Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.mft
File: RiIx5xPw-DS9CcP3bhLiUOdzwpA.mft (raw, json)
Hash identifier: Obgnb70W+rYQrTcOuarxTzU3qMDxUq5BIpQwJwSGjCg=
Subject key identifier: 13:D5:FB:B0:4B:2D:66:BA:3A:82:E7:5D:26:73:2D:71:C7:A6:C8:73
Authority key identifier: 46:22:31:E7:13:F0:F8:34:BD:09:C3:F7:6E:12:E2:50:E7:73:C2:90
Certificate issuer: /CN=462231e713f0f834bd09c3f76e12e250e773c290
Certificate serial: 0196237007ACFD4BD15D657FED68078B92A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RiIx5xPw-DS9CcP3bhLiUOdzwpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.mft
Manifest number: 13F4
Signing time: Fri 11 Apr 2025 06:01:06 +0000
Manifest this update: Fri 11 Apr 2025 06:01:06 +0000
Manifest next update: Sat 12 Apr 2025 06:01:06 +0000
Files and hashes: 1: RiIx5xPw-DS9CcP3bhLiUOdzwpA.crl (hash: rfjGPaW8gxcbVobvJbmgGWCkix1qm47l3kW5ZT17iXI=)
2: xmUpqD4NUMAqisL66k_x6MTYnaQ.roa (hash: dGRcbHkgyhvucFtnmzWvrILS2aHk2c8SQDJ6rOX+JL4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RiIx5xPw-DS9CcP3bhLiUOdzwpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 02:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:23:70:07:ac:fd:4b:d1:5d:65:7f:ed:68:07:8b:92:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=462231e713f0f834bd09c3f76e12e250e773c290
Validity
Not Before: Apr 11 06:01:06 2025 GMT
Not After : Apr 12 06:01:06 2025 GMT
Subject: CN=13d5fbb04b2d66ba3a82e75d26732d71c7a6c873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d1:75:41:ab:bb:c3:7c:8d:f0:32:44:a7:88:
a5:af:81:2e:37:52:e5:b3:e5:bc:5b:3b:1f:4c:fb:
e2:c4:1e:9c:60:7d:92:2b:59:74:62:46:e7:b5:e5:
fc:0f:00:7a:32:98:7f:aa:77:a8:d4:24:79:52:fd:
5a:87:7b:55:c8:5b:57:64:cf:bc:72:5c:3c:5e:ff:
ac:0a:a5:aa:13:75:cf:d7:5e:00:1b:f1:51:70:07:
cf:12:c6:83:10:fd:81:cc:f3:aa:8e:2f:b0:28:e2:
1a:0c:5c:39:21:b6:0f:ef:7d:2c:c9:89:d4:4c:a6:
3d:b9:2d:3e:11:7f:d1:91:1d:20:48:e4:f5:2b:30:
9b:39:9f:5c:1e:19:e0:c5:f3:6b:73:ab:c7:e7:34:
14:cb:06:ac:12:71:79:8b:a1:03:5a:84:1a:ef:b3:
86:3f:ce:ac:a9:f9:dc:b6:1f:0a:74:a0:61:49:7d:
4a:d2:24:55:c6:30:b3:f1:98:f3:51:0b:77:7c:e2:
97:64:92:b1:6c:ef:46:29:cb:c6:71:ed:cf:da:48:
b0:cc:10:4f:7f:2d:b0:9e:a0:40:bd:5b:e7:c7:8d:
12:95:ff:e5:80:41:40:77:65:43:33:36:1c:eb:e2:
f5:e3:59:12:26:b5:07:27:43:56:f1:8d:79:94:16:
f5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:D5:FB:B0:4B:2D:66:BA:3A:82:E7:5D:26:73:2D:71:C7:A6:C8:73
X509v3 Authority Key Identifier:
keyid:46:22:31:E7:13:F0:F8:34:BD:09:C3:F7:6E:12:E2:50:E7:73:C2:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RiIx5xPw-DS9CcP3bhLiUOdzwpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:fa:f3:cc:7b:1f:72:79:5c:4e:3e:33:21:82:04:05:bc:fc:
21:3c:00:fc:2f:ab:c7:94:cf:55:b9:92:04:b1:58:f8:d2:2e:
19:eb:06:30:5c:74:81:e8:87:40:4a:bd:a3:eb:e3:a9:d8:70:
cd:75:ba:21:3f:bb:e2:3b:02:9e:1b:40:14:99:a8:e3:73:90:
b3:a5:78:5d:c1:05:96:0d:2f:8c:c2:ea:92:67:10:38:65:b9:
83:29:47:89:61:e4:d0:6e:7b:8b:5f:97:f0:a8:69:32:8a:0a:
3f:79:2b:99:ee:3b:0e:a3:d9:94:6f:33:c8:77:74:40:4d:e5:
35:47:ca:8b:ff:12:24:16:08:59:a0:f3:5b:9a:05:24:94:90:
27:45:16:49:e0:0e:89:a4:2d:32:13:58:d3:5e:3e:85:96:52:
d4:f4:dd:e0:02:78:12:1a:89:ef:32:fe:b9:6a:8b:f9:24:d0:
46:6e:c4:47:39:8f:1f:3d:c2:9a:54:0c:22:86:c1:4a:75:a1:
4c:a3:10:1e:39:1e:49:6d:01:40:2b:e7:7d:5d:88:41:20:ad:
3f:f5:e4:85:b8:6d:50:1d:37:0a:32:f4:11:c9:d8:8a:09:a0:
f3:b2:81:f5:28:4a:a0:b3:5d:36:7c:86:de:70:a4:11:5f:69:
eb:42:ae:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 10:54:15 2025 by rpki-client