Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9e9559-8f3c-45d0-851c-68f2174c79ee/1/RJ5CUryyLqLGz7OSTI-Evd56dHE.mft
File: RJ5CUryyLqLGz7OSTI-Evd56dHE.mft (raw, json)
Hash identifier: dTUJuO3psouZdFNs0OQ632Dj2hbs32uhigP3K4FuI8U=
Subject key identifier: 83:BF:4E:E2:4D:07:6B:5B:43:05:F9:9C:EB:F6:E6:80:1A:78:81:1E
Authority key identifier: 44:9E:42:52:BC:B2:2E:A2:C6:CF:B3:92:4C:8F:84:BD:DE:7A:74:71
Certificate issuer: /CN=449e4252bcb22ea2c6cfb3924c8f84bdde7a7471
Certificate serial: 01958C608D69CD0781CD7A15A46558406448
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RJ5CUryyLqLGz7OSTI-Evd56dHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9e9559-8f3c-45d0-851c-68f2174c79ee/1/RJ5CUryyLqLGz7OSTI-Evd56dHE.mft
Manifest number: 1498
Signing time: Wed 12 Mar 2025 22:01:32 +0000
Manifest this update: Wed 12 Mar 2025 22:01:32 +0000
Manifest next update: Thu 13 Mar 2025 22:01:32 +0000
Files and hashes: 1: IuxDHR_CV3eNS1S5clbvfJ1hK_k.roa (hash: Hz3aDArINU9rGaWmuAjDTNSRDFd5qodJqjOuXUvn7hM=)
2: RJ5CUryyLqLGz7OSTI-Evd56dHE.crl (hash: Gt5qHiMe/r2Y8EhmlGVEpOk3rSTa57If6pcPNicOAo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9e9559-8f3c-45d0-851c-68f2174c79ee/1/RJ5CUryyLqLGz7OSTI-Evd56dHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/9e9559-8f3c-45d0-851c-68f2174c79ee/1/RJ5CUryyLqLGz7OSTI-Evd56dHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RJ5CUryyLqLGz7OSTI-Evd56dHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:60:8d:69:cd:07:81:cd:7a:15:a4:65:58:40:64:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=449e4252bcb22ea2c6cfb3924c8f84bdde7a7471
Validity
Not Before: Mar 12 22:01:32 2025 GMT
Not After : Mar 13 22:01:32 2025 GMT
Subject: CN=83bf4ee24d076b5b4305f99cebf6e6801a78811e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:fb:91:ad:46:b0:79:0e:6d:3f:cb:2e:40:7a:
c2:70:ca:63:8f:11:66:45:8b:7b:40:86:0a:2e:83:
be:12:3f:d2:2b:e5:ec:7b:98:d3:a7:fb:e2:90:36:
ea:25:d7:6e:e1:7d:56:70:eb:a5:97:f3:d0:75:88:
82:33:b7:11:7b:39:00:93:1d:30:82:8c:a8:e6:fb:
68:ad:40:b9:4b:14:55:5c:74:e9:82:c8:d8:23:ab:
18:08:5d:f9:a9:7a:2d:a8:53:32:0b:b5:a9:4f:67:
b1:c7:f8:83:3e:c8:5e:86:17:40:5e:70:e4:b3:3c:
b8:17:01:7b:61:ea:06:97:e9:4e:16:39:d0:76:ff:
51:6e:2d:3c:94:e1:2b:fa:5e:d7:6d:e3:67:ee:29:
d2:a1:84:ea:16:0c:d6:40:d0:aa:c7:eb:22:60:6a:
28:f7:2e:dc:41:d2:c6:68:8d:fc:34:4f:00:7a:05:
38:94:07:ee:a5:77:60:bc:2f:7a:e1:de:a9:c1:1d:
15:c8:df:31:0a:c5:4b:bd:6b:be:33:ca:24:c1:10:
86:89:1f:2f:54:98:d5:4d:e3:ed:6a:75:7c:5e:33:
6b:81:10:ab:26:19:85:af:d7:70:92:75:96:3c:80:
1b:fa:ba:0c:1e:51:09:c5:fd:33:87:51:52:1b:88:
a6:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:BF:4E:E2:4D:07:6B:5B:43:05:F9:9C:EB:F6:E6:80:1A:78:81:1E
X509v3 Authority Key Identifier:
keyid:44:9E:42:52:BC:B2:2E:A2:C6:CF:B3:92:4C:8F:84:BD:DE:7A:74:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RJ5CUryyLqLGz7OSTI-Evd56dHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9e9559-8f3c-45d0-851c-68f2174c79ee/1/RJ5CUryyLqLGz7OSTI-Evd56dHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9e9559-8f3c-45d0-851c-68f2174c79ee/1/RJ5CUryyLqLGz7OSTI-Evd56dHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:df:43:c9:81:61:6b:2c:b0:b5:a9:50:2e:e7:e6:26:da:bf:
b6:6f:60:63:f5:0a:5e:72:93:29:bc:f2:b7:b3:23:4c:d1:dc:
fb:ff:ed:77:85:f6:f9:24:46:a6:72:89:9e:1a:34:f3:70:6e:
18:85:f3:e6:d9:bb:35:7f:c5:ff:20:4a:68:ae:91:ad:fc:24:
cd:42:5c:88:2d:4a:bf:9d:f3:c1:5d:8d:61:c2:fe:88:fc:35:
9c:88:4f:ae:f4:8f:2a:82:c8:c8:df:d9:96:d3:c0:48:04:c9:
4e:7a:1b:a7:f7:17:dc:01:f8:55:23:e0:aa:a0:12:b6:96:18:
3f:7d:a2:d3:37:74:df:f3:a0:77:27:f3:90:cf:bb:14:f7:b7:
17:ab:0f:26:82:06:57:79:78:88:3c:a3:be:a0:57:53:a9:2d:
4f:56:57:5d:7a:40:ad:c4:33:ec:9d:93:96:10:2a:7c:5e:9b:
ed:04:01:37:cf:fa:67:a8:7e:47:8f:e8:4b:2d:eb:e9:e1:20:
8e:6c:7c:11:63:b4:e1:cc:bd:43:76:0d:28:0f:8e:60:a3:6f:
ae:08:d0:e0:2c:f3:23:a9:09:cf:93:a8:ef:26:fe:0e:4e:8d:
3e:68:27:a6:16:8a:a5:07:7a:a3:07:81:cc:73:80:59:ac:ce:
0f:d2:e4:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:38:54 2025 by rpki-client