Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/cd33d5-7bba-49e4-9ab0-78f6c804773d/1/r633xfgtvAsdujKChi1T7Ih9XGY.mft
File: r633xfgtvAsdujKChi1T7Ih9XGY.mft (raw, json)
Hash identifier: Dg35+3+z5L9nPhTQTm8OoLcXPvFtYeK8vTtINl37biI=
Subject key identifier: 78:31:C6:9A:A3:9B:97:73:5B:3C:03:18:8D:3F:D7:5D:EF:F0:A6:37
Authority key identifier: AF:AD:F7:C5:F8:2D:BC:0B:1D:BA:32:82:86:2D:53:EC:88:7D:5C:66
Certificate issuer: /CN=afadf7c5f82dbc0b1dba3282862d53ec887d5c66
Certificate serial: 01964D7E98B8E2E894DBCD175A49E57BEAD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r633xfgtvAsdujKChi1T7Ih9XGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/cd33d5-7bba-49e4-9ab0-78f6c804773d/1/r633xfgtvAsdujKChi1T7Ih9XGY.mft
Manifest number: 14F7
Signing time: Sat 19 Apr 2025 10:01:04 +0000
Manifest this update: Sat 19 Apr 2025 10:01:04 +0000
Manifest next update: Sun 20 Apr 2025 10:01:04 +0000
Files and hashes: 1: G_uyP800qF9xq38CufvzcASfUJk.roa (hash: wXXcLrJ9H/mm6fOwDIgDVncWMj2oRMLhDL41bJPAtPA=)
2: r633xfgtvAsdujKChi1T7Ih9XGY.crl (hash: S7a0qY/1ZJq991vrgwwauTRs9oIIc/9M7evW/4l/p+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/cd33d5-7bba-49e4-9ab0-78f6c804773d/1/r633xfgtvAsdujKChi1T7Ih9XGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/cd33d5-7bba-49e4-9ab0-78f6c804773d/1/r633xfgtvAsdujKChi1T7Ih9XGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/r633xfgtvAsdujKChi1T7Ih9XGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7e:98:b8:e2:e8:94:db:cd:17:5a:49:e5:7b:ea:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afadf7c5f82dbc0b1dba3282862d53ec887d5c66
Validity
Not Before: Apr 19 10:01:04 2025 GMT
Not After : Apr 20 10:01:04 2025 GMT
Subject: CN=7831c69aa39b97735b3c03188d3fd75deff0a637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:10:f5:de:cd:5b:f6:bc:1b:cd:7e:12:33:41:
3f:71:80:25:46:f8:7a:af:ed:d6:6b:a8:84:98:0d:
3b:84:e2:fe:ac:a8:57:d3:dc:42:77:a3:09:53:99:
40:00:18:93:23:9f:a2:53:e4:d4:d7:a1:00:16:83:
c2:b9:b9:c7:90:16:c4:05:d0:dc:1e:19:7c:24:d0:
b1:53:9a:bd:55:b0:20:62:f7:16:86:cd:ce:da:9d:
e6:cb:e1:90:61:63:51:bd:5e:9a:b0:d1:77:fc:b9:
d6:92:24:da:86:1b:1d:64:4a:54:88:11:58:df:c3:
1a:3a:3b:9a:0b:2e:98:84:fd:2e:e1:9e:92:2e:ae:
53:5b:02:94:0f:6d:1f:42:c2:f8:b7:e8:86:41:7a:
76:2b:5f:5b:c3:84:30:c4:4d:6e:52:bb:a1:51:28:
3d:85:a1:7d:9b:6f:9f:79:88:3f:c4:8e:65:8b:62:
c7:3f:1b:e9:9d:54:00:f3:d6:bf:ee:f7:e5:59:a5:
0f:4e:9d:3c:ea:59:2e:d4:68:a3:46:1a:e0:72:c9:
1e:f7:5d:b7:fb:ff:c1:45:0f:79:37:06:69:4a:a5:
c9:ca:4f:ed:e1:67:03:0f:6e:6a:a8:9d:96:f3:a6:
cd:fd:9d:01:de:bc:cc:e5:23:b2:ab:47:64:22:30:
31:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:31:C6:9A:A3:9B:97:73:5B:3C:03:18:8D:3F:D7:5D:EF:F0:A6:37
X509v3 Authority Key Identifier:
keyid:AF:AD:F7:C5:F8:2D:BC:0B:1D:BA:32:82:86:2D:53:EC:88:7D:5C:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r633xfgtvAsdujKChi1T7Ih9XGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/cd33d5-7bba-49e4-9ab0-78f6c804773d/1/r633xfgtvAsdujKChi1T7Ih9XGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/cd33d5-7bba-49e4-9ab0-78f6c804773d/1/r633xfgtvAsdujKChi1T7Ih9XGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:af:48:40:dd:53:b4:4b:f7:81:2e:4d:a2:84:ca:99:60:19:
6b:23:d7:65:aa:85:f7:50:e8:c5:9b:d2:65:9b:eb:62:ab:d0:
17:5c:d4:29:94:13:d5:54:e6:5a:4e:f8:75:b2:fb:ee:7b:c8:
f4:2e:18:bc:32:84:77:4c:c1:1a:6b:f7:34:e1:4f:c8:a8:81:
d1:d0:07:14:59:e6:8e:da:ec:fd:85:10:aa:74:5f:30:a6:97:
32:fd:ec:8d:2a:67:6e:50:f6:2d:0c:ca:26:ff:95:d6:d9:92:
55:09:ad:3c:70:9c:2e:68:e0:8c:ae:91:95:5a:72:f6:6b:22:
07:67:3d:46:a5:dc:99:a7:81:ea:7a:e9:43:21:6e:a4:c8:f9:
65:bf:49:17:26:ba:65:bb:35:6c:76:b3:e9:c0:6c:ac:93:f6:
98:63:93:87:49:2a:97:52:f6:ad:07:4f:4e:52:a7:92:02:8e:
2e:af:08:b7:74:bb:b4:b5:4c:83:6f:66:fa:92:df:c1:25:5c:
10:cd:f0:58:fe:c1:77:43:fa:ca:9c:9d:35:fa:6f:93:0a:d2:
f0:3e:bd:36:77:a8:cb:e8:42:1d:d3:9b:87:8a:fb:63:09:3f:
21:c2:e6:4b:d2:53:3c:8b:23:d8:80:cf:6f:7e:bb:e4:6d:dd:
13:88:e3:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 16:00:24 2025 by rpki-client