Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.mft
File: r4j95vrbtrLB22_kH4KdHyAVvgs.mft (raw, json)
Hash identifier: eEMvfmbag9DnN+9b23kqERszniJnfSOXruyF7nxwEmA=
Subject key identifier: CD:B9:35:AC:28:8B:25:A4:87:0A:24:09:BB:71:0B:08:C2:E9:42:EE
Authority key identifier: AF:88:FD:E6:FA:DB:B6:B2:C1:DB:6F:E4:1F:82:9D:1F:20:15:BE:0B
Certificate issuer: /CN=af88fde6fadbb6b2c1db6fe41f829d1f2015be0b
Certificate serial: 01963EE73086E698DD14E7074D7B0D2EEC0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4j95vrbtrLB22_kH4KdHyAVvgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.mft
Manifest number: 0B8C
Signing time: Wed 16 Apr 2025 14:01:00 +0000
Manifest this update: Wed 16 Apr 2025 14:01:00 +0000
Manifest next update: Thu 17 Apr 2025 14:01:00 +0000
Files and hashes: 1: RHreYh0WmNugHNPOVP5GHBEiSQE.roa (hash: lDEy9crc1E/w31v0jSsa/vEhnHdpcWtnPtxtDbNUjjc=)
2: r4j95vrbtrLB22_kH4KdHyAVvgs.crl (hash: Ppwj/PnJCxx+mPYOydt3sIFLBo/jnis9ANlp3ASquF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/r4j95vrbtrLB22_kH4KdHyAVvgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:e7:30:86:e6:98:dd:14:e7:07:4d:7b:0d:2e:ec:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af88fde6fadbb6b2c1db6fe41f829d1f2015be0b
Validity
Not Before: Apr 16 14:01:00 2025 GMT
Not After : Apr 17 14:01:00 2025 GMT
Subject: CN=cdb935ac288b25a4870a2409bb710b08c2e942ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0b:81:69:4c:97:11:b5:9f:1b:db:84:0b:e7:
6a:a6:07:3e:16:2e:c5:63:a2:d1:09:cf:0f:97:fc:
f7:13:2d:c4:63:eb:5d:7f:19:aa:67:3e:97:41:28:
1b:e8:6d:49:fd:1f:dd:02:b7:9c:10:fa:dc:a0:e8:
9b:17:5a:17:cc:9d:b8:7a:c9:cf:db:e8:97:a4:93:
8a:5a:93:b8:70:4d:3f:2d:6d:62:d7:0e:94:c2:74:
1e:20:3c:0d:29:17:ed:92:0d:77:df:32:24:a0:aa:
96:57:a1:38:36:5b:88:f4:01:9c:5f:db:db:f1:51:
3d:9a:4a:f5:11:23:b6:64:83:a1:8c:69:6c:d9:f3:
20:ca:05:59:5b:51:41:74:4e:1f:f5:f4:a9:1e:43:
ff:29:ac:2b:e8:0a:be:eb:d5:37:8b:02:34:a4:4f:
f5:ff:5b:6d:bf:34:e3:d5:42:f9:4b:2d:e9:0b:5e:
5a:d2:28:61:9f:e9:20:e9:bb:7a:ce:59:23:2a:8f:
92:15:8d:01:44:63:a7:95:1c:84:3d:fe:b5:8e:8e:
19:ac:da:c4:1b:fc:99:82:e4:8c:8d:77:4e:bd:48:
91:96:08:32:77:a7:12:b7:3b:16:40:fe:8d:fd:cf:
6f:5f:7a:38:79:7f:83:f4:8e:77:74:70:2c:b6:9b:
55:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B9:35:AC:28:8B:25:A4:87:0A:24:09:BB:71:0B:08:C2:E9:42:EE
X509v3 Authority Key Identifier:
keyid:AF:88:FD:E6:FA:DB:B6:B2:C1:DB:6F:E4:1F:82:9D:1F:20:15:BE:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4j95vrbtrLB22_kH4KdHyAVvgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:24:06:bd:1b:93:12:4c:78:04:58:fa:33:5e:c2:53:19:d4:
cd:90:1e:ff:b7:ff:1b:cf:c0:56:62:b8:cc:1d:01:a8:c4:3a:
89:2d:93:89:16:70:d5:d0:74:17:e2:ce:98:9b:a8:bf:78:d9:
fe:ad:75:6d:e6:cb:c0:79:34:64:63:6c:1c:2e:dd:34:de:49:
1c:a7:5f:5b:ff:76:e6:17:5e:d4:d3:81:1f:b9:79:e5:24:85:
5e:1e:e9:6f:4e:76:c4:5a:e5:bb:94:2c:37:a5:f5:f3:15:90:
e1:63:ec:1e:5b:ac:f0:3b:de:a7:c0:cd:e0:7d:aa:19:ed:d9:
6f:bf:cb:79:f5:48:e9:fe:68:81:88:3d:e8:9a:de:81:7b:1a:
b4:98:c6:2b:f4:80:fb:d9:1f:a3:37:1e:c0:7d:3c:8a:02:6e:
ff:6e:98:f4:d4:78:7d:79:99:f7:d7:1d:3f:24:04:6b:a4:75:
fc:30:5d:eb:89:fc:46:36:ad:0d:b1:63:c8:f8:62:ea:ed:bb:
bf:81:e9:39:d5:af:a8:85:e9:ea:21:e3:04:06:fc:f7:99:a9:
5b:18:de:35:e0:7a:e6:9b:2a:1b:4a:04:44:52:32:c6:ad:ef:
a4:5c:c1:b1:a9:c2:53:02:61:0f:76:95:c3:a8:2c:39:88:14:
34:8d:4a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 18:38:05 2025 by rpki-client