
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/17490b-09a6-4e38-b084-14b0e8c4e8e7/1/rEvdnpfyEDcMwwElesFfrrj6Uk4.mft
File: rEvdnpfyEDcMwwElesFfrrj6Uk4.mft (raw, json)
Hash identifier: xmWvr3jXtV8kaE9RE52zOkrUaRqkCulfCIcH0cMBnEg=
Subject key identifier: 44:36:0E:B5:A1:43:D2:D7:EF:8F:18:63:42:5B:26:7A:C0:82:BA:F1
Authority key identifier: AC:4B:DD:9E:97:F2:10:37:0C:C3:01:25:7A:C1:5F:AE:B8:FA:52:4E
Certificate issuer: /CN=ac4bdd9e97f210370cc301257ac15faeb8fa524e
Certificate serial: 0196556E6D5A6353AE805DDA63F0065C3324
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rEvdnpfyEDcMwwElesFfrrj6Uk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/17490b-09a6-4e38-b084-14b0e8c4e8e7/1/rEvdnpfyEDcMwwElesFfrrj6Uk4.mft
Manifest number: 09A9
Signing time: Sun 20 Apr 2025 23:00:22 +0000
Manifest this update: Sun 20 Apr 2025 23:00:22 +0000
Manifest next update: Mon 21 Apr 2025 23:00:22 +0000
Files and hashes: 1: Qh3mzL9VUkWkolAH9jB_GpWhLg0.roa (hash: LSjP0eVYXjK72XpL0ynKNA9slIHH17di2BQFA3XHSqk=)
2: rEvdnpfyEDcMwwElesFfrrj6Uk4.crl (hash: 61J23INI4EUkw9CWkHd7PMbGFkICsS6JeCewvHRmAgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/17490b-09a6-4e38-b084-14b0e8c4e8e7/1/rEvdnpfyEDcMwwElesFfrrj6Uk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/17490b-09a6-4e38-b084-14b0e8c4e8e7/1/rEvdnpfyEDcMwwElesFfrrj6Uk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rEvdnpfyEDcMwwElesFfrrj6Uk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:6d:5a:63:53:ae:80:5d:da:63:f0:06:5c:33:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac4bdd9e97f210370cc301257ac15faeb8fa524e
Validity
Not Before: Apr 20 23:00:22 2025 GMT
Not After : Apr 21 23:00:22 2025 GMT
Subject: CN=44360eb5a143d2d7ef8f1863425b267ac082baf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ca:c5:87:bd:b8:d7:05:73:8f:8d:84:17:45:
70:66:f7:e1:0d:36:2e:00:6e:98:03:db:37:98:e1:
95:ae:28:eb:ba:02:fb:44:b5:f4:99:f8:be:f0:5a:
fd:ea:42:80:16:2b:35:a0:99:56:26:33:fe:4e:4b:
33:48:c2:b3:6c:a9:2b:50:be:68:15:9e:b7:b2:cb:
0c:de:97:b8:17:89:1c:12:16:fd:6a:20:5c:05:b0:
66:50:9d:db:27:69:22:f8:82:11:50:12:7b:a6:27:
be:db:1e:ab:a4:0b:e4:51:57:7b:59:22:13:75:99:
c1:5b:8a:a3:60:fb:08:d1:0e:c4:2a:05:3f:35:d7:
ca:43:2a:12:55:cf:bd:d2:5b:89:54:ba:9e:77:ed:
0b:a9:75:60:ab:97:4d:07:ce:e0:d8:8e:3c:4d:42:
4d:e0:bf:6b:76:dd:b5:66:b2:02:db:0d:5a:b1:14:
d0:1a:92:d8:b4:1d:24:00:ba:c0:2d:2e:36:1e:9b:
a2:b7:23:e9:b9:2a:ae:8c:eb:cd:62:f3:4c:e1:3a:
bc:81:e3:ce:23:a3:35:a4:4e:17:9b:ba:70:10:fd:
2a:bc:93:29:fa:e8:78:84:d9:95:ea:45:d6:3c:89:
24:dc:1b:7a:79:9e:48:ed:9c:26:92:45:ba:e9:35:
cd:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:36:0E:B5:A1:43:D2:D7:EF:8F:18:63:42:5B:26:7A:C0:82:BA:F1
X509v3 Authority Key Identifier:
keyid:AC:4B:DD:9E:97:F2:10:37:0C:C3:01:25:7A:C1:5F:AE:B8:FA:52:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rEvdnpfyEDcMwwElesFfrrj6Uk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/17490b-09a6-4e38-b084-14b0e8c4e8e7/1/rEvdnpfyEDcMwwElesFfrrj6Uk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/17490b-09a6-4e38-b084-14b0e8c4e8e7/1/rEvdnpfyEDcMwwElesFfrrj6Uk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:f0:a0:8a:6d:b9:58:0d:76:d3:90:ff:4e:b9:41:d0:b4:52:
03:8c:ae:ab:86:5c:21:59:99:85:f1:35:10:62:2d:70:f0:92:
bc:dd:58:38:5b:8f:1c:38:72:99:f4:0a:45:b2:89:45:93:d4:
b5:fb:fa:89:b6:91:0e:43:cd:7e:62:4d:8f:c2:d2:1f:77:db:
53:b6:89:40:ca:11:e4:4d:5c:0b:2c:5a:0a:31:c4:9f:9e:63:
1c:cd:78:a6:c6:fb:f3:6e:14:5f:5c:f6:4f:98:85:66:c5:d4:
a0:83:16:79:5c:40:88:e4:15:51:9f:ad:9f:01:62:23:ad:a6:
f4:d1:82:32:67:45:ad:70:e7:24:5a:9e:3f:30:02:53:b9:9a:
b4:2b:07:09:9c:69:69:3b:83:15:07:8c:7c:47:57:ca:16:fc:
73:1d:72:c4:d4:f5:a3:04:73:8b:cd:8b:fe:45:76:d9:a9:85:
40:10:da:db:4e:a0:81:53:39:58:c7:f3:96:10:ff:d5:74:0a:
6f:b0:9f:b7:da:30:78:81:df:42:f2:1b:b5:cc:9e:6f:b7:6c:
36:78:33:9f:6a:dc:ff:39:ce:39:eb:91:ce:ae:4e:e0:d8:b3:
06:17:96:01:3b:cb:73:72:46:86:1b:26:3c:b1:af:df:98:30:
e2:09:0a:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:26:30 2025 by rpki-client