Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.mft
File: RbmFSwRFlObPCEb7Qd57CQj7X3I.mft (raw, json)
Hash identifier: TZ1n6RvJr4ImNdeK1tDKd6cy62Vv0GmLOIU5nOnko0w=
Subject key identifier: 9A:33:BA:CF:43:2E:6E:DF:D9:5D:82:84:B9:0E:DC:40:9C:D5:C2:18
Authority key identifier: 45:B9:85:4B:04:45:94:E6:CF:08:46:FB:41:DE:7B:09:08:FB:5F:72
Certificate issuer: /CN=45b9854b044594e6cf0846fb41de7b0908fb5f72
Certificate serial: 019629726ABDA4FFC21BC5EB7B4419E51DD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RbmFSwRFlObPCEb7Qd57CQj7X3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.mft
Manifest number: 14EF
Signing time: Sat 12 Apr 2025 10:01:26 +0000
Manifest this update: Sat 12 Apr 2025 10:01:26 +0000
Manifest next update: Sun 13 Apr 2025 10:01:26 +0000
Files and hashes: 1: RbmFSwRFlObPCEb7Qd57CQj7X3I.crl (hash: MKS1uM9/dQ6YR0ioQ3X9882/zvm324ggSzwxsThEHfQ=)
2: uD_ngmtNEJDgxKTmDs0dfRFETyw.roa (hash: 4vDT31Aj0L6dgxcGHMciEeqVCA7CQgG4yXo6DYN6amk=)
3: yu9wHeNN9TadONpdFJDPVyyoWGY.roa (hash: PEOTovTwm3OBSyT0paVn7ex6UZ0Hs/vcgcpTRm80FKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/RbmFSwRFlObPCEb7Qd57CQj7X3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 10:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:29:72:6a:bd:a4:ff:c2:1b:c5:eb:7b:44:19:e5:1d:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45b9854b044594e6cf0846fb41de7b0908fb5f72
Validity
Not Before: Apr 12 10:01:26 2025 GMT
Not After : Apr 13 10:01:26 2025 GMT
Subject: CN=9a33bacf432e6edfd95d8284b90edc409cd5c218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:50:1f:0b:e5:f1:f1:b6:a1:88:72:15:da:6b:
da:97:54:c3:86:22:07:7e:bd:82:bb:3d:95:be:1c:
3c:42:33:45:6f:0f:cd:04:ef:ff:cd:5f:8c:86:18:
f6:3a:d8:95:5b:3d:1c:bc:fa:b2:03:23:a7:a5:aa:
2b:7d:45:83:48:bb:b1:d0:59:11:c4:15:21:1c:c9:
c1:f4:4f:1f:81:61:cf:9d:ab:a4:37:2b:d1:f4:65:
45:9e:2c:c8:71:09:8b:52:93:08:ca:8b:98:d7:0e:
90:69:a1:9d:c3:df:21:51:2c:3d:c5:e4:86:2c:8e:
89:6e:11:09:2b:0f:ef:d2:42:5f:41:03:48:13:0e:
bd:5c:00:52:22:d3:2d:44:fd:bb:45:99:cf:76:fd:
c3:c9:58:c7:49:0f:ee:49:15:70:44:10:82:3f:04:
44:bc:80:6d:3f:12:cd:07:f2:5d:1f:c0:b5:6c:05:
a2:31:2b:3f:f7:27:ba:f3:b8:f2:ed:c9:9f:2c:fc:
9e:3a:5b:77:68:4d:e9:ca:e9:b7:ef:a4:55:7b:48:
7d:16:0e:35:85:e1:3d:b7:f7:fd:cf:f2:7b:30:0b:
46:05:69:80:13:bc:cc:fb:8b:f5:09:f8:d5:d7:1b:
6b:01:e7:21:68:27:51:c1:21:05:30:81:08:47:41:
7e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:33:BA:CF:43:2E:6E:DF:D9:5D:82:84:B9:0E:DC:40:9C:D5:C2:18
X509v3 Authority Key Identifier:
keyid:45:B9:85:4B:04:45:94:E6:CF:08:46:FB:41:DE:7B:09:08:FB:5F:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RbmFSwRFlObPCEb7Qd57CQj7X3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:32:c1:4f:f5:dc:d2:05:ab:68:4f:68:e9:7a:4c:33:6f:e1:
9f:2a:ad:4f:73:55:b7:c1:03:bd:8d:9f:4c:e7:e9:41:37:01:
49:95:e3:8b:25:25:9e:d0:e1:fe:d9:1c:dd:f4:a9:c9:c0:65:
a5:03:96:d3:e7:df:9a:90:18:cf:ab:b8:93:16:9f:15:ad:58:
d2:f3:eb:db:dc:38:12:37:cd:76:d5:41:3d:39:bc:18:8d:ac:
c7:2b:8f:d1:d1:a9:91:0b:ed:e0:c6:b7:04:92:59:6a:fd:c5:
ec:95:54:04:c4:aa:de:e5:2d:46:80:39:6d:2a:91:0c:23:e9:
15:21:a1:36:a5:0f:dc:70:33:7c:35:39:98:bb:46:c0:a8:a1:
1b:50:74:0d:da:dd:88:23:2a:4b:53:ad:49:23:99:36:08:0e:
58:4b:ea:39:b4:83:5e:7b:3d:a1:8f:d0:80:3c:9d:4e:fa:29:
e8:a5:2c:79:42:be:51:76:10:a0:a1:29:13:75:32:a8:7e:30:
fe:69:7a:9d:c6:93:4f:5a:e8:ef:b8:44:69:87:dc:f6:e3:07:
db:f4:aa:12:a6:20:88:59:36:6e:71:22:f7:b3:4c:10:a9:d2:
de:2f:6a:1e:af:d5:b8:6f:e9:74:f8:2b:f5:c7:d7:15:58:02:
5e:89:36:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 18:19:34 2025 by rpki-client