Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/rvy2RB1w0usQ12M9pzGaPT_5d64.mft
File: rvy2RB1w0usQ12M9pzGaPT_5d64.mft (raw, json)
Hash identifier: f6QJTij8JoBtn51BU/Gg9iTtEsXZlEnJjpygKsH1IlQ=
Subject key identifier: 09:C0:3E:94:00:0D:BF:80:41:E1:08:91:89:76:FC:B6:61:AD:8E:35
Authority key identifier: AE:FC:B6:44:1D:70:D2:EB:10:D7:63:3D:A7:31:9A:3D:3F:F9:77:AE
Certificate issuer: /CN=aefcb6441d70d2eb10d7633da7319a3d3ff977ae
Certificate serial: 019653EE885551E17F4F264EA6AB199EFDC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rvy2RB1w0usQ12M9pzGaPT_5d64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/rvy2RB1w0usQ12M9pzGaPT_5d64.mft
Manifest number: 0574
Signing time: Sun 20 Apr 2025 16:01:03 +0000
Manifest this update: Sun 20 Apr 2025 16:01:03 +0000
Manifest next update: Mon 21 Apr 2025 16:01:03 +0000
Files and hashes: 1: OywOw90-BmuDTm7-vAr4oYdaiWc.roa (hash: 8bINvDgAJsHgmIljWuh30WywbwSEgdwt4RUZy9xG14w=)
2: rvy2RB1w0usQ12M9pzGaPT_5d64.crl (hash: raWEcjAkM1jkAjzCx1tv/4n2TXNu1UhM8vm+w/ShJv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/rvy2RB1w0usQ12M9pzGaPT_5d64.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/rvy2RB1w0usQ12M9pzGaPT_5d64.mft
rsync://rpki.ripe.net/repository/DEFAULT/rvy2RB1w0usQ12M9pzGaPT_5d64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:ee:88:55:51:e1:7f:4f:26:4e:a6:ab:19:9e:fd:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aefcb6441d70d2eb10d7633da7319a3d3ff977ae
Validity
Not Before: Apr 20 16:01:03 2025 GMT
Not After : Apr 21 16:01:03 2025 GMT
Subject: CN=09c03e94000dbf8041e108918976fcb661ad8e35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:cf:37:7b:33:48:d7:a9:40:cb:b6:97:81:89:
1a:e6:b7:f5:4e:48:d7:76:25:85:bf:d3:39:85:d9:
2b:50:ad:c4:e2:21:b1:46:f2:8b:cf:87:fc:62:9d:
6f:be:95:b3:46:d5:6c:1b:c0:0d:d4:97:b2:5d:ee:
ef:0c:38:3f:1b:ef:28:1f:6f:50:75:13:24:8e:12:
14:79:b0:4a:83:3b:57:b2:4b:cf:ec:fd:ea:0a:85:
3d:52:ea:ff:8b:b8:5d:86:9c:61:3b:31:37:6c:09:
41:64:1f:77:68:24:62:1b:8e:53:39:2d:06:2a:f9:
14:64:da:fb:4f:28:6e:0f:b2:1b:d6:fa:f4:71:cc:
3d:9a:b4:05:d4:1b:c4:7b:a8:ef:61:43:64:71:c0:
47:6e:12:5a:7e:fc:01:e9:ac:69:4f:02:90:f3:06:
1a:f0:a4:cd:cf:16:17:aa:ee:05:7e:b7:96:36:2f:
9d:10:6e:a4:f5:4a:6e:6d:6e:82:72:e4:d4:98:9a:
f9:72:32:68:f7:f0:53:6b:52:7d:b2:df:bf:3c:20:
04:22:68:99:ea:37:9b:d0:44:52:ac:9e:00:29:06:
14:8a:61:1c:05:e2:cb:6e:f6:65:a4:8d:08:2a:11:
64:57:02:8f:5e:f5:24:e1:58:c8:ed:82:e3:03:01:
33:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C0:3E:94:00:0D:BF:80:41:E1:08:91:89:76:FC:B6:61:AD:8E:35
X509v3 Authority Key Identifier:
keyid:AE:FC:B6:44:1D:70:D2:EB:10:D7:63:3D:A7:31:9A:3D:3F:F9:77:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rvy2RB1w0usQ12M9pzGaPT_5d64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/rvy2RB1w0usQ12M9pzGaPT_5d64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/rvy2RB1w0usQ12M9pzGaPT_5d64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:7a:cc:6c:d4:8e:5d:19:69:0c:fc:62:a6:d4:89:82:c2:62:
2b:63:97:60:d0:0d:a6:d4:15:f2:61:59:92:b4:47:32:84:26:
53:d0:7b:a4:be:63:8b:9e:a5:22:12:55:a1:9e:d1:b0:f9:55:
a4:71:5b:e1:d6:6e:ac:ea:72:c0:4b:24:ef:4c:8f:32:d9:20:
39:8b:ef:58:bb:aa:67:ef:33:9a:56:2f:a9:e4:fa:61:67:47:
d9:33:bd:fa:bb:2e:3a:c7:59:d2:72:30:f2:02:49:1d:89:06:
50:f9:b9:a0:5b:89:dd:ef:3a:1b:b3:81:71:5f:29:3e:df:2f:
41:41:63:07:77:e5:20:3f:94:6c:89:6d:40:b4:a8:07:15:70:
e3:5a:4b:61:1d:e8:ed:d0:61:58:93:b7:e3:68:fb:e0:2f:4b:
81:68:fe:31:5e:bf:b9:42:a9:14:54:d4:aa:a7:ed:6f:eb:14:
0c:1e:e8:91:0d:42:1d:64:df:c5:df:34:c1:39:f0:70:b2:ae:
ca:a8:a1:d1:de:b9:7f:ac:fd:78:4d:3b:dd:98:6e:db:c5:ca:
17:42:5c:b4:9b:3a:18:b2:b0:52:9a:24:42:fa:64:a3:5f:ab:
0a:1a:99:ff:ff:a0:46:26:10:44:9c:b8:31:c5:17:af:21:28:
08:72:f2:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:31:06 2025 by rpki-client