Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.mft
File: rKbwaDzHS63SOoFAw4XxyBziTfc.mft (raw, json)
Hash identifier: +tDBHQJ5IdexRdqD0kpEm6LiVv1Ps+ud5UNVxjLNcFo=
Subject key identifier: 04:6C:2A:B4:C1:8E:7E:C3:91:80:54:65:80:9C:D2:F1:7A:DB:F7:10
Authority key identifier: AC:A6:F0:68:3C:C7:4B:AD:D2:3A:81:40:C3:85:F1:C8:1C:E2:4D:F7
Certificate issuer: /CN=aca6f0683cc74badd23a8140c385f1c81ce24df7
Certificate serial: 019640677B13D28F24ECA1743A8160DCE2D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKbwaDzHS63SOoFAw4XxyBziTfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.mft
Manifest number: 0B9C
Signing time: Wed 16 Apr 2025 21:00:45 +0000
Manifest this update: Wed 16 Apr 2025 21:00:45 +0000
Manifest next update: Thu 17 Apr 2025 21:00:45 +0000
Files and hashes: 1: 0vFnPnyD0rk0NBq-vHcuUjmsih4.roa (hash: 8C+9WOepMdgxD+Xcj7Wjy9LCISmYrp2hucRDb6Vj6WM=)
2: rKbwaDzHS63SOoFAw4XxyBziTfc.crl (hash: aYqNivwmQlu+eN75xj98u31xN8Utbq29XzYkeGn+QbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKbwaDzHS63SOoFAw4XxyBziTfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 21:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:40:67:7b:13:d2:8f:24:ec:a1:74:3a:81:60:dc:e2:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca6f0683cc74badd23a8140c385f1c81ce24df7
Validity
Not Before: Apr 16 21:00:45 2025 GMT
Not After : Apr 17 21:00:45 2025 GMT
Subject: CN=046c2ab4c18e7ec391805465809cd2f17adbf710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:cb:f3:cf:70:54:88:86:7e:4b:65:ed:0c:c2:
85:98:95:69:1a:da:a4:d7:a8:19:f3:ac:42:fc:f8:
18:5b:18:39:fa:0b:cd:43:1b:5e:10:58:9c:69:35:
ce:45:ba:cb:0b:9c:d1:e8:ca:e3:3a:e9:21:e2:f9:
eb:db:ef:73:43:64:70:47:f4:f1:0f:8c:79:06:d2:
16:e3:7f:3d:17:2f:f4:bd:7b:0a:0c:9f:fa:ec:cb:
ad:07:bd:a9:f7:33:0c:09:10:08:24:76:4e:0e:e9:
60:1d:ad:8c:29:61:2a:88:77:54:ca:04:eb:bc:2b:
f2:49:c3:ae:4a:f8:67:f0:8c:06:ae:06:2c:d6:fc:
47:17:79:fd:54:f6:5d:f1:39:99:11:99:f6:da:90:
96:ee:7d:76:55:81:7e:a4:39:c8:99:1e:d6:60:f6:
b7:47:92:50:0b:32:65:d6:5e:f4:a3:cd:e1:dc:44:
37:2d:59:80:a7:2c:bd:17:6e:6d:08:0b:79:2b:1e:
3f:d7:f4:b6:27:36:1a:fc:73:68:09:6b:30:ba:ff:
d4:ec:44:d1:c1:59:a2:5f:1e:68:4f:ed:ac:79:19:
88:f2:a6:d8:19:b1:0b:44:a6:4b:f4:77:db:df:0e:
72:14:26:60:b4:c3:33:3a:97:ab:70:05:54:65:5e:
f0:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:6C:2A:B4:C1:8E:7E:C3:91:80:54:65:80:9C:D2:F1:7A:DB:F7:10
X509v3 Authority Key Identifier:
keyid:AC:A6:F0:68:3C:C7:4B:AD:D2:3A:81:40:C3:85:F1:C8:1C:E2:4D:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKbwaDzHS63SOoFAw4XxyBziTfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:7c:0c:27:1e:b8:81:64:0c:4e:d0:fe:1e:65:15:8e:fd:7b:
bd:18:54:3b:a2:83:52:64:2b:5f:37:16:f2:44:15:f7:eb:d6:
37:b4:08:cc:3f:9e:80:bf:6e:09:a6:29:1b:9c:cb:74:09:25:
26:93:c1:60:a9:d3:65:9b:0d:a1:b6:0b:6b:85:04:49:d2:0d:
bb:e4:c2:e2:97:ad:00:9e:0e:ef:f8:fe:5f:be:0d:b5:93:9f:
bf:aa:55:f4:d3:f8:60:e7:1f:3d:8a:ee:b5:41:ba:b2:2c:95:
25:ea:b9:29:70:fb:35:72:ae:20:ed:2b:dd:38:bc:f7:50:6e:
6f:73:78:d4:d4:08:89:e3:cb:0d:89:60:4e:25:c5:dd:b2:bd:
ec:72:50:35:00:8b:a6:5b:1a:17:6f:8c:74:fb:6d:42:3a:4d:
82:28:bb:2b:3e:c5:09:bc:fb:1e:6d:78:1e:38:a4:a0:ad:40:
f9:e3:8b:c6:a0:48:92:1e:6d:bc:f5:c4:26:77:0b:53:b1:e2:
78:6d:fa:25:7c:71:01:07:9a:b9:e4:33:71:fa:79:81:94:3a:
f8:f9:be:5c:24:cf:a6:90:35:17:20:19:06:c0:8d:d6:f6:75:
00:3c:6d:4f:49:1c:ca:45:e7:34:7f:97:c3:ff:d3:f9:46:cb:
c2:77:3b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 00:16:54 2025 by rpki-client