Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/Rv57VnIiRRFtQjS-SEoCpIod3h8.mft
File: Rv57VnIiRRFtQjS-SEoCpIod3h8.mft (raw, json)
Hash identifier: Y2ffNMojfYuJXmU2ehUMr4AcQDrsYJpeFPMVvfeah3U=
Subject key identifier: 46:B5:7F:75:01:D3:FF:25:46:75:E5:B3:AE:2C:58:B1:DD:DC:52:1D
Authority key identifier: 46:FE:7B:56:72:22:45:11:6D:42:34:BE:48:4A:02:A4:8A:1D:DE:1F
Certificate issuer: /CN=46fe7b56722245116d4234be484a02a48a1dde1f
Certificate serial: 01969F0871EE458B1D1957128D13504939A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rv57VnIiRRFtQjS-SEoCpIod3h8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/Rv57VnIiRRFtQjS-SEoCpIod3h8.mft
Manifest number: 0EA7
Signing time: Mon 05 May 2025 06:00:52 +0000
Manifest this update: Mon 05 May 2025 06:00:52 +0000
Manifest next update: Tue 06 May 2025 06:00:52 +0000
Files and hashes: 1: IhchjAlH7wZG7kzQTy4JNv3HhP8.roa (hash: MX+poTln1XfrF458aN+rzETZ5ejTHBJDcPW84QX3+eg=)
2: Rv57VnIiRRFtQjS-SEoCpIod3h8.crl (hash: kduN7xZiZ//1k+jbVmWLyeuzFCpswkxF02bnQeW3J6M=)
3: m7K3o6zKpvccw8S7oHzkq7OVkd4.roa (hash: GgfDl73eI/b08tNz06PPsn6okyEEe2tBCJUd3Gjwvrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/Rv57VnIiRRFtQjS-SEoCpIod3h8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/Rv57VnIiRRFtQjS-SEoCpIod3h8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rv57VnIiRRFtQjS-SEoCpIod3h8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:08:71:ee:45:8b:1d:19:57:12:8d:13:50:49:39:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46fe7b56722245116d4234be484a02a48a1dde1f
Validity
Not Before: May 5 06:00:52 2025 GMT
Not After : May 6 06:00:52 2025 GMT
Subject: CN=46b57f7501d3ff254675e5b3ae2c58b1dddc521d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f4:99:25:b4:71:bc:5c:92:ee:27:08:18:70:
ba:bb:d9:bc:59:bd:d5:20:6e:a8:b5:c7:61:e2:7c:
0a:eb:b1:e3:08:2d:fd:ef:e7:02:98:f4:cc:1b:2b:
d9:5b:12:38:74:3c:ee:58:c4:f9:9c:d5:60:b3:76:
b2:28:e1:44:b5:e9:15:d5:fb:99:63:92:fa:d0:7c:
c5:27:f8:dd:9e:75:93:9c:bc:67:82:8c:20:bd:6c:
03:2a:29:f6:d0:ae:5b:dd:90:b9:78:36:19:c9:c4:
2e:fc:2b:45:31:73:cf:c0:de:0d:98:ac:5c:e3:1d:
93:14:5e:d0:c5:b3:40:3b:30:94:59:bc:2a:fa:6d:
1c:c1:83:22:46:21:75:29:7a:5b:58:4e:2c:42:4a:
c9:38:2c:95:2b:6f:35:24:55:ff:84:55:b8:94:61:
85:f2:e7:27:af:b0:b5:74:7c:25:5c:14:32:8b:61:
48:79:55:bb:53:9e:00:7f:9b:b6:3f:e3:52:2d:f0:
d2:cd:da:b4:a3:eb:fc:b1:5e:af:44:07:ab:60:00:
23:9e:e4:c8:42:cb:88:16:39:03:75:d3:7d:6f:58:
a7:70:94:55:f3:4c:bd:87:32:81:11:ea:a5:24:44:
6a:a6:05:f7:dc:2f:b9:4f:2e:0c:bb:a0:4c:83:8e:
e3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:B5:7F:75:01:D3:FF:25:46:75:E5:B3:AE:2C:58:B1:DD:DC:52:1D
X509v3 Authority Key Identifier:
keyid:46:FE:7B:56:72:22:45:11:6D:42:34:BE:48:4A:02:A4:8A:1D:DE:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rv57VnIiRRFtQjS-SEoCpIod3h8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/Rv57VnIiRRFtQjS-SEoCpIod3h8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/Rv57VnIiRRFtQjS-SEoCpIod3h8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:cf:be:48:c1:11:c4:b8:19:ac:79:0c:e1:71:8c:37:80:b7:
fa:17:3a:e5:78:e1:79:ac:9a:b2:ac:7b:c5:e8:80:bd:dd:33:
7e:0a:f6:6c:3f:77:14:f3:ad:f1:4d:41:8e:e5:07:dd:89:15:
9f:13:7e:80:dc:b4:7a:18:39:55:1c:e0:e8:9b:87:ca:fc:be:
bf:13:cb:db:94:5f:a2:a7:3e:4f:56:1c:8b:e4:77:db:39:6d:
e7:af:46:4d:a4:bc:11:da:a9:8b:a8:0c:f9:53:fb:ea:26:54:
ba:0c:fa:82:8b:d2:f9:62:65:b5:26:d2:70:d1:86:89:59:a7:
71:90:59:79:88:b2:bb:72:52:e9:4f:28:9d:ac:18:f5:e6:6f:
f3:66:2c:11:7a:9b:79:ef:92:17:5a:91:fc:d5:fd:14:12:34:
ba:73:8c:c9:57:6b:70:fd:2a:3c:7f:70:26:fb:87:ea:32:95:
cd:4a:70:bf:6d:0a:3b:25:26:fc:ee:00:e3:ae:b1:33:b5:e6:
e5:5b:a7:77:cd:6b:15:e4:e9:b1:09:1e:d2:37:9c:a4:f7:db:
3d:f1:33:49:6a:96:d4:53:c2:56:50:1d:29:54:0e:e2:d5:b4:
25:48:26:a9:c3:65:bb:96:4c:9f:e4:ac:3b:7e:be:1c:da:e2:
0c:5f:dc:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 08:19:23 2025 by rpki-client