Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/06e27a-c039-48df-ae7e-3f8e7f103899/1/Ru0nXFpziIjVgGle3TZxWVlEeSE.mft
File: Ru0nXFpziIjVgGle3TZxWVlEeSE.mft (raw, json)
Hash identifier: fHvU/SNN6xAxtYZLgNf9O6uPkzw0kZxQXIHR05wR/So=
Subject key identifier: 97:8D:EE:00:AE:B9:AA:F6:37:DA:CF:21:1B:C1:69:C0:B3:EC:66:62
Authority key identifier: 46:ED:27:5C:5A:73:88:88:D5:80:69:5E:DD:36:71:59:59:44:79:21
Certificate issuer: /CN=46ed275c5a738888d580695edd36715959447921
Certificate serial: 01965D27D8C30C76785EDA0205C633486F65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ru0nXFpziIjVgGle3TZxWVlEeSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/06e27a-c039-48df-ae7e-3f8e7f103899/1/Ru0nXFpziIjVgGle3TZxWVlEeSE.mft
Manifest number: 0553
Signing time: Tue 22 Apr 2025 11:00:14 +0000
Manifest this update: Tue 22 Apr 2025 11:00:14 +0000
Manifest next update: Wed 23 Apr 2025 11:00:14 +0000
Files and hashes: 1: Ru0nXFpziIjVgGle3TZxWVlEeSE.crl (hash: 5GSuQO7Z2JqNvValSWvXAmZUlKVdxh57uG3i42axKEg=)
2: uOExWuSOVw3WsjvU2eYOWMWKUpM.roa (hash: hA0HItJlYM+q1aZPrXih9b73zlhaFUPXGNtsx6XoxS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/06e27a-c039-48df-ae7e-3f8e7f103899/1/Ru0nXFpziIjVgGle3TZxWVlEeSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/06e27a-c039-48df-ae7e-3f8e7f103899/1/Ru0nXFpziIjVgGle3TZxWVlEeSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ru0nXFpziIjVgGle3TZxWVlEeSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 11:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:27:d8:c3:0c:76:78:5e:da:02:05:c6:33:48:6f:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46ed275c5a738888d580695edd36715959447921
Validity
Not Before: Apr 22 11:00:14 2025 GMT
Not After : Apr 23 11:00:14 2025 GMT
Subject: CN=978dee00aeb9aaf637dacf211bc169c0b3ec6662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:22:62:3c:4d:89:14:89:b9:42:56:43:8a:38:
36:a2:4a:be:75:f6:45:7e:47:31:c1:1b:dd:90:e4:
ca:a6:53:36:5a:cb:b0:35:af:71:88:e2:0e:bf:c0:
76:cd:d8:c1:1d:81:6a:7a:4f:91:db:d6:89:bb:fd:
34:7a:72:a0:ed:39:d3:58:5f:df:f9:93:a0:bd:0f:
df:1a:a3:b6:27:72:c4:54:72:0d:51:86:2d:ce:40:
bf:f4:db:fa:a0:ec:3b:53:2a:fe:30:6d:b8:da:a2:
c3:ce:76:92:76:d2:d8:0b:ac:af:ee:9c:cc:ed:88:
bb:4e:3a:c3:5a:c2:7a:89:9c:cf:45:2d:96:0f:cd:
ad:14:58:94:11:49:7d:21:72:b6:b2:0f:ab:a5:ab:
5c:dc:49:d3:92:8e:9b:89:40:21:46:f5:ef:23:0a:
66:ce:c9:5a:40:11:38:8d:6a:25:86:77:4c:3d:72:
eb:02:69:89:96:7c:9d:0c:44:6d:e7:fb:9d:2a:3a:
22:7a:71:0f:58:b1:66:09:5a:7e:f4:72:0e:3f:03:
c2:9e:62:60:0f:12:e2:02:54:24:5a:7a:8a:1c:c1:
94:f8:99:0d:8d:4d:5b:6c:4f:51:9f:4e:1f:87:9b:
51:6d:e9:cc:72:c7:81:5c:20:02:eb:ee:1a:2f:86:
35:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:8D:EE:00:AE:B9:AA:F6:37:DA:CF:21:1B:C1:69:C0:B3:EC:66:62
X509v3 Authority Key Identifier:
keyid:46:ED:27:5C:5A:73:88:88:D5:80:69:5E:DD:36:71:59:59:44:79:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ru0nXFpziIjVgGle3TZxWVlEeSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/06e27a-c039-48df-ae7e-3f8e7f103899/1/Ru0nXFpziIjVgGle3TZxWVlEeSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/06e27a-c039-48df-ae7e-3f8e7f103899/1/Ru0nXFpziIjVgGle3TZxWVlEeSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:74:0d:bd:6a:f5:c5:b7:e3:34:98:6f:98:e5:87:8c:92:11:
aa:75:c2:21:c6:4c:b4:ff:f9:b6:3c:24:a7:b8:44:6a:25:89:
e7:af:6c:c0:25:30:24:90:e0:68:e2:c5:86:4b:a3:3b:5b:2d:
d0:a8:e1:ba:ba:3f:42:9e:1e:f5:5a:fd:a2:65:01:a4:b9:66:
46:8c:9e:1e:34:6e:91:f2:f4:74:84:ca:84:cc:53:9c:ec:62:
0d:26:7c:a8:72:de:3b:f0:34:f3:38:f9:84:48:8e:63:77:77:
fe:31:dc:5b:e7:0e:f9:ea:ad:03:1c:91:fa:d7:aa:76:ec:b0:
11:fb:a0:18:a4:23:e2:85:c0:d3:47:b6:b7:33:51:64:ba:91:
36:94:fc:8f:22:2b:0b:26:bf:c9:ae:3e:90:70:90:76:dc:3e:
e7:48:bb:b9:e2:a6:63:2f:02:94:55:5a:98:f4:d1:ce:c8:cf:
3c:c5:c4:c6:1b:f7:0e:bf:c8:bc:f1:0b:07:4b:89:32:28:c9:
0a:af:27:b7:ac:40:ec:9d:fd:78:43:d3:05:cc:da:fe:ee:97:
df:13:36:75:9d:37:42:d4:05:8c:46:a2:6d:45:49:e9:0f:06:
0a:b0:d7:bd:26:7a:59:ff:8f:ae:3a:e5:35:9f:5a:eb:6c:d1:
73:8c:22:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 19:24:21 2025 by rpki-client