Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.mft
File: RFJjMnSx2IapJ1f2UhnC51RuzfU.mft (raw, json)
Hash identifier: zu38wUPERxU6eO6whI9YZJb7J+UDrN9ytzwCAGv7ebI=
Subject key identifier: BB:A9:49:49:AE:74:8A:10:BC:6B:F0:CE:B0:8C:BA:06:62:FB:EE:89
Authority key identifier: 44:52:63:32:74:B1:D8:86:A9:27:57:F6:52:19:C2:E7:54:6E:CD:F5
Certificate issuer: /CN=4452633274b1d886a92757f65219c2e7546ecdf5
Certificate serial: 01965838C202F3DA56B631AEF16E7BC4C056
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFJjMnSx2IapJ1f2UhnC51RuzfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.mft
Manifest number: 1491
Signing time: Mon 21 Apr 2025 12:00:36 +0000
Manifest this update: Mon 21 Apr 2025 12:00:36 +0000
Manifest next update: Tue 22 Apr 2025 12:00:36 +0000
Files and hashes: 1: 1-2BRV4sfO38uFELp8sV79L0B1lw.roa (hash: APyNfY72IzRC6P6hQGMuA+VkTRyCwcNbDRlCp4K0Vjw=)
2: RFJjMnSx2IapJ1f2UhnC51RuzfU.crl (hash: VeWOEKeWT8u/NSKfx4KohInGQkt3MZVUtg5Z6twetT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFJjMnSx2IapJ1f2UhnC51RuzfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:38:c2:02:f3:da:56:b6:31:ae:f1:6e:7b:c4:c0:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4452633274b1d886a92757f65219c2e7546ecdf5
Validity
Not Before: Apr 21 12:00:36 2025 GMT
Not After : Apr 22 12:00:36 2025 GMT
Subject: CN=bba94949ae748a10bc6bf0ceb08cba0662fbee89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:cb:5a:e2:e9:4f:85:44:8f:dd:00:32:e6:aa:
e9:40:c1:da:82:15:a2:fe:53:0d:79:e0:7b:18:e1:
07:81:f9:14:84:e6:7f:c3:b7:31:cb:f5:f2:fe:6d:
bc:c9:08:bb:b5:35:ab:e8:f1:b1:39:d8:f4:e0:26:
83:85:0b:b4:6c:00:4c:1b:4c:f9:22:8b:3f:d3:d1:
35:fa:10:63:7e:60:3a:65:39:fe:50:92:df:fc:6b:
ce:5b:50:08:2a:6a:3c:88:2b:65:f3:d9:6a:8f:ca:
d4:0d:f6:6c:d4:2b:56:55:a1:06:ae:17:6c:67:31:
91:9c:bc:ad:54:ce:6c:0e:db:38:98:8d:5a:84:1f:
1a:e9:c0:73:d0:85:47:c6:c2:f0:3e:9b:01:e2:4a:
eb:fe:21:db:58:ad:9a:38:5a:ec:22:98:62:08:17:
04:37:11:2f:5c:ff:6c:8b:0e:3c:c0:66:cc:01:be:
f4:ff:d1:fb:cf:87:4a:02:69:d2:d8:8f:c0:95:0f:
57:56:96:60:f8:bb:45:a7:13:26:77:77:8a:bb:77:
34:ed:fb:d7:c0:bc:77:b3:32:f3:57:55:15:56:4f:
31:97:e0:87:16:12:e3:20:81:6d:b3:9b:b6:fb:e5:
3f:f6:12:e1:7b:6a:58:52:51:d7:6e:1c:bb:61:8a:
e5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:A9:49:49:AE:74:8A:10:BC:6B:F0:CE:B0:8C:BA:06:62:FB:EE:89
X509v3 Authority Key Identifier:
keyid:44:52:63:32:74:B1:D8:86:A9:27:57:F6:52:19:C2:E7:54:6E:CD:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFJjMnSx2IapJ1f2UhnC51RuzfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:df:5d:d5:54:8f:3e:d0:b1:1a:36:0c:2f:87:e0:31:2a:3b:
90:80:0a:04:28:56:ab:d5:27:6e:6e:18:49:33:58:65:90:4e:
85:a0:d2:b9:5f:b8:25:9b:53:a2:69:8c:b7:bd:6b:4a:12:c1:
92:3e:d4:58:b5:c9:33:84:fd:50:42:20:5f:02:82:be:5b:b4:
a7:89:d6:80:cd:c8:f6:c0:7c:4f:88:ef:12:00:aa:33:80:6d:
e5:7f:9e:54:03:a7:f2:e7:27:05:21:26:cb:0c:99:01:3d:b7:
fe:f2:92:85:e1:3a:0d:ce:27:c4:5b:c4:40:35:19:76:55:14:
30:2f:3d:b2:df:c7:e0:16:3a:c9:2c:0a:5c:5f:c7:10:23:a8:
7d:a3:a0:12:e0:c8:d9:b0:61:b5:48:9d:75:d7:e6:e8:95:81:
15:53:df:e5:da:6e:15:79:c5:28:79:84:33:cf:d8:75:6e:7d:
e2:29:f4:5d:eb:5c:c6:30:7b:4a:d2:01:7b:53:0e:fa:4b:1d:
d6:01:b0:b6:ff:60:d8:5a:cb:ec:2e:df:02:ad:41:c1:43:37:
9a:00:c4:e9:86:e5:e6:d8:e5:0f:6d:14:7b:7b:d6:a9:e8:79:
3a:e7:1b:08:d0:68:67:68:88:ac:ca:98:81:a7:ac:5b:96:b2:
97:3a:de:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:39:38 2025 by rpki-client