Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
File: RENP2YwR2Nct84DKg-33n8wAhZ8.mft (raw, json)
Hash identifier: hBc9j6D/vjJSzDU+bz33MKFK+R1Vq9IpYxghTUsI2U0=
Subject key identifier: 5B:AD:A0:41:C4:64:34:F6:30:19:43:E5:CC:77:11:71:29:68:64:80
Authority key identifier: 44:43:4F:D9:8C:11:D8:D7:2D:F3:80:CA:83:ED:F7:9F:CC:00:85:9F
Certificate issuer: /CN=44434fd98c11d8d72df380ca83edf79fcc00859f
Certificate serial: 01963F8B7A861AA89CB1A086C3254535EFCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RENP2YwR2Nct84DKg-33n8wAhZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
Manifest number: 095D
Signing time: Wed 16 Apr 2025 17:00:27 +0000
Manifest this update: Wed 16 Apr 2025 17:00:27 +0000
Manifest next update: Thu 17 Apr 2025 17:00:27 +0000
Files and hashes: 1: 0k2RQNwafgZ-e81VbpAz2vrqb3k.roa (hash: F4mQI6q3szQ65tq8yOXleP2UVhZpsKUbEGpteoYml/c=)
2: 8V7ejxEv_GEeH4w675eVpJxAMGA.roa (hash: dpmJ8CsMRM0G3BSxOyWtbvqZ7FYrfuSdRQhIjIL3rWg=)
3: RENP2YwR2Nct84DKg-33n8wAhZ8.crl (hash: 00ImMmWnPuklIURueCPII1AW4NmzhT0ZsOzI3hKKIJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RENP2YwR2Nct84DKg-33n8wAhZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:8b:7a:86:1a:a8:9c:b1:a0:86:c3:25:45:35:ef:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44434fd98c11d8d72df380ca83edf79fcc00859f
Validity
Not Before: Apr 16 17:00:27 2025 GMT
Not After : Apr 17 17:00:27 2025 GMT
Subject: CN=5bada041c46434f6301943e5cc77117129686480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ce:92:18:15:2b:74:53:e6:80:e9:6f:0d:85:
5d:c4:9c:35:14:df:0e:19:a1:0e:e7:2a:1b:50:7c:
cf:17:58:eb:23:e3:f9:5e:8e:a0:a0:72:77:62:44:
99:59:09:1d:b9:ae:7b:71:fd:86:9a:0c:90:11:72:
a9:c3:31:e6:6a:4b:5a:06:84:19:80:04:3b:fd:3f:
91:47:68:ff:43:ab:d4:0a:9f:3d:47:76:ca:02:ce:
21:03:6c:ab:19:f9:e4:0f:17:88:9e:9b:00:8d:57:
10:98:23:49:0b:f0:54:97:72:fa:b1:0a:28:d8:61:
10:5a:df:8b:f6:54:ff:94:4d:8b:d3:f4:ee:9f:20:
b4:22:63:41:3b:79:af:ba:60:36:fd:d6:dd:18:26:
4f:4f:d8:d9:c1:e5:85:fc:25:67:24:1b:d4:f5:eb:
ce:b6:b3:ae:02:96:71:e4:8f:e4:d3:38:d0:45:8b:
61:c7:9d:8f:02:b5:e3:d4:1b:7b:f7:49:6b:74:f5:
7f:ae:12:24:ac:7d:19:1e:5d:26:d1:77:b1:54:3f:
07:ab:1f:e7:d2:8f:24:c1:cd:28:4f:9e:8c:a0:82:
de:13:48:bf:35:d6:5f:9d:01:cf:e6:47:da:48:06:
98:a6:2e:f6:22:7f:0a:52:c4:f9:d1:f3:c6:65:c2:
f9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:AD:A0:41:C4:64:34:F6:30:19:43:E5:CC:77:11:71:29:68:64:80
X509v3 Authority Key Identifier:
keyid:44:43:4F:D9:8C:11:D8:D7:2D:F3:80:CA:83:ED:F7:9F:CC:00:85:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RENP2YwR2Nct84DKg-33n8wAhZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:84:a2:b5:64:af:d9:38:54:f2:ae:8d:8b:7a:c8:25:21:d0:
72:c5:8f:1b:9d:83:89:56:f5:2c:17:06:b8:c9:62:bc:a3:77:
1b:8b:7c:80:7b:28:b9:9b:a6:f1:60:48:b3:43:9b:da:ff:79:
49:c9:b8:b8:54:55:59:5d:7b:53:15:2b:ff:17:b0:28:8f:00:
86:00:4d:88:d0:20:5e:21:b2:c9:67:e1:2c:39:76:e3:1f:c0:
47:c7:83:47:0a:3a:c1:98:75:49:ac:a4:10:4c:a8:6b:c1:2a:
c0:73:d5:6a:9d:d1:c4:59:c3:ce:90:3c:c8:d3:d5:80:da:5c:
a1:94:d1:78:f8:28:7d:15:88:d8:6c:25:97:1f:d3:de:62:19:
ca:e3:d2:9a:90:fe:9c:7b:a3:a7:32:02:82:59:d0:d1:48:3e:
29:7a:49:c4:ee:9c:ac:af:24:88:cd:ef:50:3f:24:34:e2:c9:
8a:35:14:6f:26:b2:67:3c:99:cf:46:38:d3:dd:b9:47:a0:d4:
7f:93:31:ad:69:ae:01:04:49:40:9f:6d:b5:a6:ea:34:e7:4d:
e1:7b:2b:83:43:d7:2f:49:39:c0:38:df:05:e0:f4:19:b3:67:
56:49:b2:47:39:a0:79:84:aa:98:f3:bd:1b:61:79:e9:b0:55:
99:7c:cf:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 21:52:23 2025 by rpki-client