Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft
File: A86wnV7qahjljf3v6_KbQQXgJnw.mft (raw, json)
Hash identifier: TEsLMRrahWm0nA2Cz3tQuHiPopyfJv8sePSaQVSk4OA=
Subject key identifier: 5F:4D:26:59:50:B0:8F:92:FB:08:41:07:A5:9C:D0:7D:C9:D5:A7:13
Authority key identifier: 03:CE:B0:9D:5E:EA:6A:18:E5:8D:FD:EF:EB:F2:9B:41:05:E0:26:7C
Certificate issuer: /CN=03ceb09d5eea6a18e58dfdefebf29b4105e0267c
Certificate serial: 01965538877C455F391EA4D55C819F14F2CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A86wnV7qahjljf3v6_KbQQXgJnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft
Manifest number: 03C4
Signing time: Sun 20 Apr 2025 22:01:30 +0000
Manifest this update: Sun 20 Apr 2025 22:01:30 +0000
Manifest next update: Mon 21 Apr 2025 22:01:30 +0000
Files and hashes: 1: A86wnV7qahjljf3v6_KbQQXgJnw.crl (hash: TtuU63YN9lnHo5+INnkkEtOaA2LLprn0ChsJJ9cP5cM=)
2: ihNwlKbuNiGlnJM8yFd2Nxrvaqo.roa (hash: auV56nH817P5x20E5reCmB5GZHUds7d7BudXxN/HlG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/A86wnV7qahjljf3v6_KbQQXgJnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:87:7c:45:5f:39:1e:a4:d5:5c:81:9f:14:f2:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03ceb09d5eea6a18e58dfdefebf29b4105e0267c
Validity
Not Before: Apr 20 22:01:30 2025 GMT
Not After : Apr 21 22:01:30 2025 GMT
Subject: CN=5f4d265950b08f92fb084107a59cd07dc9d5a713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:2c:6c:d3:67:d6:f8:c2:f8:99:e3:3f:00:ef:
d3:91:22:67:79:56:75:2f:8d:eb:65:44:ef:06:14:
3d:bf:58:61:c5:d6:49:21:62:c8:a0:71:03:c8:40:
51:67:50:ce:5c:67:79:25:f8:3e:4c:69:a1:e2:43:
36:03:7f:9f:a5:03:8f:02:e1:ca:9b:76:9d:32:1f:
72:9b:0b:aa:4c:31:6a:a1:d4:0f:53:b5:2f:99:15:
63:90:30:ef:6a:9f:4e:ed:98:3d:4b:d7:88:d6:40:
65:ce:28:6f:b8:bf:1c:18:90:67:b5:d5:44:69:13:
e3:59:29:32:4e:9c:cb:80:2d:3c:3e:cc:ee:aa:dc:
28:f6:1b:da:f6:eb:77:02:3b:38:a6:b4:90:dd:9d:
be:a3:cb:09:d0:80:d8:65:cb:fc:fd:b0:fc:e6:44:
c2:ee:60:bd:1a:8f:af:3a:e3:c4:74:16:53:b1:4e:
a5:ca:88:c8:d9:36:55:b2:27:95:7d:e3:1c:2e:4b:
e7:73:61:21:55:b7:f7:51:ee:01:45:be:47:b2:7a:
0d:be:32:61:27:d7:53:9b:b4:f1:61:d5:b9:81:8b:
d4:65:20:94:34:9a:1c:d1:6d:76:64:00:71:7b:92:
74:2b:1b:ae:c4:71:7a:ea:e7:c6:e8:f1:c8:29:12:
c0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:4D:26:59:50:B0:8F:92:FB:08:41:07:A5:9C:D0:7D:C9:D5:A7:13
X509v3 Authority Key Identifier:
keyid:03:CE:B0:9D:5E:EA:6A:18:E5:8D:FD:EF:EB:F2:9B:41:05:E0:26:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A86wnV7qahjljf3v6_KbQQXgJnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:ee:9f:55:1e:bc:c2:56:90:1e:05:39:6b:cd:2e:1d:96:af:
ef:cc:74:d9:f0:9e:26:f3:d0:65:27:eb:26:89:b1:35:cd:3e:
c9:ba:e7:d3:71:71:03:49:e0:a6:1a:d0:79:d5:4b:01:1b:3c:
25:e3:c8:a1:45:82:49:ea:89:56:6e:dc:80:56:67:42:ec:3d:
10:ae:09:32:fb:2e:90:c8:4c:19:72:90:99:a8:f4:42:27:48:
f1:51:5c:96:9e:c2:dd:2c:0d:66:d0:85:62:14:ef:b1:44:15:
e0:75:76:60:29:b2:a1:bf:b2:5d:6e:25:27:c1:5e:87:36:8b:
f8:ef:e2:43:56:41:32:a6:11:29:fd:09:6b:05:7a:b8:5f:d7:
a0:76:eb:0e:01:3f:f6:ae:6b:85:eb:6c:9b:ad:67:8d:a2:80:
e5:c5:9e:a3:14:af:6c:ba:ac:f2:63:7d:63:76:68:8d:a6:af:
47:b3:5e:cd:94:54:4a:32:13:98:1c:78:1e:cc:e7:1f:96:a1:
b0:e6:94:49:2c:13:e4:e9:d2:a8:85:22:80:3e:f8:81:23:5a:
c6:c3:e8:a9:48:6a:43:9f:62:39:0c:d6:1b:c2:e2:6b:52:2e:
08:3d:4e:80:39:f7:2c:19:28:19:a9:39:99:8a:c5:e9:57:46:
bc:2f:63:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:27:56 2025 by rpki-client