Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft
File: ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft (raw, json)
Hash identifier: ZIltIgNNdoajGUEvWHt1jrRnQ0Dm2azeC6BRtUUosbc=
Subject key identifier: 90:44:01:F5:04:F7:13:90:A2:F7:4E:28:55:A5:38:7F:16:A9:52:B5
Authority key identifier: 45:E3:A0:C1:F1:D8:1E:E0:69:64:3B:40:C3:23:99:9B:B5:58:46:31
Certificate issuer: /CN=45e3a0c1f1d81ee069643b40c323999bb5584631
Certificate serial: 01961132D41F198673EDDC0A47D84D116009
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ReOgwfHYHuBpZDtAwyOZm7VYRjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft
Manifest number: 077C
Signing time: Mon 07 Apr 2025 17:01:05 +0000
Manifest this update: Mon 07 Apr 2025 17:01:05 +0000
Manifest next update: Tue 08 Apr 2025 17:01:05 +0000
Files and hashes: 1: ReOgwfHYHuBpZDtAwyOZm7VYRjE.crl (hash: GS1fZO7UF0uHI59dR+unZQyvJds5jt2NHgqvGvRheA0=)
2: c1218tMrC-SYY-Yo1ITctKUD9_k.roa (hash: 8AGbg1kAcimxxtZO8YTai8jQPbPTR+28UymCTknNVxU=)
3: v9XCpSvXJgFn93oqPO6QjvmDaV0.roa (hash: 2/0z9nylSvJWI46oSDGL4Lr6kTxicsj+PodL8IKe940=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ReOgwfHYHuBpZDtAwyOZm7VYRjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:11:32:d4:1f:19:86:73:ed:dc:0a:47:d8:4d:11:60:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e3a0c1f1d81ee069643b40c323999bb5584631
Validity
Not Before: Apr 7 17:01:05 2025 GMT
Not After : Apr 8 17:01:05 2025 GMT
Subject: CN=904401f504f71390a2f74e2855a5387f16a952b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:79:b4:f2:9b:0a:cc:b8:5f:8b:e4:58:a6:5a:
e1:48:b6:36:45:b0:4a:de:de:3d:00:cf:20:22:14:
42:7a:2c:b2:30:3a:ac:0a:77:20:8d:a9:99:34:c4:
f6:f4:4f:00:f2:74:12:19:d9:cc:7a:73:e5:cb:9e:
cb:f1:ce:aa:37:a2:c5:12:29:d1:f0:c4:d8:75:a3:
14:5d:8c:52:bd:db:44:ed:0a:b1:92:64:3c:25:3f:
11:56:f1:1e:64:2d:b8:32:0e:30:e3:6e:c3:48:09:
5d:5a:18:53:73:d2:70:34:b4:10:bc:d0:23:fc:67:
e8:3b:94:6e:f2:93:18:87:a8:fd:81:d2:ca:e8:67:
96:19:e6:b1:78:3f:ff:fa:9c:16:1e:a9:77:13:95:
87:a7:bb:23:de:f2:8b:92:e8:9e:4c:ae:cf:20:11:
8e:a8:32:bd:96:7e:fc:a4:b9:f6:ac:a8:ac:39:3b:
bd:25:0c:1b:4d:fb:28:08:03:8f:ce:c2:22:da:cd:
a1:8b:ba:ce:66:65:cc:e3:6a:60:fd:00:2a:d1:15:
f0:56:c3:6c:e7:98:cd:f2:21:98:02:97:e8:73:dc:
c6:e2:1b:19:b5:96:38:74:aa:2c:ff:6a:4d:cf:41:
9d:8b:5a:05:50:cf:07:b1:b8:6a:f5:f8:e3:26:9b:
1f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:44:01:F5:04:F7:13:90:A2:F7:4E:28:55:A5:38:7F:16:A9:52:B5
X509v3 Authority Key Identifier:
keyid:45:E3:A0:C1:F1:D8:1E:E0:69:64:3B:40:C3:23:99:9B:B5:58:46:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ReOgwfHYHuBpZDtAwyOZm7VYRjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:b5:06:6c:c5:10:99:23:20:1f:e9:30:77:c7:ab:44:1b:56:
22:22:82:9f:b5:ae:5f:22:9d:d0:df:5d:c5:bf:05:bb:2d:39:
49:b8:43:92:30:2a:a9:bf:09:3a:c1:f7:d3:28:d3:e1:e5:ef:
bc:04:8f:1e:d8:03:e7:ae:56:e8:7d:64:97:2d:56:46:ae:40:
cd:51:fe:fb:3f:e0:8d:c2:18:d1:51:da:43:c7:dd:9d:80:7c:
38:13:b2:6a:a7:35:ea:97:cb:75:5b:b7:7a:ca:9d:bf:fa:b9:
0e:d6:90:f4:c8:7c:70:21:33:3c:24:ee:88:1a:9c:33:6a:da:
6d:ea:2a:09:73:83:c5:86:81:29:97:78:06:f4:ec:de:f3:a7:
4d:97:72:42:55:06:7c:b8:9d:fe:0b:e0:14:6d:db:a3:35:c9:
4d:cd:e9:ac:c0:29:79:0b:9b:63:17:79:d5:c4:20:65:6c:d3:
9a:32:9d:8f:f4:4d:df:6c:0e:88:61:39:fa:15:44:6e:e3:a6:
64:a4:63:4b:1a:d0:a3:66:9f:04:40:f5:ee:5d:1c:a4:c7:00:
9b:b8:19:ad:b7:22:9c:9a:f5:71:2d:e4:40:1b:5f:74:10:80:
d3:e3:16:26:19:c0:c5:3a:52:6a:04:4b:e4:fe:03:1c:9a:9d:
52:ec:e2:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:25:01 2025 by rpki-client