Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/22957e-d390-4b79-96b4-f2025d7ae8bd/1/__48efMne-a_MrCqZ5PfjuT8aT8.mft
File: __48efMne-a_MrCqZ5PfjuT8aT8.mft (raw, json)
Hash identifier: weItuA4rVewjjCV1XySJqNLo5ybLYesOiehxWrKFsKM=
Subject key identifier: C1:A7:0F:FA:60:69:E0:88:23:22:E1:C4:61:FE:95:6D:FB:35:B7:FF
Authority key identifier: FF:FE:3C:79:F3:27:7B:E6:BF:32:B0:AA:67:93:DF:8E:E4:FC:69:3F
Certificate issuer: /CN=fffe3c79f3277be6bf32b0aa6793df8ee4fc693f
Certificate serial: 01965191F74640D58A260343EC065C39E969
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/__48efMne-a_MrCqZ5PfjuT8aT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/22957e-d390-4b79-96b4-f2025d7ae8bd/1/__48efMne-a_MrCqZ5PfjuT8aT8.mft
Manifest number: 42
Signing time: Sun 20 Apr 2025 05:00:42 +0000
Manifest this update: Sun 20 Apr 2025 05:00:42 +0000
Manifest next update: Mon 21 Apr 2025 05:00:42 +0000
Files and hashes: 1: 0kaaAyo2H1IRNt6Ftj5Xi8qB5D8.roa (hash: vEdWjhFIP+oKICnFyIXPgNR6jJ68k0xMBCGivZ1H4Mc=)
2: __48efMne-a_MrCqZ5PfjuT8aT8.crl (hash: /qCjvmI82Cee7eD/wLT+up7as0dS98THysRDHpfuzsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/22957e-d390-4b79-96b4-f2025d7ae8bd/1/__48efMne-a_MrCqZ5PfjuT8aT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/22957e-d390-4b79-96b4-f2025d7ae8bd/1/__48efMne-a_MrCqZ5PfjuT8aT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/__48efMne-a_MrCqZ5PfjuT8aT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:91:f7:46:40:d5:8a:26:03:43:ec:06:5c:39:e9:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fffe3c79f3277be6bf32b0aa6793df8ee4fc693f
Validity
Not Before: Apr 20 05:00:42 2025 GMT
Not After : Apr 21 05:00:42 2025 GMT
Subject: CN=c1a70ffa6069e0882322e1c461fe956dfb35b7ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9a:06:c1:38:0a:f2:3d:f9:6c:a9:3d:70:fb:
76:61:02:fa:f3:58:3a:ce:94:be:44:93:cf:0e:8c:
ef:de:2d:b9:6f:31:f0:a5:7e:09:b2:98:d8:42:49:
10:e0:20:4d:c8:ae:5d:6a:28:2c:fd:ea:26:e8:24:
e1:d2:ba:5d:9d:d2:bd:6f:6b:a9:9e:4d:16:04:12:
2e:8e:24:95:f7:03:e4:ab:dc:ee:01:59:a1:99:8e:
28:1d:a9:18:6f:3c:13:5d:a4:41:4c:eb:41:ec:36:
73:3c:9d:9e:b9:a3:f0:20:f4:00:26:62:5c:81:b5:
a3:1c:7f:10:5b:64:55:26:07:4d:15:d0:89:bb:cb:
c2:7c:cf:da:96:e6:88:5e:80:0f:3a:8c:f6:69:2e:
6e:69:48:30:b1:2a:64:bf:99:0e:02:1c:b8:ae:51:
5c:d6:6a:b9:c6:b6:f5:a4:5c:18:cc:a8:35:90:3b:
66:7a:fc:fd:19:32:6c:46:ac:a5:20:52:ea:7a:73:
b4:aa:79:4f:da:59:66:d1:7e:76:3e:90:47:71:f4:
91:d7:a1:b4:b9:a9:e5:cc:01:78:83:27:90:3a:01:
b3:be:ee:77:32:8e:5c:ac:fe:6a:48:ee:9e:ac:9a:
89:e6:2f:f4:22:8d:42:11:2e:2e:1b:8a:40:2f:24:
c3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:A7:0F:FA:60:69:E0:88:23:22:E1:C4:61:FE:95:6D:FB:35:B7:FF
X509v3 Authority Key Identifier:
keyid:FF:FE:3C:79:F3:27:7B:E6:BF:32:B0:AA:67:93:DF:8E:E4:FC:69:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/__48efMne-a_MrCqZ5PfjuT8aT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/22957e-d390-4b79-96b4-f2025d7ae8bd/1/__48efMne-a_MrCqZ5PfjuT8aT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/22957e-d390-4b79-96b4-f2025d7ae8bd/1/__48efMne-a_MrCqZ5PfjuT8aT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:01:79:c8:46:cd:2e:e4:6a:90:9c:b9:4c:1e:4b:0f:26:52:
fd:c3:dc:e0:17:2e:92:be:df:dd:7b:34:f2:5a:2b:61:0d:c7:
54:73:9b:0d:88:35:2d:a9:09:3c:ec:97:b4:34:8f:31:52:ef:
58:ad:ba:81:0c:db:2d:d6:e2:fc:84:78:14:99:e7:18:a4:32:
ed:91:f1:b4:ca:f3:3c:13:f8:0e:38:3b:56:c0:90:b9:33:1e:
98:33:ad:5d:31:cd:7e:4a:52:62:30:e1:a7:a4:61:99:1c:18:
79:db:4e:d7:6e:e5:4e:95:73:a0:9e:aa:75:82:86:f6:13:46:
73:41:a6:3a:3c:a7:1c:51:11:da:3f:c7:ea:24:bf:07:37:c1:
f8:5b:33:f6:f7:7b:9c:c3:8a:49:f8:c4:04:b8:1b:c0:6d:74:
63:d5:dc:f4:57:c1:f5:78:27:97:a7:85:e3:11:fd:51:70:9a:
71:ce:72:fa:dc:47:c2:2e:82:e5:49:09:9d:0c:fd:84:86:da:
c6:f5:51:90:05:ef:df:dc:01:a8:f7:7d:9f:ad:b4:1c:5a:82:
93:5d:23:20:ce:80:dc:65:18:b7:be:dc:7d:91:85:3d:7b:66:
d2:e6:cd:81:e3:d3:f6:a2:25:70:65:51:d2:37:a4:90:6b:9f:
52:50:b1:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:57:33 2025 by rpki-client