Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9e9559-8f3c-45d0-851c-68f2174c79ee/1/RJ5CUryyLqLGz7OSTI-Evd56dHE.mft
File: RJ5CUryyLqLGz7OSTI-Evd56dHE.mft (raw, json)
Hash identifier: sTi9vFcFK4F8czc5p61P34h6GSrnLld9hLMVThDK/tA=
Subject key identifier: DF:D9:75:3C:1A:E0:08:FE:00:86:7C:11:9C:0B:8B:56:5D:B0:DC:12
Authority key identifier: 44:9E:42:52:BC:B2:2E:A2:C6:CF:B3:92:4C:8F:84:BD:DE:7A:74:71
Certificate issuer: /CN=449e4252bcb22ea2c6cfb3924c8f84bdde7a7471
Certificate serial: 01965915744F1E58C3F3BD22BFE03A879C5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RJ5CUryyLqLGz7OSTI-Evd56dHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9e9559-8f3c-45d0-851c-68f2174c79ee/1/RJ5CUryyLqLGz7OSTI-Evd56dHE.mft
Manifest number: 1502
Signing time: Mon 21 Apr 2025 16:01:40 +0000
Manifest this update: Mon 21 Apr 2025 16:01:40 +0000
Manifest next update: Tue 22 Apr 2025 16:01:40 +0000
Files and hashes: 1: IuxDHR_CV3eNS1S5clbvfJ1hK_k.roa (hash: Hz3aDArINU9rGaWmuAjDTNSRDFd5qodJqjOuXUvn7hM=)
2: RJ5CUryyLqLGz7OSTI-Evd56dHE.crl (hash: q0qHyC2+QolE11oASgbwrsWyBfCgWRAwg3+FZrE2ttQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9e9559-8f3c-45d0-851c-68f2174c79ee/1/RJ5CUryyLqLGz7OSTI-Evd56dHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/9e9559-8f3c-45d0-851c-68f2174c79ee/1/RJ5CUryyLqLGz7OSTI-Evd56dHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RJ5CUryyLqLGz7OSTI-Evd56dHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:15:74:4f:1e:58:c3:f3:bd:22:bf:e0:3a:87:9c:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=449e4252bcb22ea2c6cfb3924c8f84bdde7a7471
Validity
Not Before: Apr 21 16:01:40 2025 GMT
Not After : Apr 22 16:01:40 2025 GMT
Subject: CN=dfd9753c1ae008fe00867c119c0b8b565db0dc12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:6b:75:a3:0b:64:6d:c7:cf:c3:22:99:20:ab:
00:70:9a:30:fc:81:05:5e:b8:5c:33:fd:9b:09:c2:
a5:d2:80:f4:92:e8:52:e4:a9:3c:c2:66:35:a1:c9:
0e:68:e1:46:cc:6d:a3:e1:fe:8b:ed:51:d0:b5:40:
46:a7:c7:be:77:b4:7c:09:28:1d:f0:b9:2f:8d:20:
84:4a:5d:85:f3:73:1b:a2:33:53:5d:36:b9:01:5c:
b8:43:0e:e1:36:f9:b7:ef:eb:a8:32:5f:bb:c9:cf:
79:76:92:b2:f5:ea:07:33:31:6c:6d:78:aa:2f:0c:
dd:4f:32:c0:64:21:fb:f9:ff:a7:b5:d0:42:c7:79:
a1:fa:5b:5d:b0:65:14:44:dd:d5:c2:ee:fe:a6:65:
f0:f1:52:b3:a8:75:ce:b2:b1:c8:35:f9:77:f6:92:
7d:9a:2b:fb:f1:37:9c:3d:19:66:f7:d3:b3:f9:81:
9c:36:d8:bc:79:5d:a5:97:71:9f:c0:5a:b9:76:12:
b6:fe:91:82:e9:66:a4:2e:48:80:68:af:9e:9d:e2:
f5:89:5e:f5:a5:5f:3e:7b:11:d4:79:41:b1:35:b1:
f1:dc:ab:60:f0:8a:c2:05:13:15:4b:94:be:7b:e5:
e1:28:8c:98:a6:f1:a8:07:30:1e:2b:c0:0e:b0:b5:
d9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:D9:75:3C:1A:E0:08:FE:00:86:7C:11:9C:0B:8B:56:5D:B0:DC:12
X509v3 Authority Key Identifier:
keyid:44:9E:42:52:BC:B2:2E:A2:C6:CF:B3:92:4C:8F:84:BD:DE:7A:74:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RJ5CUryyLqLGz7OSTI-Evd56dHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9e9559-8f3c-45d0-851c-68f2174c79ee/1/RJ5CUryyLqLGz7OSTI-Evd56dHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9e9559-8f3c-45d0-851c-68f2174c79ee/1/RJ5CUryyLqLGz7OSTI-Evd56dHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:d6:4f:b7:1c:ba:21:0f:03:c8:db:c5:3f:e2:8f:61:bf:de:
4e:d6:2e:95:dd:e8:93:d5:21:3a:54:40:0b:e7:9f:e1:44:02:
d4:0e:ff:73:d0:9c:53:49:fc:49:95:03:ea:52:ac:08:2d:5e:
cd:42:31:a4:23:dd:3b:61:5b:cc:fd:d5:1c:22:de:f1:07:42:
bd:71:15:f0:29:ad:1f:98:c4:44:68:b7:8d:3d:54:c2:70:57:
bf:c9:01:92:a7:d1:6d:71:a0:41:41:02:69:b9:0f:62:66:c8:
aa:8b:a9:13:8b:bf:eb:a7:70:ea:5a:c2:f3:5c:61:92:71:66:
be:02:0c:0e:6c:9d:67:4f:93:e9:90:fc:fb:48:ed:4b:8a:18:
17:57:27:ba:51:72:96:db:d4:88:07:ba:4d:ef:4e:5e:80:b8:
6f:ca:dd:81:0f:ce:ee:eb:f9:ae:7d:e4:e8:87:fa:64:34:ac:
84:61:dd:53:2e:7b:53:2f:10:fb:5b:41:a4:b8:38:d1:bb:4e:
5b:17:45:d3:90:61:ec:b8:3c:37:93:7e:7f:d8:b6:d9:bf:cf:
41:28:37:cc:aa:20:bf:5e:50:cc:7b:0b:36:86:99:59:1b:b0:
7d:cf:91:97:cc:dc:a0:a4:47:d2:27:f9:0e:64:67:a5:76:17:
f2:ff:b6:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:02:23 2025 by rpki-client