Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/db0519-4e5a-4b75-88fd-bbc239e897eb/1/RIyjlTdZfPrmCuBCHbjgmLTiYTA.mft
File: RIyjlTdZfPrmCuBCHbjgmLTiYTA.mft (raw, json)
Hash identifier: 08sfV7/KHGBIM3ptaWz+SoI2x6PjnKsGV2aeos8TQQk=
Subject key identifier: F4:D9:94:91:FE:5D:3A:0A:E6:BA:C0:51:9D:5B:80:A8:5E:28:05:A0
Authority key identifier: 44:8C:A3:95:37:59:7C:FA:E6:0A:E0:42:1D:B8:E0:98:B4:E2:61:30
Certificate issuer: /CN=448ca39537597cfae60ae0421db8e098b4e26130
Certificate serial: 01964C6B5A8FBAB4E7A3245A3AC07009609A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RIyjlTdZfPrmCuBCHbjgmLTiYTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/db0519-4e5a-4b75-88fd-bbc239e897eb/1/RIyjlTdZfPrmCuBCHbjgmLTiYTA.mft
Manifest number: 14FA
Signing time: Sat 19 Apr 2025 05:00:25 +0000
Manifest this update: Sat 19 Apr 2025 05:00:25 +0000
Manifest next update: Sun 20 Apr 2025 05:00:25 +0000
Files and hashes: 1: DVCmwON0mS6l5sSG4weDe20V1zw.roa (hash: jRc8aZ9DxIdAIzUKCrei9MUaFGOvyvUWkRGm1QRrv9c=)
2: RIyjlTdZfPrmCuBCHbjgmLTiYTA.crl (hash: Pm9L/FrJ5EkdvwbaI8oXGO0aqz+zhXxMUqo/llcr7I0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/db0519-4e5a-4b75-88fd-bbc239e897eb/1/RIyjlTdZfPrmCuBCHbjgmLTiYTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/db0519-4e5a-4b75-88fd-bbc239e897eb/1/RIyjlTdZfPrmCuBCHbjgmLTiYTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RIyjlTdZfPrmCuBCHbjgmLTiYTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:6b:5a:8f:ba:b4:e7:a3:24:5a:3a:c0:70:09:60:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=448ca39537597cfae60ae0421db8e098b4e26130
Validity
Not Before: Apr 19 05:00:25 2025 GMT
Not After : Apr 20 05:00:25 2025 GMT
Subject: CN=f4d99491fe5d3a0ae6bac0519d5b80a85e2805a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b0:9e:22:8b:b2:b4:73:a5:47:b7:9b:40:c2:
24:5c:4f:bb:d6:3e:fd:a9:5c:0e:78:c2:74:55:5b:
e6:fd:b0:22:bc:19:77:45:e6:86:21:d1:52:47:e9:
16:f4:d7:92:6f:0a:90:16:72:a4:36:73:d8:65:3c:
5c:6e:2f:43:ea:bd:c3:68:aa:15:75:60:d1:b8:4c:
97:60:e4:44:bb:60:07:b8:ba:c0:15:c6:b3:f8:02:
83:2b:d0:e6:8b:1a:35:55:7e:71:fe:8d:fd:31:dd:
85:f2:34:ff:93:18:b9:93:4c:f0:65:cd:7c:d7:a9:
96:e8:41:0d:74:24:7a:af:27:ba:77:d1:ae:ef:04:
b5:ef:db:0e:db:3a:ef:cd:c3:79:11:9f:e5:85:90:
a7:e1:74:60:43:93:59:1b:a4:9f:05:1b:70:58:d2:
3d:56:84:a5:9f:b8:2a:78:f2:1a:a5:cc:f6:9f:cb:
3b:1b:2e:45:6a:36:25:0c:21:a9:b6:63:85:ec:9f:
70:09:92:a1:34:df:ae:2a:65:e8:f0:47:94:7b:7e:
9b:f7:dc:54:c0:7f:c5:11:a2:84:fc:23:21:31:c2:
59:bd:c8:8c:54:10:1e:3d:89:8a:9c:09:61:8d:15:
e6:61:fb:40:bf:ce:1d:3e:ff:33:09:49:32:b0:0e:
ed:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:D9:94:91:FE:5D:3A:0A:E6:BA:C0:51:9D:5B:80:A8:5E:28:05:A0
X509v3 Authority Key Identifier:
keyid:44:8C:A3:95:37:59:7C:FA:E6:0A:E0:42:1D:B8:E0:98:B4:E2:61:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RIyjlTdZfPrmCuBCHbjgmLTiYTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/db0519-4e5a-4b75-88fd-bbc239e897eb/1/RIyjlTdZfPrmCuBCHbjgmLTiYTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/db0519-4e5a-4b75-88fd-bbc239e897eb/1/RIyjlTdZfPrmCuBCHbjgmLTiYTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:1e:97:c7:48:e6:46:81:cb:38:1a:ff:93:bc:c4:2b:fe:78:
94:35:5f:33:96:1e:27:49:a6:74:82:d4:27:e3:db:81:c6:a3:
c5:c7:32:c3:1b:48:64:6d:9f:0c:0d:ff:81:0d:a4:d1:e3:63:
42:38:6a:45:95:77:23:ca:52:86:81:1a:4f:21:5f:71:c3:ad:
d5:93:2b:fc:c9:ae:73:63:cc:74:97:79:a3:8c:cf:2d:04:ac:
8b:dc:61:a4:7e:34:48:dd:55:04:79:d8:f9:e6:0b:53:b4:34:
e7:a7:7c:b2:f7:13:6b:56:b3:dd:f1:20:e5:c2:30:94:12:0d:
0a:fe:3d:c4:d0:2f:1c:7c:4a:0f:6d:f8:54:81:09:5f:36:f6:
f5:4f:e1:7b:1e:b7:37:50:90:fb:a5:06:e6:5a:2f:62:6c:40:
dd:dc:8d:cc:52:59:4b:a9:54:73:27:76:b9:1e:0b:d4:40:df:
fc:ee:3e:27:e8:77:b4:65:3d:08:3d:87:e9:c5:73:26:96:6d:
57:99:44:34:10:07:8a:ad:2a:b3:8c:00:ba:7d:47:54:12:99:
7e:28:0a:4a:3e:90:b2:a1:06:dc:5b:b8:c5:5b:11:8a:a5:71:
da:2f:75:0d:e5:68:4d:1e:50:01:5e:08:34:db:c2:92:d4:37:
c9:b6:c7:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 11:39:11 2025 by rpki-client