Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft
File: r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft (raw, json)
Hash identifier: kTGzRwfXBF1dEffdhxnPXwkzIudVI016Cg1/lSJmEco=
Subject key identifier: 7B:1F:95:5C:9D:35:1C:EB:0C:30:3C:F7:3D:01:23:4A:41:B4:43:A7
Authority key identifier: AF:85:BB:8A:50:44:3E:50:4C:48:53:CC:E0:25:EF:58:34:1C:1D:50
Certificate issuer: /CN=af85bb8a50443e504c4853cce025ef58341c1d50
Certificate serial: 01964D7F0864B8A333FC198EE8580CCAE11C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4W7ilBEPlBMSFPM4CXvWDQcHVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft
Manifest number: 0971
Signing time: Sat 19 Apr 2025 10:01:32 +0000
Manifest this update: Sat 19 Apr 2025 10:01:32 +0000
Manifest next update: Sun 20 Apr 2025 10:01:32 +0000
Files and hashes: 1: r4W7ilBEPlBMSFPM4CXvWDQcHVA.crl (hash: 8encsfzzdehinQ0Z1B+aynjZdc1ucynzcGgmlhqfd68=)
2: toLcHJuza0nk_rSiToUi8cqjpA8.roa (hash: kRROIdBqbwyv0kgRq3rS5l7ig0u7UsDgEiLSwPvEVgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/r4W7ilBEPlBMSFPM4CXvWDQcHVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7f:08:64:b8:a3:33:fc:19:8e:e8:58:0c:ca:e1:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af85bb8a50443e504c4853cce025ef58341c1d50
Validity
Not Before: Apr 19 10:01:32 2025 GMT
Not After : Apr 20 10:01:32 2025 GMT
Subject: CN=7b1f955c9d351ceb0c303cf73d01234a41b443a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:21:a0:7f:b6:97:12:68:4e:3f:77:ce:b1:26:
30:23:47:03:99:a2:36:15:b6:25:81:81:6c:de:cc:
ed:5b:c5:22:f8:2e:84:9a:4b:81:58:c8:69:ae:9c:
2a:1d:e6:8b:35:c5:9b:15:ce:c8:bb:2f:b5:3f:c4:
e9:6b:07:09:8f:f9:60:d9:14:64:35:82:db:ad:d3:
bc:31:60:ae:4a:02:72:00:eb:7e:3f:a5:8d:7c:c5:
d7:a4:e9:ba:06:c8:03:4e:c0:d0:8d:e3:86:fc:ca:
14:7c:2a:b5:6a:6c:bc:2f:26:cd:3d:0e:d9:80:5f:
ab:e7:01:fa:91:c5:58:e0:28:31:1f:5d:79:48:d0:
78:4a:11:ea:dd:5f:e8:13:35:82:8a:c4:3e:48:71:
dc:7a:8b:fb:0b:c1:58:2d:16:3b:8d:f0:63:bc:8d:
05:a9:59:1f:47:98:6e:f9:9a:e0:f8:6b:33:38:f5:
a9:d7:07:ee:7c:47:15:9a:4f:cc:4e:22:ac:71:3b:
1d:6d:15:08:6d:ab:af:90:3d:1b:5d:eb:bb:b2:91:
bc:75:85:02:5a:a8:88:9c:c1:8b:80:fc:29:bb:d3:
7b:4b:af:19:aa:6e:11:7e:63:e8:4f:dc:82:89:3c:
0e:91:35:9f:89:4c:bc:53:aa:a5:e8:6b:fd:96:16:
32:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:1F:95:5C:9D:35:1C:EB:0C:30:3C:F7:3D:01:23:4A:41:B4:43:A7
X509v3 Authority Key Identifier:
keyid:AF:85:BB:8A:50:44:3E:50:4C:48:53:CC:E0:25:EF:58:34:1C:1D:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4W7ilBEPlBMSFPM4CXvWDQcHVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:48:d0:20:23:66:ac:39:9f:2b:a0:92:de:ee:6c:19:3c:56:
87:3c:62:ce:49:13:a9:66:b5:a9:aa:5f:b1:cc:60:ce:27:5a:
32:81:ba:c3:d3:42:86:ce:8c:b2:bf:51:8f:9c:59:1a:1d:93:
ec:9f:af:d7:0f:6f:17:2c:2f:17:17:6b:6c:2f:87:2b:6a:c6:
71:5d:23:3a:ed:17:e0:2e:f2:50:f6:5b:bb:89:f8:f3:c7:62:
8c:25:bb:49:4d:a4:f6:98:16:39:88:92:d4:73:60:13:d7:e6:
8b:a8:0e:38:28:47:55:36:d2:f6:6f:0c:6b:95:a1:b7:25:d9:
f9:70:91:89:c4:54:6c:35:43:14:90:8f:e5:e6:b5:94:df:fa:
e6:63:0e:2d:59:db:da:ca:a7:d5:f3:52:ca:f0:d6:61:6e:5a:
a8:1a:f8:69:b2:50:42:fb:40:46:f5:b7:d5:78:c4:c4:9b:14:
ce:c5:cb:a4:a9:3b:2a:9a:ae:b3:45:a1:7c:07:4e:3b:dc:d0:
ef:98:62:bc:71:06:71:ce:70:48:22:85:bd:72:d6:43:b4:6a:
2a:5d:c0:8e:2a:2a:ad:10:09:ff:f3:d6:3f:e6:04:92:91:7e:
74:9a:2a:55:12:9b:2d:c4:96:99:96:c8:f7:a8:cc:11:cd:0b:
f0:cd:87:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:23:03 2025 by rpki-client