Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft
File: Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft (raw, json)
Hash identifier: lmUxPnOwVyXUpUFfHZpaGulVrvqbR2q44NJvIGy65fQ=
Subject key identifier: A5:9C:CA:7A:73:08:18:D0:45:5A:0B:BC:FE:3D:DE:E1:7F:00:B7:39
Authority key identifier: 45:AD:6F:1F:1B:73:0C:7A:01:6B:56:2C:12:B3:1B:EC:C4:B3:E1:FA
Certificate issuer: /CN=45ad6f1f1b730c7a016b562c12b31becc4b3e1fa
Certificate serial: 01964E5A06F8D89A1C29C4D22CDAAD111A34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ra1vHxtzDHoBa1YsErMb7MSz4fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft
Manifest number: 10B8
Signing time: Sat 19 Apr 2025 14:00:44 +0000
Manifest this update: Sat 19 Apr 2025 14:00:44 +0000
Manifest next update: Sun 20 Apr 2025 14:00:44 +0000
Files and hashes: 1: 4jpGoGfytvkcBWF1AUAJF0-qdUc.roa (hash: RRVQEgJXSCFRfqwvduB081T3vxLgFXzLMjRYLNyG6B8=)
2: 988R5OqLx1cdXJRL_JY-sifrbw8.roa (hash: BOCl4HP9kR43t+HCwvP5qbX3Z6YHP7lJJWGPo5+9LHA=)
3: Ra1vHxtzDHoBa1YsErMb7MSz4fo.crl (hash: YR5XpEZq2vqFKmsdgsXiUvrI0KREyUN34JJhqVIbe3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ra1vHxtzDHoBa1YsErMb7MSz4fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 14:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:5a:06:f8:d8:9a:1c:29:c4:d2:2c:da:ad:11:1a:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45ad6f1f1b730c7a016b562c12b31becc4b3e1fa
Validity
Not Before: Apr 19 14:00:44 2025 GMT
Not After : Apr 20 14:00:44 2025 GMT
Subject: CN=a59cca7a730818d0455a0bbcfe3ddee17f00b739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:cd:9c:d7:dd:5e:4c:7f:b4:b1:ad:73:ae:bf:
fe:5e:ff:be:42:60:0d:00:c3:de:7c:97:3a:c4:90:
51:92:c5:54:d9:96:59:53:46:b3:55:23:f7:de:ac:
b8:da:54:4d:19:be:52:99:93:2f:25:6e:3a:6d:5c:
b4:5d:46:3f:0b:43:79:7d:16:c8:d1:0a:35:f2:01:
29:61:ae:0b:c6:44:90:c7:bb:16:22:a3:f2:80:10:
c8:c4:c7:4c:c6:5f:cf:a6:22:28:06:03:1c:c6:41:
34:bf:0e:3c:99:a0:d7:bd:e5:27:db:b9:ed:1f:48:
a1:f1:81:65:62:4b:bf:7e:53:23:d2:6f:70:cd:03:
e6:45:b7:b0:93:d2:08:09:1a:6d:36:8b:1f:1e:89:
d0:c2:17:98:08:2c:8f:13:5b:a4:9b:21:29:ed:19:
43:da:c1:dd:5d:ce:d6:0d:17:64:45:09:48:b2:46:
a5:b5:fc:c7:31:4b:e7:0e:38:78:0b:3e:0d:b8:6c:
db:43:6a:03:29:d8:57:c5:3d:fc:c4:21:56:31:6c:
07:93:27:c1:6a:2e:56:ab:6f:73:ea:99:b7:54:aa:
bc:91:ba:f6:66:eb:7c:70:01:a7:2d:12:6c:82:f1:
38:8c:2d:24:3f:8b:04:c2:b2:f3:7e:19:40:a1:56:
24:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:9C:CA:7A:73:08:18:D0:45:5A:0B:BC:FE:3D:DE:E1:7F:00:B7:39
X509v3 Authority Key Identifier:
keyid:45:AD:6F:1F:1B:73:0C:7A:01:6B:56:2C:12:B3:1B:EC:C4:B3:E1:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ra1vHxtzDHoBa1YsErMb7MSz4fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:89:15:62:4c:9a:77:13:cd:a6:7f:2c:91:a3:86:eb:ad:23:
3e:21:8e:91:67:91:44:c8:51:7d:f2:72:d1:40:05:98:ef:e2:
e2:03:73:f4:bc:61:ea:f7:14:4d:37:f3:1d:e2:e6:c2:72:85:
c5:b6:dd:23:4b:16:83:21:f4:c7:fa:f0:2b:1c:36:d1:22:df:
60:05:80:7d:a3:b1:38:36:17:78:b0:93:50:c5:e6:a9:e6:73:
0e:57:1a:33:b8:93:90:83:76:d9:6f:1e:d3:73:90:d0:4d:27:
4a:f7:12:b3:37:ae:d8:1d:88:f6:66:bb:b8:ac:ca:bc:d1:62:
07:c5:a8:c6:39:37:01:81:b2:f6:0b:85:53:e7:29:3e:74:67:
04:96:42:52:11:f0:87:6f:bd:93:0a:cd:91:e2:2b:07:cc:db:
cf:e5:46:27:18:d7:53:c2:f1:51:41:90:15:95:01:a7:29:bf:
56:75:52:06:61:ba:61:7a:c3:d7:96:30:a5:99:4f:7b:ef:d1:
80:a7:05:de:47:ed:44:8e:33:bf:75:c8:4d:9a:99:5e:23:2e:
9a:c9:15:83:e9:fb:fe:e0:84:ae:71:db:89:55:4c:c5:b1:e2:
52:bd:ee:36:33:02:ec:16:85:93:e5:04:60:cb:1d:7c:49:08:
97:73:6c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:10:41 2025 by rpki-client