Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/e1d4b7-746c-426f-a6c5-dd5f55010a06/1/rcZHugF8ikWZwAm-BNgbJo7KYvQ.mft
File: rcZHugF8ikWZwAm-BNgbJo7KYvQ.mft (raw, json)
Hash identifier: vHMOx7ShaUBKXXCm+kq3md+iEFHNmqhqu3D2kH0y+vs=
Subject key identifier: 75:F2:78:D8:12:B3:2B:61:E9:24:2C:9D:5F:A5:4D:06:33:F7:BB:01
Authority key identifier: AD:C6:47:BA:01:7C:8A:45:99:C0:09:BE:04:D8:1B:26:8E:CA:62:F4
Certificate issuer: /CN=adc647ba017c8a4599c009be04d81b268eca62f4
Certificate serial: 01967C454A6F3A203DD45712D84FC14F7DEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rcZHugF8ikWZwAm-BNgbJo7KYvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/e1d4b7-746c-426f-a6c5-dd5f55010a06/1/rcZHugF8ikWZwAm-BNgbJo7KYvQ.mft
Manifest number: 0430
Signing time: Mon 28 Apr 2025 12:00:37 +0000
Manifest this update: Mon 28 Apr 2025 12:00:37 +0000
Manifest next update: Tue 29 Apr 2025 12:00:37 +0000
Files and hashes: 1: OV34MDvIRVxone0w5cHEhw4n-7g.roa (hash: iRvnIoP0GpD7jIp3Sl87VKOE59U8AR417l/5lvVpf0w=)
2: rcZHugF8ikWZwAm-BNgbJo7KYvQ.crl (hash: OwO6N4fhRSaKzsr1R+5aJS1+Ac5FonrhmO1RWoObrtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/e1d4b7-746c-426f-a6c5-dd5f55010a06/1/rcZHugF8ikWZwAm-BNgbJo7KYvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/e1d4b7-746c-426f-a6c5-dd5f55010a06/1/rcZHugF8ikWZwAm-BNgbJo7KYvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rcZHugF8ikWZwAm-BNgbJo7KYvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:45:4a:6f:3a:20:3d:d4:57:12:d8:4f:c1:4f:7d:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adc647ba017c8a4599c009be04d81b268eca62f4
Validity
Not Before: Apr 28 12:00:37 2025 GMT
Not After : Apr 29 12:00:37 2025 GMT
Subject: CN=75f278d812b32b61e9242c9d5fa54d0633f7bb01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:09:61:da:5f:f4:57:47:8b:9c:b7:54:f1:fd:
49:ad:11:99:8d:31:eb:e2:31:2b:82:7c:12:25:68:
4c:f2:c5:92:3c:45:e2:85:48:7c:43:c8:08:d5:08:
a3:33:74:1a:f3:64:e2:a1:4c:2d:8e:69:ab:e9:8d:
09:35:a8:57:b6:db:58:22:b7:0f:d1:30:51:fb:e3:
b8:f2:7c:e2:49:84:09:9e:09:d3:88:ca:aa:2d:f3:
57:95:e7:33:ee:30:c0:7d:5b:73:19:30:56:5d:6b:
48:14:80:10:5b:0d:45:eb:c7:02:d5:fa:4f:88:c4:
01:6b:b7:f3:a1:a0:c3:06:d2:c2:f5:17:57:62:1c:
5b:2e:51:b8:f7:1a:48:31:2f:28:62:5c:b1:93:73:
03:12:22:d5:3a:b5:75:f8:e7:2b:b7:85:b0:f4:75:
3f:a5:9f:2c:33:9a:f1:4a:6c:59:d5:ca:c9:66:b5:
17:0f:38:34:0e:be:b1:ad:d2:95:d4:29:88:b4:c4:
fd:88:fc:96:f5:97:54:b3:98:3d:49:26:ea:82:05:
7e:9a:99:95:65:a7:25:a1:1f:74:7b:aa:77:73:c6:
f7:41:0d:26:9d:5c:f3:2d:f3:14:5f:f2:b1:97:e0:
b3:5f:c9:6f:9e:5e:52:8d:0d:d1:7f:ce:ff:14:ba:
0a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:F2:78:D8:12:B3:2B:61:E9:24:2C:9D:5F:A5:4D:06:33:F7:BB:01
X509v3 Authority Key Identifier:
keyid:AD:C6:47:BA:01:7C:8A:45:99:C0:09:BE:04:D8:1B:26:8E:CA:62:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rcZHugF8ikWZwAm-BNgbJo7KYvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e1d4b7-746c-426f-a6c5-dd5f55010a06/1/rcZHugF8ikWZwAm-BNgbJo7KYvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e1d4b7-746c-426f-a6c5-dd5f55010a06/1/rcZHugF8ikWZwAm-BNgbJo7KYvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:0c:be:47:f3:78:e8:8f:47:e9:cc:8b:89:35:41:ee:0d:59:
a5:5f:5a:42:8d:91:57:72:99:e8:39:b9:b1:70:33:df:ea:c6:
ea:ce:d4:06:07:55:82:cf:ee:1b:be:b3:17:3e:37:71:dc:8b:
42:9c:12:55:d6:88:1d:10:53:6f:9c:99:9c:05:b7:38:c6:58:
43:6f:5f:48:a6:bc:44:d8:72:b7:39:63:aa:b4:bd:9f:82:f9:
2f:17:76:f9:77:2a:02:d4:6a:4b:11:65:96:5d:04:32:44:1c:
d9:55:01:46:7d:cc:f3:a5:78:17:3e:d1:89:e2:00:8c:45:62:
29:e7:d2:bb:2c:df:74:23:39:80:79:2a:94:01:d2:34:ca:63:
83:48:95:09:ae:5c:92:dd:d8:a5:58:fd:58:49:4a:65:b3:cc:
a2:59:d0:16:11:49:f8:5e:67:9d:06:05:d0:54:ff:2d:7a:d2:
72:49:d6:8f:c1:4e:4f:db:84:b9:8b:8b:83:f0:1c:aa:1c:7e:
b8:88:42:d7:84:12:5c:82:72:27:90:21:66:bd:f0:36:6b:be:
7c:17:f9:4e:3f:15:e2:d8:d7:a1:f3:07:8d:89:e4:fa:b0:3a:
09:6e:a1:dd:ca:07:e7:7a:51:be:fa:f8:27:14:88:7c:e0:39:
29:61:7e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:04:37 2025 by rpki-client