Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.mft
File: RFHoPa4So3HB3UnbNNm9Uqloi0o.mft (raw, json)
Hash identifier: AfEkxlqW44IgX/reQQBOGuBN/qYV06hMwW6Ka8Kmijk=
Subject key identifier: 47:72:59:2D:06:1F:05:F3:7B:2A:C6:10:74:EC:D7:E6:65:C5:66:B2
Authority key identifier: 44:51:E8:3D:AE:12:A3:71:C1:DD:49:DB:34:D9:BD:52:A9:68:8B:4A
Certificate issuer: /CN=4451e83dae12a371c1dd49db34d9bd52a9688b4a
Certificate serial: 01965A272C767CBCD79D3D7A2F1CE7AFCE99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFHoPa4So3HB3UnbNNm9Uqloi0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.mft
Manifest number: 0762
Signing time: Mon 21 Apr 2025 21:00:38 +0000
Manifest this update: Mon 21 Apr 2025 21:00:38 +0000
Manifest next update: Tue 22 Apr 2025 21:00:38 +0000
Files and hashes: 1: ET2huy81m3aucqPbuMYcz_TF2tw.roa (hash: E/ipcayMB6DPjVGiBr8hCFyBMlmTehPjlv7rgttgSjU=)
2: RFHoPa4So3HB3UnbNNm9Uqloi0o.crl (hash: 7h+QFBrcOD+ZzwwCPTyQBnWNzJn3efz7V2sCIEzMKF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFHoPa4So3HB3UnbNNm9Uqloi0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:27:2c:76:7c:bc:d7:9d:3d:7a:2f:1c:e7:af:ce:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4451e83dae12a371c1dd49db34d9bd52a9688b4a
Validity
Not Before: Apr 21 21:00:38 2025 GMT
Not After : Apr 22 21:00:38 2025 GMT
Subject: CN=4772592d061f05f37b2ac61074ecd7e665c566b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:0e:5e:18:af:29:a3:8f:51:b3:6f:42:a5:4e:
7a:2c:61:34:a6:25:c4:c2:f5:38:3c:6d:d8:71:9a:
f6:93:cc:e3:57:6d:b2:c9:04:7a:8a:0d:23:33:49:
7e:8b:d4:aa:f2:ff:37:60:6d:79:88:b8:d3:e0:71:
57:1a:18:8b:f8:a9:c5:27:f9:70:3c:3c:9c:10:5e:
8a:39:01:f9:99:be:f2:cf:79:43:84:99:bc:99:05:
2a:3e:f3:ec:63:61:71:cb:a1:e8:9d:18:c7:64:24:
75:70:5d:a7:99:16:a3:82:b2:dd:da:d9:e1:cb:28:
69:e5:74:4b:5f:3c:1e:d8:1a:ad:7c:e0:6a:84:78:
f7:92:b1:3b:55:ec:67:1a:1c:a0:8e:a4:7b:b8:e4:
e0:be:66:17:44:cd:a6:7d:51:51:fb:68:3b:37:2a:
0f:59:2b:14:c8:c1:1a:23:51:ed:b3:d5:9d:2a:e8:
9a:46:96:b5:9b:c7:db:0e:bf:18:7e:96:92:49:26:
14:2c:55:9a:fe:ea:c4:d0:29:0c:70:bf:ff:6e:ac:
19:2f:e7:75:1d:a4:18:61:50:7f:88:ec:0b:db:ae:
99:62:50:7c:53:32:b1:05:07:14:09:d9:1b:28:be:
52:0c:3e:19:c9:13:10:14:65:08:4a:06:9e:9b:c8:
37:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:72:59:2D:06:1F:05:F3:7B:2A:C6:10:74:EC:D7:E6:65:C5:66:B2
X509v3 Authority Key Identifier:
keyid:44:51:E8:3D:AE:12:A3:71:C1:DD:49:DB:34:D9:BD:52:A9:68:8B:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFHoPa4So3HB3UnbNNm9Uqloi0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:9d:59:09:24:84:90:59:bf:f8:9b:47:e8:09:5e:60:56:c1:
b4:bc:13:86:71:68:b8:fe:76:c5:fd:11:5c:2e:57:a3:a8:fe:
e9:bd:69:4c:e3:14:46:d0:ac:89:e9:b7:3f:55:43:b5:4f:02:
02:74:25:db:b9:11:fe:ae:27:62:5a:5c:d3:c6:05:71:e3:bb:
fd:47:e4:c8:52:00:58:cc:f2:96:4e:28:ab:77:a2:25:9c:a4:
9f:fb:9f:09:a4:0c:48:67:38:e1:dc:19:05:10:ee:1b:80:b9:
a4:43:96:03:0c:ae:b1:d6:47:d2:0b:6d:a5:11:13:02:34:a9:
11:f2:f8:95:0e:15:f3:f4:6c:d2:4a:3f:99:66:6f:ca:3e:27:
8e:f9:92:d4:21:be:9f:4f:de:da:24:ae:d4:9f:6f:91:47:26:
b4:f6:a1:63:f9:36:e8:91:ee:ad:72:90:30:42:03:4b:19:a1:
a9:12:29:13:63:34:29:b2:39:0d:fc:b5:60:e4:70:25:4c:50:
78:eb:83:06:d9:51:1e:72:83:ef:43:59:6b:05:0f:3c:69:77:
45:1f:0a:22:74:46:9b:5b:ef:5a:c8:eb:1f:d5:43:b6:bf:5a:
c7:a1:94:88:14:65:e4:57:0e:1e:9e:54:15:49:03:64:85:ba:
1d:bb:e7:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:31:42 2025 by rpki-client