Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
File: RS59h5IhKd-QxIcNoqdzhARySFg.mft (raw, json)
Hash identifier: ITVYjwHB/gHSvQm8R0pOX/3PjuwDp5epJ1RN5k3FJ/0=
Subject key identifier: 86:F9:F3:80:CA:CA:04:28:8F:CF:C4:17:41:44:E5:74:AB:E6:D6:64
Authority key identifier: 45:2E:7D:87:92:21:29:DF:90:C4:87:0D:A2:A7:73:84:04:72:48:58
Certificate issuer: /CN=452e7d87922129df90c4870da2a7738404724858
Certificate serial: 019603E4EAF5DE3AA2A6934D013622CFC8BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
Manifest number: 0329
Signing time: Sat 05 Apr 2025 03:00:56 +0000
Manifest this update: Sat 05 Apr 2025 03:00:56 +0000
Manifest next update: Sun 06 Apr 2025 03:00:56 +0000
Files and hashes: 1: 4ZmOjsOwgULv_B_QMvBBmXG9f0w.roa (hash: x7k9BFugEad58s4inzjh5oIEa4SPB8OHd1xRzbFg5n8=)
2: BuhLOhQsyBTsy289mKisTf0E47Q.roa (hash: aKuhf01k9TU7vUcFwfvkZL/qxoA5uBGJCmVJQlfg6tY=)
3: RS59h5IhKd-QxIcNoqdzhARySFg.crl (hash: Jv3Jhv736mubUSo8ra5+QLVRQ9d5lkK+UPqar0/jzMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 03:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:03:e4:ea:f5:de:3a:a2:a6:93:4d:01:36:22:cf:c8:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=452e7d87922129df90c4870da2a7738404724858
Validity
Not Before: Apr 5 03:00:56 2025 GMT
Not After : Apr 6 03:00:56 2025 GMT
Subject: CN=86f9f380caca04288fcfc4174144e574abe6d664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:52:7e:64:c2:ca:47:32:da:92:8e:bf:cd:28:
b2:50:f6:29:6e:ff:ab:5c:37:7e:ee:c3:eb:fb:ca:
79:69:00:99:41:4f:4f:45:d9:43:be:15:24:78:4a:
85:02:9a:31:5b:23:23:97:b7:3c:f0:20:e8:aa:7b:
e7:82:14:e9:2f:85:a5:95:83:15:62:45:5d:1a:b6:
1c:f6:55:37:bd:83:5e:29:4a:23:49:35:fc:d4:13:
3b:7e:0b:52:f8:cc:6d:c6:3e:88:78:91:93:a2:c0:
d1:ef:69:39:73:1c:35:74:ee:51:49:72:0b:aa:b3:
d0:7f:c4:ca:9c:77:46:f3:02:b6:26:03:b1:0c:22:
bd:d0:ea:34:42:23:05:eb:4f:d0:41:62:22:d3:8f:
20:89:4a:cc:7e:4c:ba:4f:5c:e2:24:2c:4f:ab:5d:
f8:b6:b4:ac:fe:38:04:8b:36:54:a7:8e:a1:1e:a7:
7d:be:52:b3:24:95:b1:01:d4:b7:ff:d5:a4:ce:29:
36:d8:85:f5:49:d5:45:eb:b1:07:78:fc:4f:91:30:
91:d7:6a:fb:a4:81:99:5e:12:c0:14:0f:e4:66:25:
a3:f0:97:15:4f:c4:99:cf:9d:4f:ee:e8:1a:df:79:
a8:fe:9a:f6:aa:9d:0e:d1:5a:23:6b:7d:e8:1c:90:
38:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:F9:F3:80:CA:CA:04:28:8F:CF:C4:17:41:44:E5:74:AB:E6:D6:64
X509v3 Authority Key Identifier:
keyid:45:2E:7D:87:92:21:29:DF:90:C4:87:0D:A2:A7:73:84:04:72:48:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:bf:e8:be:29:d1:0c:9f:f1:b8:07:7b:67:0f:3c:14:6d:b6:
b0:0d:4f:29:10:c1:4d:14:9e:31:55:cb:14:7a:57:72:f5:fc:
7b:0d:ad:d1:04:38:a7:94:36:40:69:1e:84:d8:85:3f:a3:5e:
83:f8:c2:42:56:b1:03:12:ca:95:9b:c5:f0:6e:60:a7:a9:54:
cd:71:9f:81:3a:54:28:33:b3:5b:05:97:9a:c4:ac:7c:14:8f:
c8:66:e8:01:9b:36:a7:31:cb:f6:b1:51:ac:f1:e9:d9:b7:7c:
91:ff:7e:1c:3b:81:26:3f:0e:91:c3:81:b4:25:78:c4:1d:40:
b6:b5:87:2c:06:db:7f:45:e9:be:63:d1:67:f8:aa:e6:10:1a:
43:46:4a:8d:4e:18:83:1b:69:e8:2c:0b:79:59:dc:f1:09:3a:
57:39:ac:d3:bf:75:bd:07:52:34:06:27:4d:9a:f1:8b:9d:b4:
19:6b:cd:ed:48:dd:84:8f:c8:fc:e9:b1:bd:10:42:1a:a2:dc:
d8:43:25:5c:55:a0:16:1c:8f:e1:90:2e:9a:f2:40:90:98:e0:
98:ad:0b:4f:44:f9:62:f3:44:a8:ec:ad:c0:d3:35:03:3e:7d:
99:87:c3:9a:95:ae:0d:c0:37:fa:17:16:fe:06:99:73:17:37:
de:b9:6a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:21:21 2025 by rpki-client