Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/45852f-8fae-441d-b10c-0a1bf5bf0ca2/1/RkUo2QgMZl2wVR2K2LD3H3u3aZY.mft
File: RkUo2QgMZl2wVR2K2LD3H3u3aZY.mft (raw, json)
Hash identifier: N9xudR2jCaYga3ftiweDbVBYsAzufhklweJImbVAwvI=
Subject key identifier: 56:58:88:63:35:D4:1E:B2:4C:96:5D:A7:AC:10:22:59:52:6D:DF:B0
Authority key identifier: 46:45:28:D9:08:0C:66:5D:B0:55:1D:8A:D8:B0:F7:1F:7B:B7:69:96
Certificate issuer: /CN=464528d9080c665db0551d8ad8b0f71f7bb76996
Certificate serial: 01965613C24A8F3A2F80BF0FBE0E968FDC1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RkUo2QgMZl2wVR2K2LD3H3u3aZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/45852f-8fae-441d-b10c-0a1bf5bf0ca2/1/RkUo2QgMZl2wVR2K2LD3H3u3aZY.mft
Manifest number: 1501
Signing time: Mon 21 Apr 2025 02:00:57 +0000
Manifest this update: Mon 21 Apr 2025 02:00:57 +0000
Manifest next update: Tue 22 Apr 2025 02:00:57 +0000
Files and hashes: 1: RO-2xcQ-C0WrDSJ7Eu00WY23rS4.roa (hash: Avrv1nDidaSbZAK1I64G61mkaNMT6r8igSyRsacO8hw=)
2: RkUo2QgMZl2wVR2K2LD3H3u3aZY.crl (hash: 1Xm4YC+HycIbv+SEACxgrgpS77jKKZFoRTImM8HS2FE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/45852f-8fae-441d-b10c-0a1bf5bf0ca2/1/RkUo2QgMZl2wVR2K2LD3H3u3aZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/45852f-8fae-441d-b10c-0a1bf5bf0ca2/1/RkUo2QgMZl2wVR2K2LD3H3u3aZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/RkUo2QgMZl2wVR2K2LD3H3u3aZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:c2:4a:8f:3a:2f:80:bf:0f:be:0e:96:8f:dc:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464528d9080c665db0551d8ad8b0f71f7bb76996
Validity
Not Before: Apr 21 02:00:57 2025 GMT
Not After : Apr 22 02:00:57 2025 GMT
Subject: CN=5658886335d41eb24c965da7ac102259526ddfb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0f:39:ea:fa:8b:d9:29:25:d8:81:97:c1:8c:
73:25:20:13:83:3a:d2:b4:cc:41:de:33:8c:19:d2:
48:4f:44:16:d1:72:86:87:7d:9c:9b:bf:22:4b:44:
43:2e:08:2d:57:3c:d2:b7:00:44:ec:d7:f3:51:27:
2f:ac:f4:44:80:64:11:d3:e5:43:56:42:72:e9:7a:
4f:f3:05:d2:c8:93:65:f7:bc:37:5a:71:5e:f3:8c:
8a:62:5e:01:29:19:d7:f5:88:90:af:8f:c9:3c:78:
cd:de:b1:94:6e:9c:f8:43:09:ba:19:bd:4b:b8:48:
a1:4a:b9:dd:62:90:f1:24:f6:bf:49:74:90:c9:f3:
99:e9:7b:cf:3f:3b:5a:a9:4c:a5:f3:29:3a:c2:c0:
a0:10:69:5e:b7:d2:fc:77:9d:0e:f8:5b:3a:63:f2:
23:a4:44:7f:dd:77:11:71:e9:b0:de:12:b1:9c:55:
c1:4d:e2:b5:e8:29:2a:66:59:30:c1:5b:35:70:80:
5d:41:9e:d9:9e:df:a7:55:7c:27:ce:6d:23:d7:26:
91:94:03:29:92:11:ef:18:5d:4f:3e:5f:fa:8f:1a:
97:4e:e9:9b:06:a6:9d:af:49:d9:77:83:ad:44:89:
a7:9e:f5:a9:0a:c7:a7:5a:6a:07:ab:57:4d:f8:88:
54:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:58:88:63:35:D4:1E:B2:4C:96:5D:A7:AC:10:22:59:52:6D:DF:B0
X509v3 Authority Key Identifier:
keyid:46:45:28:D9:08:0C:66:5D:B0:55:1D:8A:D8:B0:F7:1F:7B:B7:69:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RkUo2QgMZl2wVR2K2LD3H3u3aZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/45852f-8fae-441d-b10c-0a1bf5bf0ca2/1/RkUo2QgMZl2wVR2K2LD3H3u3aZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/45852f-8fae-441d-b10c-0a1bf5bf0ca2/1/RkUo2QgMZl2wVR2K2LD3H3u3aZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:b4:43:37:b8:a5:04:dc:55:6a:1f:a2:f7:b2:8c:ac:60:4d:
41:c7:80:2b:76:85:89:e9:98:ef:b5:00:8d:3b:f8:df:b7:f1:
e4:c7:40:83:ac:2a:4a:c6:11:80:d5:9d:c0:81:b7:fe:85:67:
94:5c:ce:0e:39:8f:d9:25:22:10:90:9a:6b:17:62:4d:84:3d:
ca:ed:50:85:ca:92:c6:79:99:aa:29:bc:e6:08:3e:cc:8d:54:
c0:a9:78:3d:aa:f5:48:c9:43:fa:a9:ed:93:3e:0e:ef:8c:53:
74:40:53:82:f4:d7:5d:04:20:d2:84:6a:b0:c3:7a:ca:3a:22:
40:c9:53:ba:58:a6:39:c5:8c:36:1e:21:2b:9f:31:8d:07:bc:
fd:86:1b:01:26:04:48:31:03:7f:9b:03:35:fe:5a:49:48:b2:
34:ec:0f:5f:7d:a6:20:c4:84:ed:b1:d4:8c:48:1d:99:ab:53:
5f:92:ed:9e:f4:6b:e4:c2:a2:17:a5:29:96:8b:f7:0c:46:ed:
31:51:ea:f4:9d:12:75:64:04:81:15:7b:d8:fc:2f:dc:41:dd:
85:5a:6d:cf:93:bf:b1:43:8f:e4:b9:12:8f:e0:04:1e:4d:38:
ad:b0:e6:4c:c6:e1:af:83:14:3f:46:a3:24:f4:25:4f:02:bf:
57:cd:1b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:37:59 2025 by rpki-client