Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.mft
File: R01HT5RpSoEE9eQTqyucCVWbefA.mft (raw, json)
Hash identifier: Y4PY5dX4F0nBCtAFUhTaY+CReZ8V83DkKJvU/1Yd3F0=
Subject key identifier: AD:3E:0E:A9:2F:E2:BF:DF:F2:C2:DF:4F:76:22:46:BF:68:AE:3F:BE
Authority key identifier: 47:4D:47:4F:94:69:4A:81:04:F5:E4:13:AB:2B:9C:09:55:9B:79:F0
Certificate issuer: /CN=474d474f94694a8104f5e413ab2b9c09559b79f0
Certificate serial: 0195783418790AA9EFAC6AED8A57AEEFC5F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R01HT5RpSoEE9eQTqyucCVWbefA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.mft
Manifest number: AE
Signing time: Sun 09 Mar 2025 00:00:34 +0000
Manifest this update: Sun 09 Mar 2025 00:00:34 +0000
Manifest next update: Mon 10 Mar 2025 00:00:34 +0000
Files and hashes: 1: K09nrG0KqTizFLHUaMNyxM0z2ro.roa (hash: cExkaCJNm1PmYW065hiBGP/O4kugBu6fZ2Nczp2MsYg=)
2: R01HT5RpSoEE9eQTqyucCVWbefA.crl (hash: SLFJtgTK3HD+KHxEAIcxksp/kTuYQ/54EQVeauhorKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.mft
rsync://rpki.ripe.net/repository/DEFAULT/R01HT5RpSoEE9eQTqyucCVWbefA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:78:34:18:79:0a:a9:ef:ac:6a:ed:8a:57:ae:ef:c5:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=474d474f94694a8104f5e413ab2b9c09559b79f0
Validity
Not Before: Mar 9 00:00:34 2025 GMT
Not After : Mar 10 00:00:34 2025 GMT
Subject: CN=ad3e0ea92fe2bfdff2c2df4f762246bf68ae3fbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3d:e2:88:c4:a1:4d:09:a3:63:46:fb:00:34:
b6:7c:0c:6f:30:a2:cc:0c:09:db:90:22:d0:79:4c:
4d:ee:70:1c:20:97:6e:b6:bc:42:22:2e:91:0e:0a:
09:73:75:46:6b:b6:6a:2b:0d:a0:f0:26:c1:77:4a:
66:ce:2d:1e:31:4b:a4:db:90:cb:e2:62:44:22:40:
80:b6:ab:04:eb:81:1c:76:d5:94:ba:6e:7c:7e:13:
c7:e1:3f:24:60:d5:46:6e:a6:02:d9:c8:00:9f:1c:
5b:35:00:4e:1e:66:a0:22:c1:d8:f7:8c:d8:25:7c:
3e:c5:a5:eb:1d:5a:bd:cd:70:f8:10:47:eb:9d:1c:
41:6d:b5:fb:ab:58:5a:c2:e9:06:7c:95:22:fb:58:
ed:32:74:59:f3:57:35:bb:c7:7c:be:f7:d5:34:77:
12:19:fa:b5:a9:ba:57:4d:aa:52:e8:85:d4:7c:b5:
1b:16:5c:4d:4e:fc:1e:d0:41:a0:20:46:f4:9a:0e:
7c:86:44:25:3b:a1:12:32:ff:e5:36:17:74:93:71:
eb:ed:60:a6:b4:58:d5:7f:67:7f:ab:51:02:5c:02:
6b:c4:10:42:75:5f:59:73:e2:4f:d6:0b:9b:ef:93:
7a:22:3a:cb:11:2e:b6:39:ff:67:72:66:8f:78:26:
f0:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:3E:0E:A9:2F:E2:BF:DF:F2:C2:DF:4F:76:22:46:BF:68:AE:3F:BE
X509v3 Authority Key Identifier:
keyid:47:4D:47:4F:94:69:4A:81:04:F5:E4:13:AB:2B:9C:09:55:9B:79:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R01HT5RpSoEE9eQTqyucCVWbefA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:3e:a1:a6:b1:4c:28:f3:c4:90:74:fc:c9:dc:0f:27:04:b2:
d1:2c:cf:d6:ff:00:6b:76:43:dd:ec:35:4e:dc:f7:c3:93:02:
ac:6d:d8:af:1e:a4:39:ba:09:c4:19:36:5e:b9:98:28:4c:49:
d4:84:a9:cf:a2:e3:86:3d:c6:76:ae:86:74:cc:08:d9:90:2c:
f5:d9:4e:83:61:95:ec:37:01:d3:19:10:3f:e9:dc:d2:5e:4a:
01:85:fc:fd:3d:fb:6e:a8:4c:7a:3f:97:46:f7:5f:96:37:c8:
6b:88:f7:4f:a9:79:7c:35:6f:9d:8b:c6:79:13:91:d2:84:42:
0f:3a:13:b2:8f:66:78:1d:bb:c0:7a:6f:50:b6:81:ef:f4:22:
7c:23:81:16:a8:16:99:15:a7:60:bd:d6:40:1c:29:9f:a8:36:
11:58:03:47:f6:f5:59:aa:52:8c:d9:63:6d:02:b2:03:49:fb:
97:1f:c3:bc:03:6e:e9:a8:1f:c4:a1:4b:26:36:03:7f:9e:bd:
f9:13:19:d9:6a:ba:dd:6b:a1:83:0e:c3:e4:73:59:ee:e5:49:
9a:a7:b0:66:0c:02:cb:fb:5d:f7:2a:d1:ef:fc:14:fc:6b:6e:
fe:15:0c:7d:ec:86:ab:87:3d:ef:71:17:b4:d2:b5:3e:ca:b8:
67:df:dd:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 10:11:40 2025 by rpki-client