
05:2f:1c:04:13:76:8d:80:ee:4a:7c:68:7b:ae:e1:
ad:0c:00:3d:7c:6b:51:83:32:08:6f:61:15:f1:1b:
26:0d:cc:7b:8d:7e:59:88:1e:b5:7b:56:46:c5:3b:
a2:82:2c:a6:f9:7a:af:3c:41:42:b0:f0:0d:92:20:
ca:0e:90:ff:73:3d:20:2c:eb:3b:b1:53:ad:eb:9a:
2e:a6:97:d5:73:2e:9a:13:d3:4d:c7:4e:41:da:a3:
42:25:e0:97:b6:65:05:e5:cf:8c:f4:89:4d:29:f4:
3e:85:61:6d:7a:68:15:eb:e5:2a:34:41:ab:7a:01:
15:4b:93:fa:7d:cd:7f:3e:12:4e:27:da:bd:a1:f2:
17:55:52:74:4b:8c:2f:c2:74:a5:c9:68:aa:46:92:
5a:bd:59:0b:7c:71:27:80:64:cf:da:24:ed:b6:5c:
f8:3f:64:81:43:43:d0:c5:34:d3:d5:02:c9:8f:2d:
4f:76:a2:bb:f7:39:de:c2:f8:b8:49:7b:7f:4f:32:
00:a4:0b:a6:d1:12:ee:7d:0f:f3:72:82:b1:3c:eb:
b9:e0:4e:96:66:7a:d7:78:69:49:80:72:89:55:9b:
c0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:55:90:4D:CA:95:07:7E:95:0C:47:2C:27:58:12:06:6F:35:1A:A7
X509v3 Authority Key Identifier:
keyid:46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:59:1f:ef:45:9b:16:44:0c:4b:d8:06:65:fc:f8:95:48:73:
f8:fd:6f:f8:80:ac:dc:85:ea:97:e6:1d:8d:4f:d2:ef:ad:54:
d2:e9:44:d8:3a:4e:fc:0d:3c:22:ea:9f:9b:de:c5:22:27:79:
92:0b:fd:8b:52:ee:1b:2a:b0:a1:b9:22:df:fa:5c:15:6f:8f:
0f:ab:5d:76:b8:d4:d2:23:de:5b:68:77:ac:52:af:02:c1:fa:
de:bf:4f:f9:c4:c1:c2:9e:9c:05:a8:8e:c4:6d:94:73:3c:93:
60:5d:a1:71:75:25:6c:ee:37:e7:b2:b7:3e:d0:fa:c2:20:15:
52:96:5c:4a:37:42:39:ed:cf:14:54:c8:26:57:d3:e8:6d:4f:
36:7c:7f:6e:30:f5:0e:f0:6b:e9:89:5c:d6:1e:ba:1b:b3:43:
2c:05:e6:fe:16:de:bb:a6:66:2d:7c:6a:d3:88:8f:95:16:78:
51:ad:8f:13:25:5d:23:c5:1b:52:fd:1e:52:2f:34:90:5a:44:
14:aa:e5:0a:12:0f:f7:f9:7d:01:ad:fb:e1:23:8a:42:c9:5c:
68:1a:11:cf:0d:c5:10:30:56:d4:1b:47:4b:e6:7f:b3:ea:09:
8b:fb:db:b4:b6:86:75:23:3b:c4:e2:0b:45:df:47:46:bd:3d:
db:0d:02:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:58:32 2025 by rpki-client