Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft
File: _RVIKmVgCaobyAUUg2jR69-PYsg.mft (raw, json)
Hash identifier: Go45RlsiC8wynemVW45W8SIxI9hRtYrcBMqtUgaKBFo=
Subject key identifier: 93:B1:46:B2:6B:8A:A1:1C:0A:B2:0A:3D:25:EF:61:CD:DA:49:21:15
Authority key identifier: FD:15:48:2A:65:60:09:AA:1B:C8:05:14:83:68:D1:EB:DF:8F:62:C8
Certificate issuer: /CN=fd15482a656009aa1bc805148368d1ebdf8f62c8
Certificate serial: 01964F6CF60759D763482B4DADFD61A0823B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_RVIKmVgCaobyAUUg2jR69-PYsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft
Manifest number: 0F1C
Signing time: Sat 19 Apr 2025 19:01:02 +0000
Manifest this update: Sat 19 Apr 2025 19:01:02 +0000
Manifest next update: Sun 20 Apr 2025 19:01:02 +0000
Files and hashes: 1: JlnlHDByaNUy0-f6Bk6pC1lv0dA.roa (hash: 3ZWBVVVlMIE03x5aR9QcVmTZqjLrQw0dyYbjGkJTjWk=)
2: _RVIKmVgCaobyAUUg2jR69-PYsg.crl (hash: baVEKJEahRHoezPt79YwMw3A/76svkCDrrtQVS+S0aE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_RVIKmVgCaobyAUUg2jR69-PYsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6c:f6:07:59:d7:63:48:2b:4d:ad:fd:61:a0:82:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd15482a656009aa1bc805148368d1ebdf8f62c8
Validity
Not Before: Apr 19 19:01:02 2025 GMT
Not After : Apr 20 19:01:02 2025 GMT
Subject: CN=93b146b26b8aa11c0ab20a3d25ef61cdda492115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5e:60:42:9f:ab:d5:17:b0:35:e7:32:f6:c1:
f6:71:2c:a0:30:13:bc:3f:40:25:dc:aa:7c:36:59:
d7:2c:90:10:b4:1e:49:9d:d7:ed:68:4a:7b:65:40:
03:97:1f:3d:c1:6e:95:dd:26:17:3d:8f:ae:e5:96:
b5:ad:ff:61:82:e7:1a:43:48:88:58:4c:fe:ae:1f:
a5:da:0a:96:c6:46:9e:be:71:03:20:c7:46:d1:47:
11:ca:93:77:2a:db:f7:02:ee:5d:82:f0:db:8a:cb:
26:cc:8c:15:86:10:f9:a3:96:fd:f7:ad:5d:3c:93:
68:87:37:f5:b5:33:33:f2:85:29:e7:b2:6f:dc:d5:
7a:37:b8:28:12:12:36:0f:f1:7f:73:05:5f:0a:74:
19:b7:d3:5b:ab:2e:3c:f5:d8:a2:5c:91:18:2d:43:
af:0f:ff:2a:c4:6e:d5:7e:26:85:57:f8:da:cc:82:
a0:6c:c8:83:0d:8c:8e:5e:b8:b3:8a:be:c3:8b:ba:
fe:f0:ba:d7:6f:e1:bc:b1:c1:4c:b8:86:14:df:04:
18:6d:18:94:0e:f2:ed:0c:80:09:ec:1d:5c:57:12:
29:c7:41:2b:69:8a:30:75:d3:aa:43:f4:37:89:d8:
f9:24:42:43:1d:2f:a4:cf:d0:90:86:56:7a:3d:4e:
00:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:B1:46:B2:6B:8A:A1:1C:0A:B2:0A:3D:25:EF:61:CD:DA:49:21:15
X509v3 Authority Key Identifier:
keyid:FD:15:48:2A:65:60:09:AA:1B:C8:05:14:83:68:D1:EB:DF:8F:62:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_RVIKmVgCaobyAUUg2jR69-PYsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:95:aa:41:44:57:35:30:ff:b0:f0:70:d9:2f:64:d0:e9:1d:
92:63:d7:38:06:ad:cd:b3:d8:c6:df:9a:cc:f7:92:49:2f:8b:
89:f4:30:05:e8:08:22:89:61:a9:10:52:33:11:b2:79:1d:01:
25:f3:7d:4f:85:21:03:e0:04:45:25:a1:f0:d6:a8:80:85:ae:
04:7e:74:ac:f4:3b:cb:24:7c:8e:5b:85:8a:5d:de:b2:9f:86:
ff:61:8b:db:0c:42:3d:4f:e2:bb:02:c9:64:15:a5:d8:62:b5:
fa:ba:48:82:40:9d:67:c1:3d:82:d9:1f:5d:bd:58:8f:1d:4a:
62:33:0c:a0:59:cf:ca:3a:8c:81:15:fb:0c:73:c6:40:8a:bd:
32:f4:0d:cd:d3:9b:78:f9:07:77:08:78:35:7a:30:6e:9c:3f:
ee:4d:ea:b8:7f:37:4a:bf:df:0a:25:30:fb:1b:7b:16:2e:51:
ae:c0:f7:41:07:65:a8:01:05:e6:13:78:47:98:3f:bd:0f:68:
38:37:c1:79:1e:11:7b:1c:62:27:bb:22:c8:48:ff:b8:42:a9:
f2:b6:b7:9b:dc:60:2d:7d:5b:df:f4:81:de:0e:32:b7:37:c3:
88:95:8d:76:74:5e:cc:94:fa:93:66:c1:74:20:c4:60:3c:bd:
10:dd:1a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:01:19 2025 by rpki-client