Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/4e2c6e-f781-4394-9565-29c752cc5956/1/R05tfOu9CCEsqMjVka5aBrwDuXg.mft
File: R05tfOu9CCEsqMjVka5aBrwDuXg.mft (raw, json)
Hash identifier: hvikaJvDOR3jZTqSVDlVgrun7enTcSfMHH5+27MN4D8=
Subject key identifier: C2:29:07:EC:C3:73:E0:DA:29:34:A2:5F:8C:66:88:FB:29:D8:F9:11
Authority key identifier: 47:4E:6D:7C:EB:BD:08:21:2C:A8:C8:D5:91:AE:5A:06:BC:03:B9:78
Certificate issuer: /CN=474e6d7cebbd08212ca8c8d591ae5a06bc03b978
Certificate serial: 01963EE74EEE793CBC5B1B1C4A49E868AE7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R05tfOu9CCEsqMjVka5aBrwDuXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/4e2c6e-f781-4394-9565-29c752cc5956/1/R05tfOu9CCEsqMjVka5aBrwDuXg.mft
Manifest number: 14EF
Signing time: Wed 16 Apr 2025 14:01:08 +0000
Manifest this update: Wed 16 Apr 2025 14:01:08 +0000
Manifest next update: Thu 17 Apr 2025 14:01:08 +0000
Files and hashes: 1: 55UIdoVHgz_zVQ06ZwTWNV5GXvE.roa (hash: BpKkh7LDQyf6uUNi8iRnAaBEcPZvxWPd4MzDyZiEyPU=)
2: R05tfOu9CCEsqMjVka5aBrwDuXg.crl (hash: QCSoAXcEID+gxa748c3rpvjG1XZpbEFRt5WK6NLFUbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/4e2c6e-f781-4394-9565-29c752cc5956/1/R05tfOu9CCEsqMjVka5aBrwDuXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/4e2c6e-f781-4394-9565-29c752cc5956/1/R05tfOu9CCEsqMjVka5aBrwDuXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/R05tfOu9CCEsqMjVka5aBrwDuXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:e7:4e:ee:79:3c:bc:5b:1b:1c:4a:49:e8:68:ae:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=474e6d7cebbd08212ca8c8d591ae5a06bc03b978
Validity
Not Before: Apr 16 14:01:08 2025 GMT
Not After : Apr 17 14:01:08 2025 GMT
Subject: CN=c22907ecc373e0da2934a25f8c6688fb29d8f911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ef:02:d0:4c:16:f9:50:c1:e7:13:6f:05:22:
ca:80:5b:82:9b:77:b3:34:38:47:08:4a:e0:53:e8:
dd:e5:8c:04:5a:f4:f4:d3:d5:1e:c4:31:a1:6f:d4:
d6:1f:66:bc:ad:c8:3a:0d:e2:d6:80:40:85:a4:a0:
6d:13:23:c3:36:d4:93:70:09:11:f6:09:b4:a1:2a:
67:ae:c8:5e:25:ee:10:e3:3a:fa:ea:d9:2b:c8:db:
cc:3d:32:0a:5f:a2:12:ad:f7:f1:1e:65:68:9d:fa:
d4:76:f2:13:e0:75:88:29:00:bb:b2:b6:4c:12:93:
ce:db:6b:38:c5:8a:c8:bf:d2:c8:ab:16:30:1e:ef:
08:da:dd:4b:93:93:fe:45:6f:e1:18:74:6b:98:1a:
c6:9d:f1:67:ce:69:61:17:f8:50:29:76:cc:e0:82:
4a:af:bf:3c:b4:0e:2b:d8:ad:e3:ce:6f:b7:19:0f:
83:2f:07:ee:ef:b4:a2:87:7f:76:74:fb:e3:a1:98:
02:cc:39:39:37:8f:89:5d:d8:07:ba:a7:0e:18:8b:
1f:cb:3e:da:20:e5:cd:c6:12:2e:69:4c:3e:34:42:
a3:d6:85:9f:2b:8c:0e:b5:d5:fa:fe:13:3a:be:99:
0d:80:fb:3f:e6:c2:9c:8f:34:33:0b:b8:07:7c:55:
0b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:29:07:EC:C3:73:E0:DA:29:34:A2:5F:8C:66:88:FB:29:D8:F9:11
X509v3 Authority Key Identifier:
keyid:47:4E:6D:7C:EB:BD:08:21:2C:A8:C8:D5:91:AE:5A:06:BC:03:B9:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R05tfOu9CCEsqMjVka5aBrwDuXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/4e2c6e-f781-4394-9565-29c752cc5956/1/R05tfOu9CCEsqMjVka5aBrwDuXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/4e2c6e-f781-4394-9565-29c752cc5956/1/R05tfOu9CCEsqMjVka5aBrwDuXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:dd:08:f3:53:e3:48:17:c2:31:68:00:bc:4e:b2:8f:10:c5:
67:04:68:5a:d6:c5:ed:e3:2d:ff:7c:ca:23:72:d3:06:7d:fb:
b1:fa:d2:55:b3:01:8b:73:27:f5:78:78:39:68:29:4c:5b:54:
77:71:f3:44:8f:a2:77:41:d8:79:47:82:96:ec:a1:e1:8a:66:
50:3d:ef:05:06:6a:39:68:2a:99:a7:78:b5:b4:0c:bb:87:6f:
7c:95:3d:5f:b7:6a:d7:39:36:ab:16:43:50:36:6a:00:7a:ad:
aa:34:bf:74:ad:80:dc:69:d4:12:b6:45:6e:eb:ac:65:71:51:
e5:be:bd:f7:37:bf:a7:55:eb:95:02:b8:a3:91:3d:48:cb:7a:
35:31:87:9b:a4:7d:49:49:21:7f:96:50:93:9f:59:b6:07:96:
b5:52:a4:56:d5:8b:bc:28:01:ef:0d:2c:3a:94:b5:f4:be:65:
49:ad:72:e1:28:e6:6c:19:ca:2a:5c:9f:da:b2:40:38:f5:16:
4a:f0:69:3a:3d:1d:0b:f5:c5:6c:e2:2e:c0:9d:2c:fa:36:c3:
a3:a6:33:0d:7b:83:34:0a:39:15:64:0f:bd:2f:3e:48:d4:d2:
a0:e2:b4:c6:71:d1:36:eb:3a:4c:4e:20:95:c2:f3:db:80:72:
91:9c:8d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:26:49 2025 by rpki-client