Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.mft
File: 84BJvoAaE244erwUSY5IYETZYng.mft (raw, json)
Hash identifier: 2lBVVp9p3N4kem8nHC6bbigxsD4rdtBO2YJP/bmG+D8=
Subject key identifier: 4D:B4:40:D2:98:94:10:E1:C4:95:C8:4A:49:C0:7A:AE:45:5C:2A:3F
Authority key identifier: F3:80:49:BE:80:1A:13:6E:38:7A:BC:14:49:8E:48:60:44:D9:62:78
Certificate issuer: /CN=f38049be801a136e387abc14498e486044d96278
Certificate serial: 01965492BC1E731103111939914683C42444
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/84BJvoAaE244erwUSY5IYETZYng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.mft
Manifest number: 0249
Signing time: Sun 20 Apr 2025 19:00:24 +0000
Manifest this update: Sun 20 Apr 2025 19:00:24 +0000
Manifest next update: Mon 21 Apr 2025 19:00:24 +0000
Files and hashes: 1: 84BJvoAaE244erwUSY5IYETZYng.crl (hash: Q0OFdtct435TAS6NfgIWJ/N8zT1AH6jvT4UoJW+WA9A=)
2: Iu2chtpqWcHWj5ICMYSAAIfiajQ.roa (hash: V17YrAyWPucLnXshp6FV+qrXZ0uT+XGK95n0G3fUe08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.mft
rsync://rpki.ripe.net/repository/DEFAULT/84BJvoAaE244erwUSY5IYETZYng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 19:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:92:bc:1e:73:11:03:11:19:39:91:46:83:c4:24:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f38049be801a136e387abc14498e486044d96278
Validity
Not Before: Apr 20 19:00:24 2025 GMT
Not After : Apr 21 19:00:24 2025 GMT
Subject: CN=4db440d2989410e1c495c84a49c07aae455c2a3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ef:bc:90:db:85:80:8e:4b:3c:80:57:e6:c6:
56:77:b7:d4:8b:e9:a9:cc:13:2f:c8:91:0e:f5:8e:
5b:f0:5c:d0:36:8a:91:69:19:d4:b5:70:2e:58:61:
7a:35:36:f6:54:1a:58:c7:8d:8e:cf:ab:63:80:96:
08:2a:5b:5f:09:c8:6a:30:5d:0a:78:b6:48:97:3e:
71:28:94:37:66:86:8d:3b:d3:de:77:af:ec:8e:c9:
f0:1b:bd:2d:8b:a5:2a:15:ec:2f:11:6d:31:ea:25:
c1:8d:a7:5e:7d:8c:bb:29:65:ca:9d:ea:6f:85:8c:
b2:06:fc:d2:42:b1:38:21:68:b9:65:31:25:e9:bb:
89:b7:88:11:d4:8d:4d:b7:5c:86:e8:f7:b4:d5:f1:
31:f2:1f:20:e9:7f:d5:b5:0a:5b:7b:69:0d:1c:49:
b6:04:e3:bd:8e:71:e9:ec:d2:73:4a:bc:be:f4:59:
4a:23:2f:96:18:bc:5b:79:57:4b:85:3f:62:c2:a7:
1c:4b:6e:2a:38:5e:4c:54:2e:39:76:02:32:e2:38:
13:15:58:63:6d:19:f3:14:c1:73:95:68:bd:e9:77:
ff:ad:50:f3:55:3e:c0:ed:e7:a5:8d:9d:55:0e:07:
30:d3:a6:0f:1f:08:48:2c:5d:76:3c:8b:d1:4b:da:
a9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:B4:40:D2:98:94:10:E1:C4:95:C8:4A:49:C0:7A:AE:45:5C:2A:3F
X509v3 Authority Key Identifier:
keyid:F3:80:49:BE:80:1A:13:6E:38:7A:BC:14:49:8E:48:60:44:D9:62:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/84BJvoAaE244erwUSY5IYETZYng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:05:76:d5:70:ac:5d:0f:5c:93:0b:0f:75:f6:51:6f:de:c3:
63:9e:de:04:dd:e7:8f:26:e0:0b:14:39:e3:ce:d8:24:ba:d8:
f9:60:7e:be:a9:b4:48:77:26:a5:53:f3:00:12:20:dd:10:71:
b6:fb:91:d4:6f:74:56:0f:fd:cc:76:92:65:eb:fd:2d:48:66:
7c:d6:22:e4:5e:27:f0:5d:2f:e3:15:71:1e:27:13:ea:27:7b:
27:48:23:7b:6d:aa:93:ec:7d:6f:a2:41:c7:8b:d1:ed:40:7c:
bc:ef:a2:1d:0a:52:51:0d:c7:81:c7:04:4b:ea:d5:2e:6c:fb:
00:b4:45:36:07:d9:68:02:03:b2:60:6a:e6:8e:6a:09:37:03:
9b:4f:76:6e:25:60:84:cd:27:18:77:7e:34:c2:02:61:ee:40:
8e:6a:3b:85:5d:15:97:52:29:27:12:f1:4c:88:0f:fd:b3:e1:
76:83:7e:e0:6d:07:1f:e0:21:c1:9e:30:d6:3b:05:67:30:1d:
f1:a8:48:6c:44:fe:fc:16:b2:36:ed:6c:26:bd:76:34:4d:bb:
46:7e:a9:fc:d1:73:5d:b9:82:4f:1b:c9:ce:71:6d:3c:2a:a0:
a0:89:07:e3:0f:b9:82:70:1a:be:a9:cd:c1:dc:04:ef:8f:be:
e2:f5:a8:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:47:15 2025 by rpki-client