Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/RjUoxUCm1XfC0cwabuoXEks5I4Y.mft
File: RjUoxUCm1XfC0cwabuoXEks5I4Y.mft (raw, json)
Hash identifier: uecfOSRVWq8p3NihrXN/5EFAJytqKkNsDE/IKo9BHwA=
Subject key identifier: F7:0E:09:A6:A2:E9:E2:75:0D:AC:49:BC:D5:77:84:AB:15:8D:CD:D5
Authority key identifier: 46:35:28:C5:40:A6:D5:77:C2:D1:CC:1A:6E:EA:17:12:4B:39:23:86
Certificate issuer: /CN=463528c540a6d577c2d1cc1a6eea17124b392386
Certificate serial: 01965236EF89D4EA3524AF639E9B64CC1C56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RjUoxUCm1XfC0cwabuoXEks5I4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/RjUoxUCm1XfC0cwabuoXEks5I4Y.mft
Manifest number: 1500
Signing time: Sun 20 Apr 2025 08:00:53 +0000
Manifest this update: Sun 20 Apr 2025 08:00:53 +0000
Manifest next update: Mon 21 Apr 2025 08:00:53 +0000
Files and hashes: 1: CgYapJdE3lATpkmQavkm2MlhTAs.roa (hash: leTUYkK/UbPoz5ypT99weLoqPEKtLynpZc0EJfzHDjs=)
2: RjUoxUCm1XfC0cwabuoXEks5I4Y.crl (hash: tetwx6QoqkmBJ0lNRKeo7BkzkD0/+X/Zannkilmvx1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/RjUoxUCm1XfC0cwabuoXEks5I4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/RjUoxUCm1XfC0cwabuoXEks5I4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/RjUoxUCm1XfC0cwabuoXEks5I4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:36:ef:89:d4:ea:35:24:af:63:9e:9b:64:cc:1c:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=463528c540a6d577c2d1cc1a6eea17124b392386
Validity
Not Before: Apr 20 08:00:53 2025 GMT
Not After : Apr 21 08:00:53 2025 GMT
Subject: CN=f70e09a6a2e9e2750dac49bcd57784ab158dcdd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a7:a8:74:66:2d:97:0d:97:a0:51:1a:f6:4a:
68:5a:a1:06:19:d4:ff:1a:9c:95:73:21:1c:6b:a7:
cd:ab:f9:5a:69:ee:1c:16:1a:e8:69:dd:c7:16:d0:
96:86:56:d9:32:6a:9b:11:34:65:c2:54:cb:d3:59:
0f:c3:7f:85:33:d2:e5:2a:23:ee:ce:f4:a7:1f:a4:
05:e8:a8:2d:51:cc:12:12:7f:a5:12:97:8f:70:59:
90:79:62:68:21:19:e9:c3:e2:3a:52:81:93:ef:ef:
b4:1d:c8:f6:f2:7c:d1:dd:17:aa:e9:e4:f5:bb:e5:
eb:d6:c6:94:4a:60:b9:18:53:09:3a:cd:28:e7:a7:
7a:a8:48:87:f5:34:6d:d8:d5:f3:7f:7e:67:ba:30:
c9:bc:62:7c:b4:86:3d:66:e4:97:aa:cc:7b:0b:e4:
6a:c1:a9:3b:95:07:05:ee:76:0c:83:b9:5c:5e:79:
85:68:a1:1c:64:9d:82:6f:02:e7:aa:80:dc:33:a3:
c5:db:82:e7:ba:bf:29:05:9d:88:60:96:cb:37:65:
0c:b4:5a:3d:89:20:7e:fc:fd:10:60:43:ab:4b:20:
ae:36:b7:00:49:29:01:56:b0:dc:33:4c:85:9a:94:
ba:b4:f6:e2:3c:30:c1:c5:f7:a3:a8:dc:95:8c:98:
f8:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:0E:09:A6:A2:E9:E2:75:0D:AC:49:BC:D5:77:84:AB:15:8D:CD:D5
X509v3 Authority Key Identifier:
keyid:46:35:28:C5:40:A6:D5:77:C2:D1:CC:1A:6E:EA:17:12:4B:39:23:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RjUoxUCm1XfC0cwabuoXEks5I4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/RjUoxUCm1XfC0cwabuoXEks5I4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/RjUoxUCm1XfC0cwabuoXEks5I4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:8a:7e:fd:21:b8:2e:34:4f:32:3d:03:71:48:a0:38:49:cf:
89:89:b3:25:2d:9f:e3:00:e0:46:44:d9:52:2d:21:4d:29:bb:
68:61:fe:5a:88:2b:aa:de:37:73:0f:59:1e:32:b2:5c:10:58:
39:2c:f8:ef:12:95:29:68:40:d3:30:a4:7b:6d:2c:38:29:46:
d3:a0:11:e9:f3:1a:ba:e7:da:5d:7f:9d:2b:42:2a:08:44:32:
8e:c3:20:90:7f:66:36:73:dd:3f:3f:63:86:a5:19:c2:81:12:
1e:39:7f:ef:78:2c:f8:ca:c3:f1:a4:f7:12:00:3d:40:81:42:
93:a8:a4:87:be:37:f2:42:dc:71:e1:a2:ba:1d:84:a5:b6:21:
8f:d5:70:9a:e6:a9:9d:3c:29:b2:d2:a2:57:fd:a1:5b:c7:0c:
58:55:f3:0f:69:05:47:4f:77:1e:24:69:5e:86:20:1e:09:cf:
19:02:91:df:bf:fc:ac:67:57:76:e3:14:8c:25:37:b8:7e:a8:
49:1a:f1:1a:91:70:2e:47:33:f6:d0:e4:a6:ab:30:4b:46:49:
d0:0d:8b:b6:e4:7c:a3:34:ed:b8:c5:de:07:94:ed:e0:e3:5e:
fd:f3:a9:d9:fd:43:ae:20:5a:f8:d2:68:9e:6a:21:53:14:a5:
f8:b0:98:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:32:36 2025 by rpki-client