Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/r-b4yudJLQZOAwcckUc5Lu3UW8c.mft
File: r-b4yudJLQZOAwcckUc5Lu3UW8c.mft (raw, json)
Hash identifier: ntWXHNjGnnaFzETlRXWg+xwHU6zRuy4Htq3bkN38XtU=
Subject key identifier: 56:AD:CD:2A:E0:E4:4A:CE:65:DB:20:5D:53:57:D7:1E:7F:7E:74:5E
Authority key identifier: AF:E6:F8:CA:E7:49:2D:06:4E:03:07:1C:91:47:39:2E:ED:D4:5B:C7
Certificate issuer: /CN=afe6f8cae7492d064e03071c9147392eedd45bc7
Certificate serial: 0196553755E09CA5E0A481B97A3F68786CD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-b4yudJLQZOAwcckUc5Lu3UW8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/r-b4yudJLQZOAwcckUc5Lu3UW8c.mft
Manifest number: 0FBF
Signing time: Sun 20 Apr 2025 22:00:11 +0000
Manifest this update: Sun 20 Apr 2025 22:00:11 +0000
Manifest next update: Mon 21 Apr 2025 22:00:11 +0000
Files and hashes: 1: H4Dt1RaXNjrSuf7dIzKd6HI74Xw.roa (hash: 1FMAIN7AWHSRrarcSi8q0q/CcQ+uq+tcfRyHiGa5Hko=)
2: kemSd2KPq5UUT0EZWa92ek2Cwpc.roa (hash: kh0wd5NltixPwrZZXBgelPgGkebz79/WC48Vz4n628s=)
3: r-b4yudJLQZOAwcckUc5Lu3UW8c.crl (hash: 94YkIFctIXYuHUgH7IOg9ldLyllyuHODe8aplpujYsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/r-b4yudJLQZOAwcckUc5Lu3UW8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/r-b4yudJLQZOAwcckUc5Lu3UW8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-b4yudJLQZOAwcckUc5Lu3UW8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:37:55:e0:9c:a5:e0:a4:81:b9:7a:3f:68:78:6c:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afe6f8cae7492d064e03071c9147392eedd45bc7
Validity
Not Before: Apr 20 22:00:11 2025 GMT
Not After : Apr 21 22:00:11 2025 GMT
Subject: CN=56adcd2ae0e44ace65db205d5357d71e7f7e745e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:1e:cf:e3:30:1c:9c:77:94:04:b3:00:a3:ee:
62:94:8c:57:b1:51:a8:02:78:4e:0c:9e:50:fa:07:
66:2f:44:a9:dc:5c:0b:97:3b:b6:55:d2:2c:7d:d8:
a9:52:8c:ee:6f:ea:7a:f9:57:07:71:27:18:92:af:
90:86:32:08:f7:2d:1a:1a:e3:b7:85:b0:ed:fe:d8:
c1:a2:d1:47:9d:c2:c7:97:e9:24:96:f8:10:5f:43:
7c:f8:01:b6:d6:ad:57:a1:66:32:8e:0a:0e:de:5c:
f2:00:b4:98:a0:5b:9d:4b:92:6e:20:29:55:14:be:
a7:56:52:8d:1b:3f:74:80:71:09:1f:a9:55:29:25:
c6:d4:2f:97:f9:4f:d0:73:9f:e5:f5:fd:35:25:4f:
6a:f5:cc:89:2d:90:48:3b:3c:c8:c1:d3:0c:bb:70:
22:5e:b5:fd:bb:6a:b8:c4:cb:02:b9:9c:ee:9c:34:
be:84:03:54:92:ae:44:58:13:77:77:29:6e:ed:5e:
37:3a:07:b1:44:3f:04:24:ee:b7:1c:e7:69:a5:8f:
f4:64:5b:08:c8:cb:28:24:b6:9f:46:77:78:3b:c9:
1d:03:9d:d3:de:33:df:b0:d2:61:36:ed:50:d2:3c:
81:3c:6e:62:82:86:0c:bb:6f:fd:59:05:39:c4:92:
59:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:AD:CD:2A:E0:E4:4A:CE:65:DB:20:5D:53:57:D7:1E:7F:7E:74:5E
X509v3 Authority Key Identifier:
keyid:AF:E6:F8:CA:E7:49:2D:06:4E:03:07:1C:91:47:39:2E:ED:D4:5B:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-b4yudJLQZOAwcckUc5Lu3UW8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/r-b4yudJLQZOAwcckUc5Lu3UW8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/r-b4yudJLQZOAwcckUc5Lu3UW8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:1b:1b:9a:84:d1:97:0f:1b:68:f7:1d:45:d3:52:af:bf:8c:
d3:b9:16:84:2b:56:c6:27:1f:0e:f2:39:b2:02:0c:cd:d5:1d:
9d:5a:12:d5:5f:14:9a:05:1e:15:ab:70:d5:13:a2:45:c4:aa:
ea:c8:0f:9a:a3:ae:e1:28:fc:ee:19:1b:b8:71:91:59:2b:a1:
bc:85:08:2c:9b:00:b0:ac:a1:8f:d5:4e:ca:83:ee:df:04:99:
50:f1:f8:54:9a:cd:a6:81:f6:27:d6:18:a3:0b:f6:d2:d5:4a:
8f:38:0b:09:d0:96:31:15:d5:eb:35:a0:51:bc:35:0e:a2:38:
4f:7b:e7:0c:23:85:96:44:b4:36:4d:ba:88:fd:01:ec:74:a8:
72:6c:c3:0b:67:ff:f8:e2:9d:d8:5a:dc:e9:e1:ec:8d:75:33:
15:79:a9:88:4c:44:2f:01:f5:22:12:36:f5:f4:3f:b6:2f:c8:
d4:5f:be:ab:e2:40:ce:63:be:cf:0d:7f:74:29:26:43:b1:7e:
c8:77:23:88:d1:80:e1:c3:30:26:ee:09:51:3a:a0:bf:ab:e4:
24:bf:ea:a1:b0:42:56:52:16:ae:85:32:96:2d:0b:79:63:54:
02:60:af:e7:08:73:4e:a0:92:08:39:57:2c:ba:fa:f1:72:f3:
9c:d8:d3:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:47:20 2025 by rpki-client