Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft
File: RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft (raw, json)
Hash identifier: tnNXkBAWRGTcseIr5J2HgCr9MJnaJ/a+3iqfUPv2YX4=
Subject key identifier: F8:85:12:82:AC:92:4A:F7:29:B8:C0:DF:F3:67:E7:EC:45:76:0A:03
Authority key identifier: 44:1D:4B:92:DD:15:03:64:C6:5B:7D:21:29:90:28:67:8B:0A:52:96
Certificate issuer: /CN=441d4b92dd150364c65b7d21299028678b0a5296
Certificate serial: 01960FB35703F135469FDBBD5D54A4EAE947
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft
Manifest number: 14E2
Signing time: Mon 07 Apr 2025 10:02:13 +0000
Manifest this update: Mon 07 Apr 2025 10:02:13 +0000
Manifest next update: Tue 08 Apr 2025 10:02:13 +0000
Files and hashes: 1: 3JkSKP7jBeNBJpMBSaOABWLwqrY.roa (hash: qvkM6RHQW3kH5F1/K52m/X+zUOs3qQZCWijPjerK2kc=)
2: I1VO7zMbx-vbjpttTgauG2K9yC0.roa (hash: +jpo7oyuZbYyl/PyBGr6vKJVEKniF9XZYZ9HT6VtMFY=)
3: RB1Lkt0VA2TGW30hKZAoZ4sKUpY.crl (hash: tYFWsbZ8qsgbfDfvWErTPbXPEpiKD6ErFAkuthYnP1Q=)
4: rtM3C_Rb7MChD47Ga1U2cViLrVM.roa (hash: Bbt4WsyZlaNBYxegxcNZsDU9+mHNhqHf+fOapqUBZAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 10:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0f:b3:57:03:f1:35:46:9f:db:bd:5d:54:a4:ea:e9:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=441d4b92dd150364c65b7d21299028678b0a5296
Validity
Not Before: Apr 7 10:02:13 2025 GMT
Not After : Apr 8 10:02:13 2025 GMT
Subject: CN=f8851282ac924af729b8c0dff367e7ec45760a03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b9:e5:b4:d3:91:21:b1:12:3c:20:d9:7e:de:
e8:7e:48:d3:02:17:0f:a9:8e:d4:d5:30:58:d8:b1:
ca:0e:b5:f4:64:9b:be:ea:ad:e5:b9:6f:b1:1e:85:
3d:55:01:b6:d2:73:15:aa:d3:4f:e6:ae:be:4e:9d:
49:47:80:52:21:63:6c:cd:31:5d:9a:b0:7d:21:4e:
89:db:a0:86:d0:b5:24:23:87:07:cd:7b:96:d2:e9:
9e:53:93:71:4a:ce:df:a0:89:2c:bd:c3:4c:f2:fc:
a0:a2:8e:cc:5c:85:3f:4e:b9:b0:40:f4:51:d2:46:
2b:f7:15:12:22:aa:49:11:c4:e9:58:bc:37:9b:e9:
ea:e5:05:0d:a9:2e:3c:d7:fa:ad:30:d1:48:c1:94:
b0:c0:b7:6e:80:b2:ee:cd:9f:fb:80:64:5c:6e:7a:
98:ad:54:3a:a1:94:54:ab:ef:cf:97:0e:02:2a:56:
64:a7:ad:a6:79:76:bd:c5:22:aa:bf:e8:39:18:44:
c3:b6:35:85:6b:f2:4e:1e:4a:81:b2:c6:a1:19:4b:
2a:56:1e:cc:30:51:7d:5b:ee:5c:3f:fc:e8:f1:29:
f0:80:69:5b:21:e4:df:1a:11:ee:68:64:15:84:3a:
d0:ac:04:76:44:de:f6:c7:de:8a:39:0f:6e:40:bb:
46:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:85:12:82:AC:92:4A:F7:29:B8:C0:DF:F3:67:E7:EC:45:76:0A:03
X509v3 Authority Key Identifier:
keyid:44:1D:4B:92:DD:15:03:64:C6:5B:7D:21:29:90:28:67:8B:0A:52:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:aa:56:60:89:76:71:73:73:4c:3f:89:99:86:bd:b7:17:eb:
8d:14:5e:b9:cc:2e:d1:10:7a:f7:3b:48:bc:45:6a:63:0d:4a:
18:2e:cf:02:dc:11:da:15:d1:81:1b:04:b7:7e:17:2e:fb:f7:
b1:1a:0a:79:fd:70:48:27:be:05:16:fa:28:e0:2a:55:9f:d4:
10:dc:6d:c3:22:c5:7e:4b:8f:18:c9:5f:e1:67:df:60:1c:c7:
a7:7e:44:ec:14:fc:52:92:e6:c1:cd:9f:60:08:93:d3:2b:50:
c3:11:5e:13:a3:33:87:d9:81:61:f4:08:99:16:14:3b:f0:87:
72:6b:9b:cd:63:9b:cd:8a:14:8a:11:0a:5a:88:a0:0e:6c:b3:
93:00:52:b5:fe:27:bd:5b:90:bb:14:d3:31:13:40:04:1f:51:
91:ab:1e:42:a3:52:1b:bd:1f:49:38:55:09:1a:b4:02:b2:26:
f2:b7:a5:87:41:16:59:05:f0:26:dd:9f:0d:13:bc:04:a0:c3:
b4:9b:c7:a4:87:ec:06:62:9e:b1:3c:40:43:4d:70:89:52:aa:
6b:fa:0d:b9:c2:00:98:c2:8e:92:da:07:19:d6:fb:d8:55:d0:
27:90:63:e1:3c:bc:46:99:a3:41:27:7b:1c:79:42:f4:01:c3:
7f:0a:fd:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:04:19 2025 by rpki-client