Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/1721d8-aa46-4faa-ae15-c5e32c8272d7/1/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.mft
File: RqpgZ2wTDGQ45FtaYHIQ6VZraDI.mft (raw, json)
Hash identifier: ngpo9NU6peKDSSVkxswjJo3y8PwjRijeeaXPf57OrSQ=
Subject key identifier: 5D:CD:45:AD:3E:03:7D:90:35:16:7D:AB:10:4C:22:9D:5F:2B:F0:60
Authority key identifier: 46:AA:60:67:6C:13:0C:64:38:E4:5B:5A:60:72:10:E9:56:6B:68:32
Certificate issuer: /CN=46aa60676c130c6438e45b5a607210e9566b6832
Certificate serial: 019653B77D08E7C983270DBEBD8F9DD3699E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/1721d8-aa46-4faa-ae15-c5e32c8272d7/1/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.mft
Manifest number: 0216
Signing time: Sun 20 Apr 2025 15:00:56 +0000
Manifest this update: Sun 20 Apr 2025 15:00:56 +0000
Manifest next update: Mon 21 Apr 2025 15:00:56 +0000
Files and hashes: 1: 4pIrmmCZWAO8NuTmun2AQKQETQo.roa (hash: Pf6nhAI8L5UL8XOlhvccLv1CzKTIGW/DapLLMv9479I=)
2: RqpgZ2wTDGQ45FtaYHIQ6VZraDI.crl (hash: 5nuCx5zTivWemOLy2appUwMJY2m4lrWiSh2y6P4aS/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/1721d8-aa46-4faa-ae15-c5e32c8272d7/1/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/1721d8-aa46-4faa-ae15-c5e32c8272d7/1/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 15:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:b7:7d:08:e7:c9:83:27:0d:be:bd:8f:9d:d3:69:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46aa60676c130c6438e45b5a607210e9566b6832
Validity
Not Before: Apr 20 15:00:56 2025 GMT
Not After : Apr 21 15:00:56 2025 GMT
Subject: CN=5dcd45ad3e037d9035167dab104c229d5f2bf060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b7:4b:51:39:92:32:e1:9a:32:76:7a:ef:24:
21:2f:84:07:01:d9:b1:67:33:1d:46:e2:07:a1:30:
2e:12:6f:e9:8c:21:1e:74:f2:cc:97:6e:0f:69:c2:
bf:d7:52:a9:39:3f:d0:87:2b:68:4f:e1:73:fa:78:
1f:9d:2e:1e:ea:a9:a9:d6:e2:f8:69:f9:bd:31:ea:
c6:90:de:55:af:42:84:b6:9d:73:1a:6b:b7:77:6b:
4f:c4:6d:a9:91:d1:6f:4b:a8:a2:7f:bc:e0:5f:9e:
67:5f:ee:d4:e3:e1:e5:58:7c:eb:48:df:13:c7:03:
77:01:e5:84:50:89:20:43:a0:e0:0b:ea:40:45:05:
2b:9d:5a:a7:41:06:e2:b6:fe:2c:d1:d3:82:d0:5d:
f7:d7:fb:61:68:17:a3:7d:d1:d6:98:d6:ae:00:d3:
09:0a:d5:06:f2:6a:ca:f1:f2:12:e8:c3:9c:c9:9b:
0b:fb:c1:39:82:3e:50:0e:51:e8:0b:05:3f:5e:d6:
70:c5:29:a0:8e:bf:e5:6b:71:60:17:c0:b1:89:18:
cf:c0:bf:60:52:bd:1c:0c:ca:3d:d4:37:f5:72:7d:
12:64:ee:b2:db:a4:98:26:3e:82:18:09:e2:bd:cd:
87:3b:15:fc:83:d1:58:a3:33:32:fb:81:23:a9:21:
95:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:CD:45:AD:3E:03:7D:90:35:16:7D:AB:10:4C:22:9D:5F:2B:F0:60
X509v3 Authority Key Identifier:
keyid:46:AA:60:67:6C:13:0C:64:38:E4:5B:5A:60:72:10:E9:56:6B:68:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1721d8-aa46-4faa-ae15-c5e32c8272d7/1/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1721d8-aa46-4faa-ae15-c5e32c8272d7/1/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:64:98:18:aa:f5:e5:8c:73:54:1f:d3:e3:66:94:4b:fc:88:
55:5d:07:13:be:31:cc:61:95:5d:ab:4e:5e:3c:fc:9d:55:9b:
a9:6f:a0:ed:27:7d:c3:39:85:e7:8b:59:f9:39:b8:c5:af:8d:
f4:b1:87:e0:fa:17:f1:ed:16:c2:71:98:3b:c4:3d:1b:09:e8:
5c:70:82:62:be:58:0a:aa:c8:e2:e5:60:46:07:6f:cd:91:5d:
09:27:5d:11:92:ad:73:20:c8:f5:d6:2a:3c:12:f5:12:2f:28:
b1:49:a0:d3:4a:e1:f1:68:0c:36:03:06:c9:41:f6:34:2c:91:
18:ec:94:da:88:51:6f:2f:48:da:85:4a:e6:22:ae:0e:36:9b:
23:4f:b4:df:df:60:5b:ba:6d:6d:cd:73:c8:d6:5e:75:1f:f7:
5f:f2:6c:09:19:4a:02:8e:47:2f:48:63:14:7d:37:1e:72:23:
7d:0b:9b:9f:21:c5:5e:e5:e6:37:7e:40:35:fc:32:c4:59:20:
a1:6c:03:9d:4d:32:fc:a4:98:d7:d5:8a:b3:cd:36:b3:a3:56:
c2:2b:bc:df:90:29:f4:7d:f5:f1:8b:03:47:ac:18:16:8d:22:
db:9b:b0:cc:59:a3:1a:5f:56:ce:99:44:bf:fc:05:11:1a:ab:
28:bc:15:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:14:50 2025 by rpki-client