Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft
File: RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft (raw, json)
Hash identifier: CQhjCriorjXMRC88xvyu9AFq80Vow7lGiblWRf5rYUk=
Subject key identifier: 93:9D:CC:7F:4E:64:DF:43:13:20:2F:5D:C5:2C:70:D9:68:C6:A9:0F
Authority key identifier: 46:03:C6:56:C1:97:46:1A:49:CA:A1:FF:D7:20:D1:8B:EE:AC:80:76
Certificate issuer: /CN=4603c656c197461a49caa1ffd720d18beeac8076
Certificate serial: 01963BAEAC4D398E0210E1CA8952599745FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RgPGVsGXRhpJyqH_1yDRi-6sgHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft
Manifest number: 02B9
Signing time: Tue 15 Apr 2025 23:00:25 +0000
Manifest this update: Tue 15 Apr 2025 23:00:25 +0000
Manifest next update: Wed 16 Apr 2025 23:00:25 +0000
Files and hashes: 1: RgPGVsGXRhpJyqH_1yDRi-6sgHY.crl (hash: 6XjRoPoVg67lIfs4xLgVrPV4U5xnALeH1Td6YBk95Q0=)
2: etkRbnW9ryrJ6e3ywwJ1q9bD7Xw.roa (hash: JMmWgxd8mijwpLVsPTeG3AKA8OAxDNzyK+lSzQE8/U0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/RgPGVsGXRhpJyqH_1yDRi-6sgHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3b:ae:ac:4d:39:8e:02:10:e1:ca:89:52:59:97:45:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4603c656c197461a49caa1ffd720d18beeac8076
Validity
Not Before: Apr 15 23:00:25 2025 GMT
Not After : Apr 16 23:00:25 2025 GMT
Subject: CN=939dcc7f4e64df4313202f5dc52c70d968c6a90f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:be:1b:60:fa:fe:f8:75:e2:b1:f0:18:d7:fc:
02:fc:72:82:67:75:e5:87:10:76:6f:32:ec:7d:67:
d0:dc:88:ca:e7:e4:50:f0:1e:af:c0:70:4f:b4:8a:
2c:f4:52:7d:1c:28:c4:a4:c8:ac:82:b0:93:79:40:
c4:90:48:bc:5d:ed:e1:74:fc:44:6e:09:ee:27:b1:
96:06:85:be:51:a4:0e:15:2e:35:e3:82:7c:db:99:
77:09:88:c5:d6:fc:7f:53:63:99:a1:86:1d:56:ac:
44:a1:68:13:eb:e8:ab:28:e3:54:c5:f4:d0:9e:99:
b4:4d:62:4c:f1:dc:66:56:57:11:75:92:a3:69:e9:
47:e5:cc:44:fb:da:df:ef:b9:51:7d:84:64:d0:96:
09:18:4f:cc:b4:da:2f:d4:d8:d5:9f:59:1e:e0:a1:
9a:5d:cb:38:b1:43:aa:eb:ea:44:4e:31:0f:67:ba:
e4:6a:36:f8:ff:d2:c2:91:e4:7f:91:d9:72:5e:87:
a0:6b:03:5e:e8:58:e8:c2:53:dd:81:81:c3:f6:d5:
4b:61:78:33:d4:4d:96:d3:84:81:03:10:0d:6d:95:
3c:ec:1b:47:48:1b:a9:5c:ef:8d:b5:fe:ad:73:86:
45:4d:c8:70:06:d2:1e:7b:c3:6e:f2:e2:4f:e1:e6:
03:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:9D:CC:7F:4E:64:DF:43:13:20:2F:5D:C5:2C:70:D9:68:C6:A9:0F
X509v3 Authority Key Identifier:
keyid:46:03:C6:56:C1:97:46:1A:49:CA:A1:FF:D7:20:D1:8B:EE:AC:80:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RgPGVsGXRhpJyqH_1yDRi-6sgHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:2c:b7:b5:cc:88:da:56:36:5c:e3:e5:4c:60:c0:2b:95:74:
95:c2:9c:2f:ac:a1:33:c5:d1:78:12:ba:bb:c9:33:77:76:a2:
2f:f2:71:7a:a6:7d:7c:bc:1f:d7:da:d2:e7:37:b2:95:be:3f:
58:7d:c8:bb:a0:ca:7c:5e:20:92:1b:7b:56:fd:b6:e7:18:91:
1e:fa:fd:91:97:39:53:4e:28:6a:c9:5e:42:ac:0a:17:d7:0b:
bf:10:03:ac:60:56:45:56:9c:e3:e9:90:06:f9:d9:3a:fa:7e:
22:d1:c2:f3:49:ff:13:37:e7:a5:dc:5f:a8:7f:cc:7d:d1:40:
de:5c:9c:0a:f5:c5:70:09:e7:f8:f0:86:6c:24:45:3f:da:d4:
cd:ca:f3:e2:08:1e:25:aa:54:89:57:4c:4d:69:cb:d5:38:03:
30:b4:38:dc:d5:e1:c1:4e:b1:34:8f:ca:c8:a3:61:77:ce:a5:
b4:1b:da:67:17:ef:57:ef:e6:4b:93:db:d6:90:de:b1:70:2f:
12:13:3c:ed:c5:17:18:b9:f5:0e:65:de:36:5f:aa:aa:6d:b9:
e0:4c:7f:3c:02:79:7c:d5:75:6c:66:66:01:e1:15:41:a3:3a:
2a:eb:5f:3e:f4:6b:3d:fe:36:c8:6c:d6:91:9c:f2:d5:e8:09:
25:2f:cd:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 07:55:16 2025 by rpki-client