Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/RkXJxY1aSZm13OngcNMvSI4zH1I.mft
File: RkXJxY1aSZm13OngcNMvSI4zH1I.mft (raw, json)
Hash identifier: oKY4BDqnVyiL1ASgX1XQaqbVtcz+nNHQ7nHbo0X0CQg=
Subject key identifier: 3C:0C:C9:D8:0D:EB:7E:D5:28:CA:94:69:85:9C:32:3E:CA:E3:85:92
Authority key identifier: 46:45:C9:C5:8D:5A:49:99:B5:DC:E9:E0:70:D3:2F:48:8E:33:1F:52
Certificate issuer: /CN=4645c9c58d5a4999b5dce9e070d32f488e331f52
Certificate serial: 019644E8D8329B5C7E262BE52DAACD4DA57C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RkXJxY1aSZm13OngcNMvSI4zH1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/RkXJxY1aSZm13OngcNMvSI4zH1I.mft
Manifest number: 032E
Signing time: Thu 17 Apr 2025 18:00:32 +0000
Manifest this update: Thu 17 Apr 2025 18:00:32 +0000
Manifest next update: Fri 18 Apr 2025 18:00:32 +0000
Files and hashes: 1: RkXJxY1aSZm13OngcNMvSI4zH1I.crl (hash: tth5wsVLvnDN4lNkEUxMvIwaQi5yjclnlexqadK072s=)
2: S8w484i2So0upLimT4DivXMFWTc.roa (hash: Xwh1nJvihxD2+JIu0EcE5o1EcOXEFkB9P4xQdM683xQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/RkXJxY1aSZm13OngcNMvSI4zH1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/RkXJxY1aSZm13OngcNMvSI4zH1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/RkXJxY1aSZm13OngcNMvSI4zH1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:e8:d8:32:9b:5c:7e:26:2b:e5:2d:aa:cd:4d:a5:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4645c9c58d5a4999b5dce9e070d32f488e331f52
Validity
Not Before: Apr 17 18:00:32 2025 GMT
Not After : Apr 18 18:00:32 2025 GMT
Subject: CN=3c0cc9d80deb7ed528ca9469859c323ecae38592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:20:8a:64:31:c1:28:4c:35:68:4f:a9:4e:bd:
0f:a4:d8:4e:94:15:ca:d3:a5:87:6d:c2:33:64:08:
2d:1b:4e:29:09:8b:60:c2:f6:de:23:4d:e0:95:c0:
f5:8d:af:16:a8:1c:c1:c6:ba:a2:0a:58:f3:67:c4:
87:4f:12:40:5a:6f:b2:32:ae:67:7b:11:54:b9:5c:
78:24:1c:6d:55:fa:4c:d7:06:3b:6b:a1:6d:5c:87:
dc:1f:99:ef:5e:09:1f:1e:f1:87:af:98:47:b1:9e:
9b:a7:15:46:98:0f:98:b5:33:1f:85:d6:9b:52:79:
ed:47:7a:ba:c1:b9:77:0a:c9:b6:c7:4f:1a:55:6a:
26:f6:90:11:f0:33:98:b7:a3:7a:65:92:82:c8:a2:
9a:d6:3f:a3:0e:42:cf:29:ce:3f:c0:57:89:a4:28:
4e:0b:02:e3:b6:4d:ae:ed:c0:2d:16:c3:2a:aa:0f:
65:54:bd:53:c7:a9:aa:41:7e:16:00:54:5f:9c:0c:
07:9e:48:f1:fa:af:b6:7d:03:36:33:78:bc:1e:8f:
30:32:3b:44:37:be:29:8b:9c:3f:80:ca:e6:04:b5:
31:b1:1a:a1:1f:2f:46:69:6b:fb:21:0c:48:14:83:
29:c3:98:15:f5:fb:b9:1b:31:3c:e9:26:db:96:97:
b8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:0C:C9:D8:0D:EB:7E:D5:28:CA:94:69:85:9C:32:3E:CA:E3:85:92
X509v3 Authority Key Identifier:
keyid:46:45:C9:C5:8D:5A:49:99:B5:DC:E9:E0:70:D3:2F:48:8E:33:1F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RkXJxY1aSZm13OngcNMvSI4zH1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/RkXJxY1aSZm13OngcNMvSI4zH1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/RkXJxY1aSZm13OngcNMvSI4zH1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:5d:b7:dd:4c:cc:ca:2a:00:6f:a8:de:86:7b:97:a6:04:10:
31:34:3b:21:c5:c6:0e:f2:0a:a8:88:0e:36:bf:e8:5c:ca:c7:
7b:36:08:b8:91:bf:c3:bb:bb:0f:42:08:db:99:1d:4a:fa:80:
eb:93:e9:d4:09:d4:35:9f:31:67:5e:28:0a:3f:40:4b:9f:40:
bf:d9:e8:d0:15:46:7a:6c:d2:e5:03:95:da:8b:b5:b6:ab:ab:
26:d8:df:aa:e7:2c:98:06:40:5f:1b:18:d0:53:f6:47:ac:85:
63:f5:78:21:38:b7:42:b3:b5:93:19:02:c6:0e:33:c2:2d:88:
f8:e1:d0:ef:b0:cb:e8:3c:94:a0:85:aa:c1:e1:ce:36:ef:a0:
a3:54:61:84:ab:a2:cf:4b:f2:1d:0b:cf:74:a9:bf:24:09:16:
48:e8:0d:5c:ce:1a:fc:76:3e:ae:6c:7c:29:15:40:83:8f:71:
83:83:1d:2e:70:6e:ff:9a:af:bb:96:54:30:85:1e:1b:36:2d:
1c:2a:1f:c7:1c:f5:03:a9:42:ca:13:9b:1a:45:e0:57:77:a7:
f6:25:7f:a7:1a:66:5a:71:62:fb:9a:62:86:83:c8:a7:f0:b4:
60:98:ac:3d:77:9f:cb:d3:77:fb:2e:8a:21:08:2a:85:20:5d:
69:7e:88:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:22:34 2025 by rpki-client