Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.mft
File: Rj-RcHf489DjOMdC6iHWQ1jRnVI.mft (raw, json)
Hash identifier: Ouxnw4JJ+E9Cb+XkWjsh7tMFh9jtjewJlMV9A+lP8jY=
Subject key identifier: EE:46:20:54:74:A3:A8:FF:02:85:4A:77:A0:4D:D3:65:5E:53:0A:21
Authority key identifier: 46:3F:91:70:77:F8:F3:D0:E3:38:C7:42:EA:21:D6:43:58:D1:9D:52
Certificate issuer: /CN=463f917077f8f3d0e338c742ea21d64358d19d52
Certificate serial: 019615467A0AB902A0B3D1B0C3FF8BDB8A4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rj-RcHf489DjOMdC6iHWQ1jRnVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.mft
Manifest number: 0445
Signing time: Tue 08 Apr 2025 12:01:02 +0000
Manifest this update: Tue 08 Apr 2025 12:01:02 +0000
Manifest next update: Wed 09 Apr 2025 12:01:02 +0000
Files and hashes: 1: K-1cBvMFbalkBJFw0sJ7i1WTZEs.roa (hash: 3Ikel/xplePBRCnzN26gvmaI2UYrfX6N2d00Q4SBcaQ=)
2: Rj-RcHf489DjOMdC6iHWQ1jRnVI.crl (hash: tRToIdo6xVjqurMRYIP8Ag0ce/5wD03IJtC9SnMazeM=)
3: cpmcqEkiElTb72sko05fp48X-FM.roa (hash: xqlsImmQ/9E7U68AUDQtcRJOydRd1Euow8hua9KaN+Y=)
4: moiKPG2LP_pIBJ3oE3uKFFimTvs.roa (hash: 7/+kCaotJP3wY1l3ZzCfImaKj4/imFC7lov/Lv+DrVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rj-RcHf489DjOMdC6iHWQ1jRnVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 12:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:15:46:7a:0a:b9:02:a0:b3:d1:b0:c3:ff:8b:db:8a:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=463f917077f8f3d0e338c742ea21d64358d19d52
Validity
Not Before: Apr 8 12:01:02 2025 GMT
Not After : Apr 9 12:01:02 2025 GMT
Subject: CN=ee46205474a3a8ff02854a77a04dd3655e530a21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:32:d4:af:75:13:d1:95:e7:56:5f:5d:91:d7:
7a:66:19:5a:f0:a4:56:27:0a:29:8d:20:ec:fd:c0:
1e:42:a8:0b:7a:ad:3d:80:9d:dd:b3:62:9c:a5:d8:
4a:9e:00:2f:66:8d:17:c5:07:0b:94:74:5b:f0:29:
22:b9:9e:de:01:2d:c6:b4:a2:db:df:3f:c7:e8:5f:
41:29:ad:a1:af:70:aa:d8:6d:90:11:60:67:89:fe:
00:f3:37:c1:be:71:41:ef:e7:25:ed:1f:b8:6e:a6:
50:66:66:4c:2c:69:19:42:2d:e8:72:ed:54:ef:bc:
3d:08:ee:9b:9c:3b:10:0e:60:6e:7b:1d:6e:94:3b:
ea:3e:25:59:62:cb:c5:f3:5e:5d:e7:21:b5:19:b1:
40:b6:44:c5:2e:19:17:24:22:71:83:cd:63:65:c1:
35:bf:18:77:71:dd:af:49:65:6b:d2:9e:86:81:96:
f0:81:5e:8d:41:c0:ce:68:d6:36:fe:31:65:15:e2:
33:ee:f4:dd:7b:d7:17:ae:17:24:f5:ac:6b:5f:e1:
ca:d1:97:80:4f:94:7a:f5:7b:b7:0f:1d:95:91:95:
80:1d:3a:55:0b:13:55:c7:bf:33:7a:66:1b:8c:f4:
85:50:32:55:1e:43:b8:31:8a:2d:87:fb:c1:70:b1:
08:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:46:20:54:74:A3:A8:FF:02:85:4A:77:A0:4D:D3:65:5E:53:0A:21
X509v3 Authority Key Identifier:
keyid:46:3F:91:70:77:F8:F3:D0:E3:38:C7:42:EA:21:D6:43:58:D1:9D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rj-RcHf489DjOMdC6iHWQ1jRnVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:b0:11:fe:8d:0a:df:eb:f5:a4:01:42:e2:e0:6a:a2:b9:e7:
67:06:ac:34:a6:f0:4b:a2:ca:1e:8c:ef:0e:ec:a2:90:09:76:
5a:93:84:86:93:94:f4:65:96:c5:a6:ca:f3:d1:72:5b:75:fa:
f5:41:70:75:18:ec:f2:d2:56:ef:02:1d:63:fa:d4:3c:4d:59:
90:e9:48:be:53:9c:b5:f8:35:05:33:4a:2b:69:5c:dc:58:09:
78:23:ff:de:78:1b:d8:63:71:bd:c2:25:7a:ee:da:03:3b:9a:
58:e2:27:2a:83:e1:8c:d4:9a:e9:2c:47:16:7c:c6:c7:e8:be:
e0:6c:92:0c:5c:05:46:02:54:cd:b6:fb:86:18:c7:0e:3e:62:
96:3e:ba:6b:d3:96:fd:97:72:15:09:38:80:6f:71:f7:1e:a1:
52:5d:f3:c7:05:20:48:85:31:2b:96:cb:ec:f7:3c:41:98:bd:
40:e6:5b:32:2d:2e:46:c0:b5:d5:53:61:a5:a7:fb:f9:2c:5c:
91:11:9e:39:c2:03:44:99:28:aa:c1:72:db:5c:e6:8c:9e:9d:
9a:de:55:f5:33:fa:71:22:3c:da:10:2b:33:af:61:90:86:35:
74:41:ed:69:8c:43:3d:81:47:2a:fb:20:03:79:99:e9:39:ed:
1b:54:6c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:07:01 2025 by rpki-client