Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
File: RaqI3Gdc5dw1V0v_YpDirojOCCs.mft (raw, json)
Hash identifier: odY1AcdyeEHJ3AeCg9D51TrIgo+LZ68J8oDGd8tXR2E=
Subject key identifier: FB:E0:C2:93:71:BA:6A:65:C9:D4:BE:33:B1:D7:5C:8E:58:09:FD:A1
Authority key identifier: 45:AA:88:DC:67:5C:E5:DC:35:57:4B:FF:62:90:E2:AE:88:CE:08:2B
Certificate issuer: /CN=45aa88dc675ce5dc35574bff6290e2ae88ce082b
Certificate serial: 019652DB41ACE0E48D00B09900A2E5F3A781
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
Manifest number: 11AF
Signing time: Sun 20 Apr 2025 11:00:23 +0000
Manifest this update: Sun 20 Apr 2025 11:00:23 +0000
Manifest next update: Mon 21 Apr 2025 11:00:23 +0000
Files and hashes: 1: DujgrKmrgV8xwj_6lcbB9bHCo5o.roa (hash: a4pJAHSdUiicdCyM8IfHoN84JiEF8R3+OD1p+YBz9fA=)
2: RaqI3Gdc5dw1V0v_YpDirojOCCs.crl (hash: ZKtR/0fxpYxghY6Pno/iWfkI1fDyV4fcgrxR1EVA4aU=)
3: xppN97XlpzM-dgpRtsN2V_p7lZQ.roa (hash: L5C0DF41lLv5y5vXorCy3jzo9T18wVqDFOb9OQ+U5+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:db:41:ac:e0:e4:8d:00:b0:99:00:a2:e5:f3:a7:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45aa88dc675ce5dc35574bff6290e2ae88ce082b
Validity
Not Before: Apr 20 11:00:23 2025 GMT
Not After : Apr 21 11:00:23 2025 GMT
Subject: CN=fbe0c29371ba6a65c9d4be33b1d75c8e5809fda1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:6e:eb:46:72:4a:09:aa:f4:a4:49:e1:1a:1c:
c4:81:c9:94:d9:95:e2:1c:1e:93:2f:28:cd:22:ba:
b1:f5:0a:ae:ad:3a:cc:99:a1:58:0e:39:94:ad:9d:
f3:55:16:8e:2a:4d:42:d5:2c:72:08:e7:86:52:bb:
dd:47:65:bb:85:7f:b6:5f:f8:a7:4b:2a:7a:ce:05:
32:b7:70:11:c2:33:52:c5:b9:c0:34:46:86:f7:96:
3d:c4:df:42:1e:47:3b:16:0d:e1:00:5e:ae:d7:cf:
44:56:b2:8e:84:6c:d9:66:5c:a1:0a:7c:67:79:01:
28:ae:52:b0:4e:80:df:e8:01:d3:48:bb:23:58:94:
9c:d2:7e:d8:e4:9e:ab:74:c4:45:fd:2b:3a:c3:bd:
0d:ac:a2:99:97:b0:ec:be:1e:82:b9:25:73:78:ee:
af:ca:b3:26:b8:40:30:26:0d:b8:67:c9:69:21:63:
b8:0c:f9:d0:b1:5b:05:27:4c:65:1d:bb:59:f1:f5:
12:e1:39:4d:b4:0b:9d:3b:b2:7c:da:f7:aa:18:20:
6b:84:8b:4c:65:46:94:6a:8b:e2:a3:93:12:55:d7:
f8:bc:9c:cb:37:c3:b1:86:c4:27:60:db:75:d8:7a:
bd:14:35:d6:14:1c:64:e3:dc:67:64:45:8d:fb:55:
1a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:E0:C2:93:71:BA:6A:65:C9:D4:BE:33:B1:D7:5C:8E:58:09:FD:A1
X509v3 Authority Key Identifier:
keyid:45:AA:88:DC:67:5C:E5:DC:35:57:4B:FF:62:90:E2:AE:88:CE:08:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:53:b0:f4:05:1e:b0:8e:63:d3:46:fe:1d:38:ad:9e:91:6e:
72:c4:76:f7:10:54:3d:40:de:3c:b3:6c:c6:ac:79:5c:37:f9:
c2:ae:40:79:3a:39:c6:ff:99:25:79:41:08:bb:ba:ff:99:13:
3b:ef:1c:18:a3:37:f9:35:e8:b9:08:1f:86:96:d8:f2:69:b0:
fa:2f:d7:20:c8:3c:a2:a8:3f:cf:8c:1a:2d:03:08:c2:e3:12:
b1:06:10:21:79:a4:1d:41:0d:97:25:b7:c9:35:84:82:6f:93:
45:bb:1c:a5:95:a7:86:0b:ed:80:c5:9f:5f:7a:c7:23:6f:30:
ee:a3:74:1a:7b:4f:a8:43:08:ed:87:17:cf:40:7d:9a:7c:2f:
87:09:66:92:24:54:64:b4:b8:f1:1c:91:26:41:8f:1c:7a:ff:
73:81:8b:0d:e8:30:9a:16:26:00:5e:e8:63:e8:7f:d9:2a:1f:
95:06:02:ee:c8:f7:12:2c:31:8f:42:fb:6c:24:c7:c1:4b:8d:
de:b0:61:7d:d4:c5:38:e2:90:15:61:b2:ff:91:f3:08:9d:06:
90:1c:9c:91:a6:7a:c6:4d:72:69:52:b5:58:fd:ac:36:61:cb:
99:b2:83:12:a5:bd:ba:71:68:b3:26:1b:6c:84:62:fb:98:2d:
45:47:fe:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 14:49:53 2025 by rpki-client