Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e81e9a-74d9-4ca4-9f46-8f0f4d6b8939/1/RJRpaPL33ZUOpJuHc33x9q69u1M.mft
File: RJRpaPL33ZUOpJuHc33x9q69u1M.mft (raw, json)
Hash identifier: TU50dsL/IDVgBoIi4Ycie8dT8dGiak3F1P6vTC4pLBI=
Subject key identifier: 70:37:48:4F:1F:5D:C0:A3:25:3A:16:F0:B1:52:2D:FD:42:8F:70:83
Authority key identifier: 44:94:69:68:F2:F7:DD:95:0E:A4:9B:87:73:7D:F1:F6:AE:BD:BB:53
Certificate issuer: /CN=44946968f2f7dd950ea49b87737df1f6aebdbb53
Certificate serial: 0196575CF586516558416006AEB6F087B3D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RJRpaPL33ZUOpJuHc33x9q69u1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e81e9a-74d9-4ca4-9f46-8f0f4d6b8939/1/RJRpaPL33ZUOpJuHc33x9q69u1M.mft
Manifest number: 0658
Signing time: Mon 21 Apr 2025 08:00:31 +0000
Manifest this update: Mon 21 Apr 2025 08:00:31 +0000
Manifest next update: Tue 22 Apr 2025 08:00:31 +0000
Files and hashes: 1: FtKrNsRbY8YEqsyb0llCUh6obSk.roa (hash: kVlJmS/e2jizfjPWD/a9+A6kgYpw3ZZGXljSwiyx0q0=)
2: RJRpaPL33ZUOpJuHc33x9q69u1M.crl (hash: iVcgS5d/V0NpTNsG3wXdrZCF5oMGB/8bdv2SKAjSUOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/e81e9a-74d9-4ca4-9f46-8f0f4d6b8939/1/RJRpaPL33ZUOpJuHc33x9q69u1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/e81e9a-74d9-4ca4-9f46-8f0f4d6b8939/1/RJRpaPL33ZUOpJuHc33x9q69u1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/RJRpaPL33ZUOpJuHc33x9q69u1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:5c:f5:86:51:65:58:41:60:06:ae:b6:f0:87:b3:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44946968f2f7dd950ea49b87737df1f6aebdbb53
Validity
Not Before: Apr 21 08:00:31 2025 GMT
Not After : Apr 22 08:00:31 2025 GMT
Subject: CN=7037484f1f5dc0a3253a16f0b1522dfd428f7083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:45:10:6d:47:aa:6b:b6:8e:4e:f2:1b:67:72:
97:2f:f1:f9:ac:0f:b0:aa:33:1f:11:9d:a8:03:32:
26:33:9a:fd:93:82:a2:43:43:61:ec:46:a1:cd:ab:
2b:6c:df:b2:af:fc:61:05:13:9b:cc:7e:37:0d:3b:
c9:52:f5:d5:73:54:93:cc:f6:a2:58:08:88:31:e6:
10:70:46:ca:34:d7:52:9e:b6:80:a3:16:6a:8a:d6:
e5:36:4b:45:4a:ae:f1:2c:29:b4:57:06:40:cd:c5:
8a:1b:57:59:e4:d8:c3:d9:59:6c:2e:99:e4:5c:58:
eb:6d:98:46:e2:d8:0a:90:fd:37:d8:96:ac:a5:59:
35:73:cb:cd:07:3e:7d:23:ea:08:65:fb:21:ae:ab:
f1:1b:50:c2:eb:ad:3f:0a:70:fd:f0:d2:4f:d6:e9:
4c:23:34:e9:3e:e6:8d:01:c3:f9:ed:2c:15:95:a3:
0a:8e:dd:68:67:bd:a3:16:89:aa:2b:83:54:9a:a9:
d4:8f:25:f5:ba:bb:88:4d:08:54:a2:6a:3c:7d:1c:
80:a8:29:68:b3:43:06:b3:c1:2c:1b:31:2a:f5:c5:
ed:7f:4c:49:30:50:ca:40:ab:00:c8:81:00:1d:e4:
d6:4a:11:2f:3b:13:a2:f6:ab:38:e0:c6:73:7d:05:
c6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:37:48:4F:1F:5D:C0:A3:25:3A:16:F0:B1:52:2D:FD:42:8F:70:83
X509v3 Authority Key Identifier:
keyid:44:94:69:68:F2:F7:DD:95:0E:A4:9B:87:73:7D:F1:F6:AE:BD:BB:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RJRpaPL33ZUOpJuHc33x9q69u1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e81e9a-74d9-4ca4-9f46-8f0f4d6b8939/1/RJRpaPL33ZUOpJuHc33x9q69u1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e81e9a-74d9-4ca4-9f46-8f0f4d6b8939/1/RJRpaPL33ZUOpJuHc33x9q69u1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:af:54:7b:83:3c:89:28:4a:59:e3:98:c3:35:48:02:55:bb:
f8:c8:a4:e4:eb:70:ce:74:d2:83:6c:99:af:fa:ab:d9:c5:d5:
34:fb:83:ca:6a:97:a0:cf:04:53:09:a3:56:0e:e9:57:f2:d9:
9e:84:6d:81:ed:28:9a:cf:17:42:1b:e6:72:50:b8:cd:41:3b:
2b:2d:de:b2:db:f4:cd:c6:2d:61:c6:2f:b7:be:3a:f9:8d:a9:
d3:34:3b:6f:c5:2e:f0:d9:fd:13:31:9a:dc:c5:de:71:35:81:
7f:ab:70:b7:f1:21:85:c0:9f:e2:43:e2:66:4c:2e:16:53:1b:
8d:f5:12:a8:61:d6:53:90:f4:80:75:4b:26:f5:bf:6b:68:11:
e5:45:37:82:72:c3:59:36:7d:c1:a7:ff:36:a2:f5:cd:18:9c:
b3:71:fb:93:87:ea:cb:70:7b:aa:8e:9a:5d:18:14:30:15:26:
8c:55:38:46:06:11:51:68:c4:f4:bb:f4:a3:9f:9e:b4:c0:b5:
75:0f:88:94:f0:5f:d9:a5:0b:9e:bd:ff:e7:d4:5e:d0:dc:86:
e6:db:49:8e:c9:dc:21:96:26:3f:6f:96:43:a2:af:25:0d:b3:
26:a2:0b:b4:22:39:4a:38:09:ce:61:fb:1f:22:ae:2a:c7:7a:
40:ce:be:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:03:11 2025 by rpki-client