Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.mft
File: RNLnV4qslPQpYKeA05ltqLtGlHc.mft (raw, json)
Hash identifier: xZUq6rhkmLoo3DrRJZwcWuu67e8rW78qnEOYHRkd2eU=
Subject key identifier: C8:76:B4:D1:27:F5:BD:1F:D9:05:8D:2B:4A:35:75:3E:B5:88:AF:C2
Authority key identifier: 44:D2:E7:57:8A:AC:94:F4:29:60:A7:80:D3:99:6D:A8:BB:46:94:77
Certificate issuer: /CN=44d2e7578aac94f42960a780d3996da8bb469477
Certificate serial: 01964E236D093A60653C4589BBE655FA5BE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RNLnV4qslPQpYKeA05ltqLtGlHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.mft
Manifest number: 0BE1
Signing time: Sat 19 Apr 2025 13:01:06 +0000
Manifest this update: Sat 19 Apr 2025 13:01:06 +0000
Manifest next update: Sun 20 Apr 2025 13:01:06 +0000
Files and hashes: 1: Mls2HM8_FY_IKXa_7YokWR8k2as.roa (hash: CiqhaGVIRMfnCHendb0wwlGmTiUs+e665f1gVqsw+T0=)
2: RNLnV4qslPQpYKeA05ltqLtGlHc.crl (hash: yOGro1zZvajKLD8NwryrPp6mijDjjnDC6TySgFNRN34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/RNLnV4qslPQpYKeA05ltqLtGlHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:23:6d:09:3a:60:65:3c:45:89:bb:e6:55:fa:5b:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44d2e7578aac94f42960a780d3996da8bb469477
Validity
Not Before: Apr 19 13:01:06 2025 GMT
Not After : Apr 20 13:01:06 2025 GMT
Subject: CN=c876b4d127f5bd1fd9058d2b4a35753eb588afc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:81:8c:03:17:dd:69:8d:95:38:1b:13:db:e5:
90:f0:01:1b:1f:63:31:f8:fa:ec:8b:45:29:de:11:
6f:d5:b8:6f:85:7e:44:9c:7a:15:ef:e6:d2:73:5f:
f2:e2:3a:e9:3c:1c:5d:4f:9c:14:10:ac:84:94:b8:
4a:2e:54:24:37:0d:77:2f:ce:92:58:7b:f3:1b:9d:
d7:67:95:ac:65:4d:6d:f1:ab:d4:91:56:4c:93:e0:
3e:41:6a:16:fd:3a:62:22:01:fe:d8:b5:5e:68:7e:
17:88:2e:8b:fe:73:05:d0:f6:28:3e:36:e9:4f:b3:
8d:b9:aa:51:69:99:66:7a:d8:04:d5:8c:67:70:e3:
32:58:4e:61:4c:e7:2b:de:0f:06:28:61:05:05:cd:
37:42:50:8f:29:3a:22:34:6e:bb:21:df:c2:46:07:
16:0b:fb:a8:25:3b:89:12:df:9e:25:03:5b:12:23:
95:3b:29:1d:02:27:29:f9:63:6a:3a:47:87:4c:0b:
55:4c:f6:b2:7d:ff:62:8d:0f:88:92:8c:24:12:4c:
b1:1b:ee:89:69:5b:40:34:fe:4e:b4:45:f4:3c:10:
ab:eb:14:e0:d9:58:d9:bd:da:70:39:ea:93:86:d2:
de:b9:dc:9e:53:64:e5:91:00:1b:f9:d3:bc:80:ad:
44:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:76:B4:D1:27:F5:BD:1F:D9:05:8D:2B:4A:35:75:3E:B5:88:AF:C2
X509v3 Authority Key Identifier:
keyid:44:D2:E7:57:8A:AC:94:F4:29:60:A7:80:D3:99:6D:A8:BB:46:94:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RNLnV4qslPQpYKeA05ltqLtGlHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:4b:bc:be:60:42:eb:10:30:db:88:c9:99:fe:57:ba:7c:32:
21:98:c3:2d:22:8f:96:eb:74:ce:a8:62:f7:7e:62:be:e5:53:
98:c4:3b:c1:44:22:2d:b4:11:ea:3f:bb:3d:33:15:c7:c5:90:
a6:dc:ce:73:e7:a6:74:c6:38:c5:be:ad:97:c8:d3:4f:e3:f8:
bf:13:60:d5:9c:38:28:01:d8:be:dd:06:92:21:30:89:ba:6c:
b8:f0:a7:09:c6:6c:f8:c5:11:8d:e2:68:6f:ae:00:2e:02:8d:
79:04:38:85:58:e1:b3:59:df:ab:b7:a3:d8:c7:da:1c:0c:5a:
89:38:12:57:ac:7f:65:26:ac:77:a2:72:da:7c:1d:d5:fd:61:
9f:d5:1a:15:c6:32:fa:a3:4b:dd:a4:ac:17:e6:e6:26:ed:40:
80:00:91:9f:bc:34:17:9d:57:b4:5d:de:53:2d:b8:76:ab:f5:
96:74:d1:e8:78:0c:a4:bd:e6:ca:5b:68:0d:2b:c2:46:56:d6:
52:7d:f6:02:19:3f:b0:17:80:26:ca:fa:51:88:67:34:ae:0f:
60:2b:09:a2:9b:9d:79:1c:b4:52:1f:a4:b2:22:10:95:c6:b8:
f2:43:94:ab:3b:c8:69:c5:68:fb:df:65:ee:c0:82:4e:29:1e:
d5:2a:d7:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:13:40 2025 by rpki-client