Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.mft
File: RVffPlRtVtu10jD2EcckxZmnIlE.mft (raw, json)
Hash identifier: duaYJxXpwDTkbmPh0ehAHaqBh5TmH1PRxsUfRZRoENU=
Subject key identifier: 20:AE:7E:9E:B6:9E:40:2B:40:15:53:64:35:C7:8A:5A:C9:71:9F:EF
Authority key identifier: 45:57:DF:3E:54:6D:56:DB:B5:D2:30:F6:11:C7:24:C5:99:A7:22:51
Certificate issuer: /CN=4557df3e546d56dbb5d230f611c724c599a72251
Certificate serial: 01962ABBFFBFC7D118DAC39295D34B0634E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RVffPlRtVtu10jD2EcckxZmnIlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.mft
Manifest number: 05CF
Signing time: Sat 12 Apr 2025 16:01:25 +0000
Manifest this update: Sat 12 Apr 2025 16:01:25 +0000
Manifest next update: Sun 13 Apr 2025 16:01:25 +0000
Files and hashes: 1: 8bsQRC6tEXl8CBwmVFzVd76zzgI.roa (hash: C8qiZHuVAIBOKIv/baZ/CLEIEY2S6o8WOpdp6qtA5us=)
2: RVffPlRtVtu10jD2EcckxZmnIlE.crl (hash: nu7sXT7I8+1kP0ZYh89UnIgJRrdpbx/ZdyTJj+y9nzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RVffPlRtVtu10jD2EcckxZmnIlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2a:bb:ff:bf:c7:d1:18:da:c3:92:95:d3:4b:06:34:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4557df3e546d56dbb5d230f611c724c599a72251
Validity
Not Before: Apr 12 16:01:25 2025 GMT
Not After : Apr 13 16:01:25 2025 GMT
Subject: CN=20ae7e9eb69e402b4015536435c78a5ac9719fef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:aa:5d:c0:2f:d9:bc:a7:b2:ba:46:f3:ba:e5:
2d:58:b6:d1:68:fa:44:c8:10:92:08:2d:98:da:61:
20:84:b1:b1:87:db:d4:03:37:14:b7:eb:fa:3b:fe:
13:94:3d:da:23:46:95:0b:b0:f7:b0:4b:5d:bf:8f:
09:25:c1:ad:7a:0f:13:74:01:ee:b0:5c:9b:e6:10:
df:0e:57:86:fa:4e:23:3d:01:5d:fd:6a:e4:f4:92:
94:2d:22:54:82:b4:a1:6e:42:b3:73:fc:da:d6:6e:
d5:26:d1:be:a8:85:0f:4f:50:19:ea:9f:20:10:6b:
12:dc:a2:26:45:19:4f:7e:fa:1d:bf:00:88:a3:71:
75:e1:ba:b9:77:fd:3a:e1:08:29:7c:28:bc:94:14:
bb:d6:41:d2:46:13:ec:6e:79:da:b6:49:a2:b7:d0:
98:b2:ad:73:83:8a:10:8b:9e:71:51:f8:92:f1:dc:
31:0a:6c:7c:96:ff:6e:d4:b7:fb:dd:86:cf:24:42:
93:d3:ae:8a:27:38:6c:ff:6e:e5:61:c9:56:24:e6:
7b:83:5f:7c:dd:1d:93:4d:bc:2d:11:37:24:c7:18:
67:eb:c8:3b:11:be:e0:47:67:23:7d:c0:86:81:07:
6c:00:b2:a2:d4:a7:9f:62:a0:b2:d4:97:e3:d9:e1:
71:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:AE:7E:9E:B6:9E:40:2B:40:15:53:64:35:C7:8A:5A:C9:71:9F:EF
X509v3 Authority Key Identifier:
keyid:45:57:DF:3E:54:6D:56:DB:B5:D2:30:F6:11:C7:24:C5:99:A7:22:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RVffPlRtVtu10jD2EcckxZmnIlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:ad:72:a8:06:d4:b2:04:4c:dc:de:a4:73:07:24:46:98:99:
c3:9d:c5:cc:e6:92:ef:77:8c:9d:12:b6:75:a2:dc:f2:b8:ad:
e3:6a:9c:7e:21:7f:98:33:d5:c3:70:59:ff:62:e9:26:d6:61:
00:df:76:14:17:8a:01:f9:72:c7:8c:ec:53:9e:2c:79:fd:8d:
6b:99:bb:41:71:14:07:9c:f1:c4:e8:c8:d1:1e:86:fd:ab:a6:
49:26:d7:ea:b4:67:55:14:b1:af:8e:d0:5c:76:ff:ef:ba:d4:
cf:0b:96:e7:65:bc:83:f2:aa:f0:e7:77:85:17:a4:59:58:b6:
c0:be:2b:f5:6c:d2:f8:c2:7f:5d:63:5c:b0:32:f1:d7:7d:ee:
f5:cb:e6:c4:d3:2b:45:35:32:c7:df:3d:8b:47:0a:ef:6e:1b:
a5:2f:e4:2e:c8:5c:58:88:44:bf:63:23:cf:ca:b4:b5:1d:68:
0c:d0:a4:24:06:56:a2:6a:0e:8a:0f:6c:39:01:72:14:0c:fe:
29:3d:11:dd:77:35:c2:d6:76:85:aa:9c:38:f0:48:b5:a7:7d:
41:8d:4c:26:74:6b:1c:9f:b5:5a:2b:5f:3c:40:50:eb:a8:b7:
04:fa:b0:d6:a4:98:ae:fa:5f:5f:d4:95:b4:58:60:fc:26:4d:
50:b7:fb:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 23:42:39 2025 by rpki-client