Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.mft
File: rfRJdaXb2_gjtKCmt-65mxSENn4.mft (raw, json)
Hash identifier: gjqKSjy+SI8tg+z2e0sZHi5ZJHxBlzbu0SMT/8BQdZQ=
Subject key identifier: 0D:87:44:48:A1:DE:B9:85:05:7E:CF:8A:0B:6F:D2:40:EB:58:3F:0A
Authority key identifier: AD:F4:49:75:A5:DB:DB:F8:23:B4:A0:A6:B7:EE:B9:9B:14:84:36:7E
Certificate issuer: /CN=adf44975a5dbdbf823b4a0a6b7eeb99b1484367e
Certificate serial: 0196504875C789379C111EDB30BE29C58889
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfRJdaXb2_gjtKCmt-65mxSENn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.mft
Manifest number: 048F
Signing time: Sat 19 Apr 2025 23:00:48 +0000
Manifest this update: Sat 19 Apr 2025 23:00:48 +0000
Manifest next update: Sun 20 Apr 2025 23:00:48 +0000
Files and hashes: 1: R4XHwh-uR65EL_DdpXZF6OARJ4Q.roa (hash: iFcX7qqj7I+Qr0pVVXkrPFoUP0jPJo5pY3SNhZeIPSE=)
2: rfRJdaXb2_gjtKCmt-65mxSENn4.crl (hash: m0suWwkYW9FXdPjgrn24FAJhw3Hed01EpU9c+fpKIwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rfRJdaXb2_gjtKCmt-65mxSENn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:48:75:c7:89:37:9c:11:1e:db:30:be:29:c5:88:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf44975a5dbdbf823b4a0a6b7eeb99b1484367e
Validity
Not Before: Apr 19 23:00:48 2025 GMT
Not After : Apr 20 23:00:48 2025 GMT
Subject: CN=0d874448a1deb985057ecf8a0b6fd240eb583f0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d3:87:f8:ff:4b:89:b0:fb:ee:cf:a8:c0:6e:
30:79:95:4f:f5:d9:48:8f:b5:47:0a:ca:34:70:ae:
a3:0b:df:ba:5c:6a:7b:60:ec:d2:d8:6f:84:7d:23:
d3:f0:6b:f0:0b:26:dc:5b:d4:c6:0c:0d:b6:16:c1:
80:e6:a6:f7:0f:e5:89:77:59:ba:09:87:ae:c4:a8:
27:af:0f:29:8d:12:74:42:89:6d:b3:9c:42:ca:03:
da:70:b5:b0:88:15:02:93:c1:99:39:1b:d6:78:60:
b0:70:c4:9c:8b:91:a0:ab:86:49:f3:f1:48:c4:db:
23:e8:8b:68:f4:15:f4:99:a7:e5:66:a8:66:c4:ab:
51:f2:a3:a9:fa:2d:96:52:3b:6c:9d:f4:c9:94:7a:
83:a5:42:54:69:80:9e:52:6b:af:34:1e:cb:ef:34:
73:be:29:f0:c7:0e:a1:6c:d2:8a:59:8b:bb:f8:e0:
9f:44:4d:c2:9e:fb:b7:76:b6:86:75:75:0a:7b:8a:
88:e5:b1:a3:72:d5:15:e2:d1:c6:40:73:53:a5:62:
48:5b:2f:ce:1f:ed:f7:60:2c:61:32:d3:38:f1:a9:
ef:29:50:ab:14:2a:63:e1:6c:ed:1a:41:ec:26:8a:
de:be:2c:13:48:ed:57:17:b4:03:30:c9:fc:29:d3:
27:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:87:44:48:A1:DE:B9:85:05:7E:CF:8A:0B:6F:D2:40:EB:58:3F:0A
X509v3 Authority Key Identifier:
keyid:AD:F4:49:75:A5:DB:DB:F8:23:B4:A0:A6:B7:EE:B9:9B:14:84:36:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfRJdaXb2_gjtKCmt-65mxSENn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:32:88:cf:ae:a6:41:b4:6a:68:18:63:20:c4:6b:5f:86:e4:
5b:91:33:b3:79:4d:e1:25:f8:94:19:e3:ff:a4:6b:98:d1:c8:
43:f8:27:18:a2:20:7e:15:8c:bb:59:f3:77:70:43:4b:aa:84:
30:f9:0d:8e:4b:da:ad:f2:76:07:07:23:75:a1:ee:e8:78:57:
9f:8f:87:2e:d3:5d:d4:01:ac:e8:7a:2f:ac:a2:b9:7e:da:10:
c7:dc:34:9b:bd:96:4b:5e:39:8f:c2:82:1d:75:2d:62:c9:52:
86:81:cf:d1:d1:a3:10:e0:96:7d:e2:8f:01:f0:b4:dc:03:3d:
2e:09:e1:c9:94:21:79:3b:90:2d:31:be:1e:46:3b:5c:fa:29:
b1:26:07:e4:f9:cb:6e:af:de:47:1c:a9:24:ae:12:ca:8b:59:
e5:3f:8f:1c:96:2e:20:df:00:3e:48:28:20:42:a6:7f:b2:39:
82:76:7e:b7:81:b2:bb:cf:b6:74:8b:0e:9d:eb:77:63:6c:28:
6b:37:25:02:f1:ff:ef:a7:36:08:c8:38:df:ef:63:99:31:86:
3a:9d:31:e2:ad:09:7c:a5:cb:26:05:a4:48:13:19:50:b8:41:
db:c6:c9:c0:cb:78:61:5b:90:9a:11:df:3b:ff:4f:6a:be:35:
e0:af:66:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:37:07 2025 by rpki-client