Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5e935b-2340-4806-b33b-faca0eb3357d/1/RvvPwT1NX_bTfCJvEeEhIEw2fRc.mft
File: RvvPwT1NX_bTfCJvEeEhIEw2fRc.mft (raw, json)
Hash identifier: RmhZGOLwuLZRXV9iGhNVYqJd0WyUOMdqMen26UpQ/DU=
Subject key identifier: 83:69:42:0D:B0:62:A9:C6:6F:C0:E3:90:36:F5:F4:0F:D4:46:2E:04
Authority key identifier: 46:FB:CF:C1:3D:4D:5F:F6:D3:7C:22:6F:11:E1:21:20:4C:36:7D:17
Certificate issuer: /CN=46fbcfc13d4d5ff6d37c226f11e121204c367d17
Certificate serial: 01965500B67D877EAFCB6A6073B025D2623B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RvvPwT1NX_bTfCJvEeEhIEw2fRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5e935b-2340-4806-b33b-faca0eb3357d/1/RvvPwT1NX_bTfCJvEeEhIEw2fRc.mft
Manifest number: 0164
Signing time: Sun 20 Apr 2025 21:00:32 +0000
Manifest this update: Sun 20 Apr 2025 21:00:32 +0000
Manifest next update: Mon 21 Apr 2025 21:00:32 +0000
Files and hashes: 1: 1-LEezNtaqjy169gIk46UkSGODnI.roa (hash: FRFupvefU0HUQnLO8y2fwT4i2INskAlpIVZPmaI9wtE=)
2: IrF-9wkj7eNtv0srLfHPyI1GtTA.roa (hash: mAMlIob8u84HdQAxB78nZwUMGcefLJXlEaHY1RBkM0I=)
3: RvvPwT1NX_bTfCJvEeEhIEw2fRc.crl (hash: USvoSUZOqIjT6t3ZmUjOh8868htI177ZAR6aIWoL4/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5e935b-2340-4806-b33b-faca0eb3357d/1/RvvPwT1NX_bTfCJvEeEhIEw2fRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/5e935b-2340-4806-b33b-faca0eb3357d/1/RvvPwT1NX_bTfCJvEeEhIEw2fRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/RvvPwT1NX_bTfCJvEeEhIEw2fRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:00:b6:7d:87:7e:af:cb:6a:60:73:b0:25:d2:62:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46fbcfc13d4d5ff6d37c226f11e121204c367d17
Validity
Not Before: Apr 20 21:00:32 2025 GMT
Not After : Apr 21 21:00:32 2025 GMT
Subject: CN=8369420db062a9c66fc0e39036f5f40fd4462e04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d5:1d:89:de:1e:08:7d:66:f8:09:75:74:c7:
c8:8f:82:9e:f9:8b:2f:d2:1e:47:04:7d:dc:1e:18:
15:f6:3b:0b:7e:e1:09:59:61:bf:ba:c6:dc:2d:15:
00:c7:38:3f:a9:5c:76:35:66:18:7d:94:2a:b2:ba:
86:a5:79:91:8f:07:1b:c8:f2:6f:68:17:c5:3e:ab:
b1:04:9d:9a:98:bd:25:e1:97:1b:fc:a0:79:69:7d:
73:f6:45:a2:c0:4b:f9:a9:13:33:bf:5f:01:8e:9d:
35:f2:cd:86:a3:4e:fb:69:42:91:de:25:95:3b:8f:
c2:5b:0a:84:bc:30:db:23:c8:dc:dd:44:8f:42:58:
e0:01:75:6c:6e:f9:33:4a:f1:73:68:f4:22:3b:60:
bd:fc:29:d4:16:ec:52:64:96:f6:79:bc:d7:da:7d:
a3:c5:0d:d3:c9:28:1b:9a:21:ab:96:37:22:60:c2:
61:4c:4d:ed:86:89:f0:2a:a3:2d:47:33:c0:68:5f:
8a:a5:bb:dc:ec:22:ff:35:6d:46:9c:b2:4b:c3:56:
95:72:c7:f8:0f:11:41:91:9b:b8:fe:f3:ce:9f:70:
2f:34:bc:13:13:2b:19:d4:93:91:07:4a:ee:ec:38:
85:a6:9e:6f:19:a6:87:5e:60:63:83:91:b9:cc:15:
ee:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:69:42:0D:B0:62:A9:C6:6F:C0:E3:90:36:F5:F4:0F:D4:46:2E:04
X509v3 Authority Key Identifier:
keyid:46:FB:CF:C1:3D:4D:5F:F6:D3:7C:22:6F:11:E1:21:20:4C:36:7D:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RvvPwT1NX_bTfCJvEeEhIEw2fRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e935b-2340-4806-b33b-faca0eb3357d/1/RvvPwT1NX_bTfCJvEeEhIEw2fRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e935b-2340-4806-b33b-faca0eb3357d/1/RvvPwT1NX_bTfCJvEeEhIEw2fRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:5e:0b:21:03:07:08:df:ed:8a:5a:7b:45:bb:d2:73:20:54:
7d:0a:8b:7e:7f:06:3d:b3:cf:d1:06:1e:7f:9f:aa:b2:7f:db:
0d:fc:48:d4:aa:b0:15:79:b1:4b:97:a2:2d:f5:ef:25:70:90:
1f:ba:02:b5:eb:4f:e3:d1:4e:e1:ec:2f:6c:a6:30:ab:dd:6f:
72:2c:e1:f7:c1:09:c5:ad:2c:0b:bf:52:a5:6f:47:4d:37:ac:
4d:a7:98:04:3d:49:b7:e4:32:cd:1e:f8:ce:30:a9:c9:a4:b9:
45:ce:91:a9:c5:f2:1a:6d:95:05:c0:7e:41:d9:db:37:3a:aa:
bd:df:76:c7:30:bb:33:bb:39:0c:b5:8e:39:f2:0a:4e:ec:61:
b7:fb:aa:77:4d:46:ce:fd:8c:59:52:94:ee:62:8b:e2:f3:2c:
1c:90:30:2b:ac:d0:bc:af:56:8a:a2:ca:ff:96:1c:03:8c:d1:
a2:42:17:92:a4:d1:dc:d5:60:2c:f1:c1:be:de:9f:8e:e8:58:
84:2c:13:8c:aa:b2:ce:71:ad:c2:a9:1b:7e:a8:1e:5b:dd:7e:
7e:94:c8:07:1b:12:b3:69:f6:58:11:0c:c3:25:48:44:c5:4f:
dc:4c:77:02:56:1b:c1:75:63:ce:8a:ce:c7:14:68:8a:1e:59:
12:12:d1:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:19:04 2025 by rpki-client