Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.mft
File: 41b1wjzOxkZAaF5E1ZvEttRNqrk.mft (raw, json)
Hash identifier: JnmPjgCTJLNVD/UZmzW5tzSuZI72EQfWZ0wWMeXevFI=
Subject key identifier: 8C:91:11:E7:6B:91:9E:F4:B0:4E:C2:34:72:2B:49:A3:DB:63:EE:9E
Authority key identifier: E3:56:F5:C2:3C:CE:C6:46:40:68:5E:44:D5:9B:C4:B6:D4:4D:AA:B9
Certificate issuer: /CN=e356f5c23ccec64640685e44d59bc4b6d44daab9
Certificate serial: 019656816502ECBE9C313ED8A4BEF0A8F5CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/41b1wjzOxkZAaF5E1ZvEttRNqrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.mft
Manifest number: 090D
Signing time: Mon 21 Apr 2025 04:00:42 +0000
Manifest this update: Mon 21 Apr 2025 04:00:42 +0000
Manifest next update: Tue 22 Apr 2025 04:00:42 +0000
Files and hashes: 1: 1-57HmlNDMcNn-L6phbslRuvJCcw.roa (hash: gyWoPpIB9HWDXzh+b8BPPzXer8C1JA3lUjjaqPhqcUE=)
2: 41b1wjzOxkZAaF5E1ZvEttRNqrk.crl (hash: bgBszuvrgADuIvU3AxhVU4XaVKF6liBREIU1aHp88oE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/41b1wjzOxkZAaF5E1ZvEttRNqrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:81:65:02:ec:be:9c:31:3e:d8:a4:be:f0:a8:f5:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e356f5c23ccec64640685e44d59bc4b6d44daab9
Validity
Not Before: Apr 21 04:00:42 2025 GMT
Not After : Apr 22 04:00:42 2025 GMT
Subject: CN=8c9111e76b919ef4b04ec234722b49a3db63ee9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:15:22:4f:46:b7:c3:05:69:55:74:73:2b:da:
eb:40:f7:48:5d:50:e5:ee:f5:de:71:f5:57:f7:c3:
17:3d:99:f1:ef:02:d8:cc:71:fa:4a:bc:79:ff:ba:
8f:4c:da:1f:62:c9:7a:e5:10:cc:8d:00:15:10:29:
33:18:72:0b:69:ae:7e:09:02:ac:61:57:ee:9e:b7:
35:7b:60:5f:a7:b9:45:d5:8d:17:2c:44:52:02:24:
e2:33:c1:a3:e2:2b:c9:d4:1e:0b:79:c7:3a:0f:22:
af:0d:33:c5:b0:4a:7b:25:d5:06:a1:4e:63:a8:5f:
6b:0c:a2:78:56:7b:4e:0d:36:36:b4:c3:ae:53:31:
ef:fb:a2:e1:32:15:98:b1:4b:af:e9:4f:bd:c2:06:
96:44:99:a8:9e:9a:0f:86:80:83:41:12:f3:73:91:
45:c9:41:c7:2f:12:80:42:9b:73:e8:e6:9a:77:31:
eb:4a:2d:18:56:b8:a4:a8:93:3d:f9:2f:d9:be:f7:
9e:06:04:54:17:bb:e4:da:25:9a:db:dd:c0:9d:25:
09:e4:2c:72:f2:ab:1a:25:05:69:b5:20:c8:80:48:
52:b6:6b:2f:77:b7:6b:7b:81:64:45:a1:88:78:b2:
7e:31:02:d8:c0:66:cf:95:da:43:0f:85:17:fe:31:
02:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:91:11:E7:6B:91:9E:F4:B0:4E:C2:34:72:2B:49:A3:DB:63:EE:9E
X509v3 Authority Key Identifier:
keyid:E3:56:F5:C2:3C:CE:C6:46:40:68:5E:44:D5:9B:C4:B6:D4:4D:AA:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/41b1wjzOxkZAaF5E1ZvEttRNqrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:a6:15:58:ac:aa:4e:a8:0e:c4:07:93:ec:c5:71:41:8c:9d:
c0:97:21:31:5c:bf:cf:2a:ff:c1:bd:32:4c:50:f8:ef:31:0f:
08:e0:cb:64:44:f9:02:09:51:e7:91:93:bb:26:e5:c3:ff:96:
98:2a:a2:b0:ad:68:b3:0b:3a:d5:77:70:df:f4:12:8c:a7:78:
be:00:11:0c:30:cb:01:2f:17:b6:ea:08:cc:62:67:f1:46:b3:
05:ab:d0:f7:70:26:52:22:9b:3c:93:b8:f7:11:a3:be:8d:81:
df:25:69:3c:c1:3a:7d:b4:9b:8e:5b:90:70:1b:07:96:53:ef:
65:bc:57:7a:bd:fe:34:f1:cc:55:37:08:9a:57:1c:c7:88:b3:
38:d2:2f:7d:41:fd:18:a4:f4:b9:2a:fa:88:f4:28:35:91:4b:
1a:6b:ab:1e:2e:84:6f:26:08:e7:c5:ab:c6:99:56:4d:21:97:
fa:f0:74:ec:cd:b6:bd:08:0b:41:2e:7b:a9:31:d2:9a:0a:3f:
85:7c:ab:96:25:b3:78:51:7f:09:f9:39:0b:e7:da:ab:77:3e:
75:eb:4c:63:cc:1c:30:a4:b4:3b:d2:35:2d:7a:e8:d2:78:30:
a1:d0:05:68:7c:a9:5c:09:9e:7f:38:46:98:83:5e:d3:a0:29:
93:88:27:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:38:04 2025 by rpki-client