Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.mft
File: RUv1gRnP6Z8XSbzZvRJHArqctxM.mft (raw, json)
Hash identifier: 538euLC5zQsIwIPdZFcXoasJX8NWNKBeTEzQ3nJdZNA=
Subject key identifier: B0:43:63:2A:4E:23:D2:69:DC:AB:4E:B6:ED:A3:51:76:A5:70:B2:26
Authority key identifier: 45:4B:F5:81:19:CF:E9:9F:17:49:BC:D9:BD:12:47:02:BA:9C:B7:13
Certificate issuer: /CN=454bf58119cfe99f1749bcd9bd124702ba9cb713
Certificate serial: 019644E900472B66F107F0C86075852F253C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RUv1gRnP6Z8XSbzZvRJHArqctxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.mft
Manifest number: 0F7D
Signing time: Thu 17 Apr 2025 18:00:42 +0000
Manifest this update: Thu 17 Apr 2025 18:00:42 +0000
Manifest next update: Fri 18 Apr 2025 18:00:42 +0000
Files and hashes: 1: 0MiQGDuP-2KHqgPkUVqX2ggP6Xw.roa (hash: NonlM+H8k9TxA6ceFqWkm9nyMbEovf9PE4ZCtGqStgk=)
2: L11MObU2nfX5tH-1x602KEbM5GM.roa (hash: HEVauMqoyVrcLnG8IoffxDGm/vSrfN8OpGRNiQEHWho=)
3: RUv1gRnP6Z8XSbzZvRJHArqctxM.crl (hash: LsbtFm9HytPrgJktZlwhCVAiU05au1wBYvZICcFNq8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RUv1gRnP6Z8XSbzZvRJHArqctxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 18:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:e9:00:47:2b:66:f1:07:f0:c8:60:75:85:2f:25:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=454bf58119cfe99f1749bcd9bd124702ba9cb713
Validity
Not Before: Apr 17 18:00:42 2025 GMT
Not After : Apr 18 18:00:42 2025 GMT
Subject: CN=b043632a4e23d269dcab4eb6eda35176a570b226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c8:ef:5b:c8:76:ab:a8:19:a3:e4:e9:4d:dd:
dc:4e:ea:84:28:c5:c6:13:99:0e:a7:14:0c:88:0b:
7c:4d:fd:b0:88:ca:68:6f:bb:67:bd:cd:fb:9a:22:
8d:cb:33:fd:e2:a1:0e:b0:c7:ca:dc:04:36:96:11:
c0:25:04:57:9d:4d:04:b4:22:8b:62:c7:62:55:71:
69:9d:00:78:69:da:79:4e:60:fb:ea:56:48:e4:19:
ce:fb:41:cb:b2:19:94:40:dd:86:6f:ca:ba:be:89:
bc:a9:7c:0a:4c:02:ad:cd:f7:93:c0:ba:d8:95:ef:
20:aa:cf:60:8d:48:1b:76:d4:91:e4:e0:9d:57:7f:
02:25:ef:40:fd:d3:6e:d1:ba:b6:4f:c9:7f:3d:81:
4f:19:b8:5b:45:3a:3b:ab:c0:78:d2:a9:27:c4:d2:
4e:8a:c5:d1:12:88:ea:29:2c:89:89:d7:08:9c:44:
7b:50:f8:49:6f:aa:e0:32:67:0a:eb:fd:21:61:30:
56:b9:dc:10:9d:b4:0b:41:2e:ee:0c:02:1f:c6:54:
1e:d3:aa:5a:b8:2b:55:e3:bf:47:cd:d3:cc:b1:9d:
86:cd:78:81:81:bf:a2:25:0c:c5:c1:16:f0:fd:c6:
03:04:ae:b5:eb:1c:a5:c8:f2:4c:30:e0:06:6c:d5:
47:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:43:63:2A:4E:23:D2:69:DC:AB:4E:B6:ED:A3:51:76:A5:70:B2:26
X509v3 Authority Key Identifier:
keyid:45:4B:F5:81:19:CF:E9:9F:17:49:BC:D9:BD:12:47:02:BA:9C:B7:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RUv1gRnP6Z8XSbzZvRJHArqctxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:31:ef:0c:45:ef:a6:ca:83:f1:2e:5d:3b:00:7f:ca:82:a5:
28:fa:1d:ce:69:0e:84:f5:eb:6b:c6:f1:45:0b:56:5d:4e:14:
89:11:80:0f:10:12:a1:85:92:10:04:8a:bc:eb:89:ac:c0:8b:
2d:d5:26:ca:a0:30:de:32:23:63:6e:59:d3:5b:33:11:ce:a8:
6b:a6:14:ad:b3:e0:00:55:26:89:85:37:92:32:1c:1a:17:da:
69:9f:86:4a:c9:c6:e9:99:e6:55:57:db:68:39:ea:87:5f:bb:
ec:1b:a5:0f:7e:f2:9b:06:61:eb:8f:0f:d9:e2:3f:0b:e0:95:
18:e5:97:f1:1e:10:14:1d:cc:81:af:60:49:88:39:61:ec:f5:
6e:17:d6:3a:ec:08:54:f2:7e:d9:c2:ff:8a:46:ad:c5:52:7b:
c6:46:2a:ea:cd:31:0d:83:9f:21:1d:cd:84:5a:ae:71:ed:bf:
35:16:b1:4c:30:7e:e7:4f:f5:ec:64:70:ca:fa:fd:b3:26:30:
4a:41:ae:d4:6e:a1:09:de:ba:6c:b9:bc:a7:a7:d6:93:dc:00:
52:11:03:88:0f:ff:2e:78:fa:f6:5a:5e:48:62:37:c3:68:41:
57:17:fb:b7:f1:f1:66:66:a4:41:f8:bc:01:ff:18:c5:49:9f:
df:b6:ae:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 02:37:41 2025 by rpki-client