Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.mft
File: R0pj1P4Qo0a4EvvzWcmzN3jNQxE.mft (raw, json)
Hash identifier: 5Ehttql48CFxTUOzREiILdtUPig83wSwmaRwnf3s1qM=
Subject key identifier: FE:92:1C:09:7D:06:4E:86:27:03:DC:40:B9:6B:50:19:28:2E:C4:76
Authority key identifier: 47:4A:63:D4:FE:10:A3:46:B8:12:FB:F3:59:C9:B3:37:78:CD:43:11
Certificate issuer: /CN=474a63d4fe10a346b812fbf359c9b33778cd4311
Certificate serial: 01965838E278CC82F064A31001CFE850AA6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.mft
Manifest number: 01BB
Signing time: Mon 21 Apr 2025 12:00:45 +0000
Manifest this update: Mon 21 Apr 2025 12:00:45 +0000
Manifest next update: Tue 22 Apr 2025 12:00:45 +0000
Files and hashes: 1: R0pj1P4Qo0a4EvvzWcmzN3jNQxE.crl (hash: Diem9wmuwIHB+fXvk0rrB1s3LmwAEy8VvzSWfbcOQ0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:38:e2:78:cc:82:f0:64:a3:10:01:cf:e8:50:aa:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=474a63d4fe10a346b812fbf359c9b33778cd4311
Validity
Not Before: Apr 21 12:00:45 2025 GMT
Not After : Apr 22 12:00:45 2025 GMT
Subject: CN=fe921c097d064e862703dc40b96b5019282ec476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:33:47:46:70:32:6c:47:9c:d9:f0:90:8b:eb:
db:28:2e:ec:a4:aa:3b:4a:53:9f:3c:60:de:e5:0f:
71:0f:00:54:de:27:60:00:9b:82:c7:dc:42:14:61:
5a:00:5d:4a:b6:0b:48:a8:e5:1b:74:35:86:9a:e6:
ab:90:14:20:06:90:c1:27:8d:87:c3:c1:31:d5:2b:
3c:dd:6a:d1:75:2c:fc:87:51:ec:02:82:c4:9d:8b:
af:5f:25:d1:fd:70:f6:5a:64:a8:2e:0d:99:2d:2f:
56:e4:67:c0:88:4a:4f:12:46:87:92:97:77:21:bc:
d5:36:5c:3e:7f:a6:69:ca:8b:02:07:6f:26:15:54:
f1:de:e3:43:63:ab:8e:b7:29:0c:aa:95:64:ea:e6:
67:04:8d:9c:74:13:2d:99:a4:95:8c:b5:37:0e:f7:
d5:a2:8c:22:d2:f7:3a:ea:71:7f:bd:90:36:db:48:
07:06:66:81:01:3e:f4:da:5c:ec:54:3f:ed:a2:36:
06:6b:02:91:11:f3:a1:51:a6:d8:f0:26:3e:36:b2:
79:34:8b:ca:70:bf:9b:78:fb:2a:f7:c2:56:bc:dd:
18:75:fe:1d:66:74:7d:50:36:56:52:12:3c:f7:38:
83:c3:f8:66:75:80:c0:3a:5a:0d:d4:55:8b:8c:20:
27:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:92:1C:09:7D:06:4E:86:27:03:DC:40:B9:6B:50:19:28:2E:C4:76
X509v3 Authority Key Identifier:
keyid:47:4A:63:D4:FE:10:A3:46:B8:12:FB:F3:59:C9:B3:37:78:CD:43:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:61:9e:19:a1:c2:04:a0:ca:ac:85:f3:52:1d:48:54:49:cd:
5f:e5:43:e5:0c:a4:77:b7:ce:0c:70:c6:4e:56:a0:d3:b8:33:
e3:99:e7:5f:6a:e0:cb:11:2c:5b:e8:5f:05:1c:47:d7:fb:9f:
f7:00:40:41:87:17:78:f7:22:f1:31:7d:c4:7d:13:71:33:9b:
d1:4d:d0:a7:be:f9:b2:e4:77:75:29:49:3d:c1:45:fd:92:2b:
13:69:73:90:71:99:ce:2f:8a:8c:63:81:5e:41:9a:ac:10:96:
18:09:cd:38:54:6a:02:61:a0:31:9f:58:86:c9:05:8b:a0:a1:
e1:cc:5c:cc:aa:85:e1:dc:a1:55:39:26:25:f7:2f:6f:1a:18:
52:47:af:15:c8:fd:b4:7f:bb:7a:c6:83:5e:4c:27:a9:35:aa:
5a:bb:f7:45:10:bc:5a:12:17:47:68:5a:ec:5d:ba:5b:96:fd:
a3:58:02:d6:93:5d:ad:fc:07:8b:bc:65:28:ce:5a:5a:07:18:
b4:dd:28:c1:d3:69:da:e3:45:4b:05:ea:23:36:fe:47:21:6d:
ac:ce:29:c1:40:4d:9b:d9:d9:53:33:3d:7d:20:8a:f4:f6:e8:
1c:e0:e1:93:f2:9c:47:fd:e2:a9:82:5c:a1:08:29:81:30:8d:
fc:cf:45:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:46:13 2025 by rpki-client