Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.mft
File: RusRr5NV2porXfc-zdf9CWektYw.mft (raw, json)
Hash identifier: MbY84MxCJgiLOg1byMhOuk3U8mJUDiRUpLPC0H9WzLo=
Subject key identifier: 3F:A6:41:67:35:96:F4:18:57:9A:A5:62:EC:73:F7:47:94:F4:36:11
Authority key identifier: 46:EB:11:AF:93:55:DA:9A:2B:5D:F7:3E:CD:D7:FD:09:67:A4:B5:8C
Certificate issuer: /CN=46eb11af9355da9a2b5df73ecdd7fd0967a4b58c
Certificate serial: 01964179C58FAE7E81AB4FD23E09EE2DB537
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RusRr5NV2porXfc-zdf9CWektYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.mft
Manifest number: 14F9
Signing time: Thu 17 Apr 2025 02:00:21 +0000
Manifest this update: Thu 17 Apr 2025 02:00:21 +0000
Manifest next update: Fri 18 Apr 2025 02:00:21 +0000
Files and hashes: 1: GYTVmNtXsClBN2_m1uRr3vF4R2k.roa (hash: 5aAitfXDnMCmu3njYRXM+C5ciF1JourPlKjasRSY100=)
2: RusRr5NV2porXfc-zdf9CWektYw.crl (hash: 5GPf7nJ3cW/DORrqaxFWUWExQdmzOAreLe08ucA5hko=)
3: a7IWjlJ3-v5YN5JtWuXJERn1hs0.roa (hash: ubv2dUjgg/MjekVb1dt+BNRzcRiJnDJyWbeGdndwL9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/RusRr5NV2porXfc-zdf9CWektYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 02:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:41:79:c5:8f:ae:7e:81:ab:4f:d2:3e:09:ee:2d:b5:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46eb11af9355da9a2b5df73ecdd7fd0967a4b58c
Validity
Not Before: Apr 17 02:00:21 2025 GMT
Not After : Apr 18 02:00:21 2025 GMT
Subject: CN=3fa641673596f418579aa562ec73f74794f43611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:36:b7:36:95:fc:66:3e:14:86:db:8f:60:1d:
86:29:b6:f8:d7:e2:53:99:eb:51:bb:9b:b1:58:4a:
38:38:f6:42:55:b6:16:0f:bd:28:df:1b:86:c0:2c:
4d:c5:62:c7:61:6b:ca:90:59:7f:11:bf:8f:3e:f8:
c3:25:d7:80:5d:ca:19:0f:a5:fc:e9:c0:95:58:96:
55:ed:bc:76:b2:b6:cc:76:b7:ca:7e:98:5e:33:21:
ce:8f:07:93:5e:ce:28:c0:ec:19:e3:f1:ec:81:b8:
56:0d:26:e7:00:7c:9e:e3:e6:a7:02:f5:5c:83:0f:
6a:60:4d:bf:e0:14:8f:5f:17:77:1d:f5:e6:87:a7:
52:e4:a0:0e:75:ea:db:60:e8:e2:8c:c6:d4:a4:e9:
a0:a4:40:0f:c6:f5:77:c4:d4:2d:46:d3:5c:f6:bd:
50:a3:23:22:f2:40:ee:9f:76:f1:76:b9:46:0d:6e:
eb:94:60:68:f3:b8:ca:df:45:64:6a:f5:a3:13:d6:
3a:cb:bd:e4:b8:fd:cc:dc:ce:e4:d9:b7:dd:35:f8:
57:32:75:55:e1:92:02:6a:5b:de:ed:99:db:df:ca:
66:7c:21:e5:37:a4:82:77:25:45:c7:4d:b9:ca:71:
c1:14:dd:7e:d0:35:da:1d:90:a3:07:ae:a9:7a:69:
8f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A6:41:67:35:96:F4:18:57:9A:A5:62:EC:73:F7:47:94:F4:36:11
X509v3 Authority Key Identifier:
keyid:46:EB:11:AF:93:55:DA:9A:2B:5D:F7:3E:CD:D7:FD:09:67:A4:B5:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RusRr5NV2porXfc-zdf9CWektYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:9f:81:fc:31:e1:1a:72:0d:07:7d:5d:37:9d:d3:38:0f:f4:
61:09:f5:fd:cb:bf:0b:cd:9a:06:d7:77:48:95:e7:33:bc:b6:
35:74:67:62:bc:e6:9e:3b:d0:13:d7:80:47:24:2e:25:bd:99:
1a:48:7a:6d:89:27:83:b9:bd:bc:ec:b7:d2:1d:ac:55:ee:2e:
5e:c5:a1:a2:74:79:8b:6f:0f:e1:90:1c:d9:e7:a2:2e:07:9a:
3e:41:6e:45:54:0d:8d:d1:9e:64:a4:53:2b:51:19:39:13:fb:
36:66:98:81:aa:2d:61:a4:70:3b:36:a2:c0:0d:0b:5d:99:d4:
db:14:ca:16:88:d4:ee:3c:e4:72:65:ad:5c:4e:f6:1e:2a:1f:
2e:6e:af:a5:44:49:ea:45:50:90:a2:61:1a:54:89:da:16:54:
28:53:e9:1c:b1:92:97:8c:45:4b:eb:89:26:75:6e:12:a2:4d:
93:fa:a0:84:73:50:db:d1:10:4a:26:1e:47:18:af:1d:4e:3a:
36:3a:76:ca:05:51:f0:5a:09:78:f0:45:20:f8:f5:4a:45:14:
d4:73:01:ca:47:a4:f8:ae:4d:24:40:7f:70:45:09:58:cc:f9:
51:fc:9d:4f:01:c1:31:bd:3a:7d:0f:5e:94:a5:dd:97:80:2c:
d9:d6:81:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:26:35 2025 by rpki-client