
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/1d44f2-1706-4bf1-b71d-74ca36402a85/1/RBMe6Tam-kL_OvCmrobCxmU91XM.mft
File: RBMe6Tam-kL_OvCmrobCxmU91XM.mft (raw, json)
Hash identifier: +q6656KRUFuXK+8CXOUAyOP1Rjr911xyb/ZjfqOVXJk=
Subject key identifier: 89:8D:7A:E4:0D:15:B2:4C:2F:37:1F:BB:81:C0:89:D3:58:AC:B8:2C
Authority key identifier: 44:13:1E:E9:36:A6:FA:42:FF:3A:F0:A6:AE:86:C2:C6:65:3D:D5:73
Certificate issuer: /CN=44131ee936a6fa42ff3af0a6ae86c2c6653dd573
Certificate serial: 019653EE673674166B827053BC44B3C03A43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RBMe6Tam-kL_OvCmrobCxmU91XM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/1d44f2-1706-4bf1-b71d-74ca36402a85/1/RBMe6Tam-kL_OvCmrobCxmU91XM.mft
Manifest number: 14FE
Signing time: Sun 20 Apr 2025 16:00:54 +0000
Manifest this update: Sun 20 Apr 2025 16:00:54 +0000
Manifest next update: Mon 21 Apr 2025 16:00:54 +0000
Files and hashes: 1: RBMe6Tam-kL_OvCmrobCxmU91XM.crl (hash: VCbBmAiyaEsdLJ0WnTYbc1fD/KG284VXaRYmbZKqnVg=)
2: xHkJHzTD8_YsVJb1E014CGyqfNk.roa (hash: vU0FBIoesehMBLGSsYMRz2M7MHLMPr/AmIolqA/4dRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/1d44f2-1706-4bf1-b71d-74ca36402a85/1/RBMe6Tam-kL_OvCmrobCxmU91XM.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/1d44f2-1706-4bf1-b71d-74ca36402a85/1/RBMe6Tam-kL_OvCmrobCxmU91XM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RBMe6Tam-kL_OvCmrobCxmU91XM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:ee:67:36:74:16:6b:82:70:53:bc:44:b3:c0:3a:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44131ee936a6fa42ff3af0a6ae86c2c6653dd573
Validity
Not Before: Apr 20 16:00:54 2025 GMT
Not After : Apr 21 16:00:54 2025 GMT
Subject: CN=898d7ae40d15b24c2f371fbb81c089d358acb82c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0b:d1:c7:7e:3c:b1:fd:fc:b3:28:42:02:ae:
85:25:d6:4c:74:04:76:7e:f0:2a:ac:42:d4:7a:1f:
ff:1e:d7:e2:a5:9e:67:19:4b:36:85:16:32:69:17:
ea:b6:db:f4:9b:a5:11:65:b4:c7:45:31:03:9f:b1:
3a:0e:fa:30:54:47:2d:20:53:96:08:a1:de:d3:8f:
08:ea:39:b5:21:52:a2:71:42:b4:fe:b7:74:3c:69:
58:86:11:4e:52:e0:9f:b4:29:ee:1b:be:17:b8:da:
7e:55:c6:89:24:5f:6c:f7:26:04:df:74:95:a0:df:
90:66:1b:48:7b:67:8d:59:ae:01:82:7f:33:d6:d7:
7b:af:b3:46:d4:88:a6:68:4d:47:e0:68:30:19:0a:
00:b6:e1:21:21:54:f0:ab:98:d4:6f:cb:4d:6d:72:
49:d0:37:66:b0:36:5c:0d:03:8a:d7:4a:01:c0:72:
14:d5:7a:d8:d3:ea:7e:91:24:89:3c:1c:5f:c0:59:
9c:20:fe:6f:ac:52:80:9e:4a:f8:97:ef:7f:de:35:
40:c9:65:7c:c4:96:5d:dd:83:4d:8b:ec:72:cd:58:
78:96:99:31:e4:95:14:2d:9f:37:aa:16:01:61:3f:
5c:aa:ad:63:95:0b:08:ad:39:18:2d:3a:aa:28:c8:
35:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:8D:7A:E4:0D:15:B2:4C:2F:37:1F:BB:81:C0:89:D3:58:AC:B8:2C
X509v3 Authority Key Identifier:
keyid:44:13:1E:E9:36:A6:FA:42:FF:3A:F0:A6:AE:86:C2:C6:65:3D:D5:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBMe6Tam-kL_OvCmrobCxmU91XM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1d44f2-1706-4bf1-b71d-74ca36402a85/1/RBMe6Tam-kL_OvCmrobCxmU91XM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1d44f2-1706-4bf1-b71d-74ca36402a85/1/RBMe6Tam-kL_OvCmrobCxmU91XM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:c6:53:36:59:cc:b9:8e:7a:44:ae:86:a0:75:1d:5b:50:0e:
9d:39:4f:7b:57:c5:55:7b:61:37:83:c0:9a:29:d7:d0:fb:c1:
1b:59:53:3d:49:87:b0:ed:de:d9:96:98:8d:89:18:55:5a:59:
5d:61:7b:91:6c:af:f4:82:07:f5:cf:89:6e:bb:66:6c:fd:de:
fd:b0:14:bc:5e:7f:2e:c3:9c:f7:6c:cc:ea:4c:4b:29:38:f8:
db:3e:13:d6:18:b7:43:8b:4c:1e:92:91:7a:f8:f3:7c:db:17:
2d:77:2c:ff:15:e2:00:cc:1c:ae:ce:ae:9b:9b:2c:44:72:1f:
53:5c:34:8d:72:c7:ef:c1:e8:c4:e8:39:22:be:84:5d:a8:3f:
31:62:78:5a:f4:5d:88:02:e6:9a:be:4c:80:fd:7d:59:51:4d:
18:ce:15:c2:38:6d:63:f0:48:d6:68:35:a9:bc:cf:48:4a:f9:
d9:d1:00:bb:ad:94:8d:1e:84:38:ad:fd:79:c9:22:13:cd:44:
7f:b7:32:0a:52:d0:28:08:24:3f:1e:03:39:a0:a8:4d:56:f2:
28:85:2f:97:de:8e:35:a9:87:06:8f:ff:70:2f:f1:ae:e7:e1:
56:01:43:49:02:4e:83:71:2d:d2:c8:56:1b:6b:50:86:09:56:
b4:89:b8:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:26:19 2025 by rpki-client