Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.mft
File: RjXaOiCHnlX-loU-DXru_1M4bos.mft (raw, json)
Hash identifier: cgeN4GPkejaYpPKDJ4O5DOZ54l9OcLTxvctVE1OU2Dw=
Subject key identifier: 42:42:58:84:A9:75:1D:73:FC:F0:93:1C:18:6C:21:D7:68:BF:65:C9
Authority key identifier: 46:35:DA:3A:20:87:9E:55:FE:96:85:3E:0D:7A:EE:FF:53:38:6E:8B
Certificate issuer: /CN=4635da3a20879e55fe96853e0d7aeeff53386e8b
Certificate serial: 019651C97D11B1A23D407BA3D58338F1F1BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RjXaOiCHnlX-loU-DXru_1M4bos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.mft
Manifest number: 0901
Signing time: Sun 20 Apr 2025 06:01:21 +0000
Manifest this update: Sun 20 Apr 2025 06:01:21 +0000
Manifest next update: Mon 21 Apr 2025 06:01:21 +0000
Files and hashes: 1: RjXaOiCHnlX-loU-DXru_1M4bos.crl (hash: RyIYubKqFbroGnyYhAo7AEUOEbn8GK/evkTT5FF5NLE=)
2: Z2Ec6FKFCMROAvsvU_-EjGHw4ww.roa (hash: 422PPfALRjVpASZNjTqWvSXQqN/bAdN9tO/keC7QHEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.mft
rsync://rpki.ripe.net/repository/DEFAULT/RjXaOiCHnlX-loU-DXru_1M4bos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 06:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:c9:7d:11:b1:a2:3d:40:7b:a3:d5:83:38:f1:f1:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4635da3a20879e55fe96853e0d7aeeff53386e8b
Validity
Not Before: Apr 20 06:01:21 2025 GMT
Not After : Apr 21 06:01:21 2025 GMT
Subject: CN=42425884a9751d73fcf0931c186c21d768bf65c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:38:04:36:75:af:b7:f8:1d:e0:20:a4:93:1c:
3c:78:15:10:af:ce:1a:cc:56:4c:da:eb:42:94:d1:
8b:44:bf:92:f1:ba:35:19:ea:24:70:e0:13:3a:f9:
5c:98:c3:18:78:29:29:fd:46:7c:d2:f6:8a:8d:e6:
fb:0d:d8:24:ed:99:ac:c7:72:39:c4:f1:f3:16:37:
af:ee:a0:01:4a:35:c1:b0:92:d0:d7:40:53:41:93:
2c:09:57:d1:70:1c:f9:ce:6a:85:57:4b:b8:0f:0d:
94:6e:da:34:11:93:4d:47:d0:6c:4e:71:43:0c:0a:
05:7e:b9:25:f5:c4:d5:a7:17:eb:75:46:f1:55:c3:
5c:0b:3d:a1:ea:8a:a2:00:70:66:51:5e:99:84:1b:
bb:63:0e:f2:bf:e8:0b:10:f8:23:9a:45:fa:5b:17:
48:d7:8c:5e:e1:d1:31:69:08:c3:82:4a:7e:f5:30:
4f:2f:bf:d9:67:94:c5:96:7b:98:f7:e8:af:51:cc:
27:00:a7:23:c9:c6:63:f1:f2:09:33:51:1e:d9:34:
99:e4:51:60:cd:22:ec:45:64:a6:48:62:3c:cf:61:
c4:6f:5c:77:b1:ae:c5:ef:33:a1:7a:af:50:56:1a:
db:39:80:f7:8b:af:c2:cb:61:d3:39:40:54:ba:06:
a5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:42:58:84:A9:75:1D:73:FC:F0:93:1C:18:6C:21:D7:68:BF:65:C9
X509v3 Authority Key Identifier:
keyid:46:35:DA:3A:20:87:9E:55:FE:96:85:3E:0D:7A:EE:FF:53:38:6E:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RjXaOiCHnlX-loU-DXru_1M4bos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:bd:bb:84:80:76:e8:8b:75:4b:4e:13:45:bb:98:ce:17:b4:
8c:99:ea:49:23:07:b8:a6:b6:0a:87:e4:e6:eb:5e:ff:ed:8d:
c7:2f:ec:28:80:c7:49:0c:12:ba:01:c4:19:24:5d:ee:3f:3b:
4a:71:59:91:dc:ea:f0:e9:44:df:86:31:cd:87:4c:22:16:da:
29:ac:11:66:d0:d4:d1:7d:c6:50:4c:95:d7:f3:73:23:83:af:
ec:44:f9:a9:60:ef:73:d1:0a:7e:30:61:ed:7c:66:1e:65:f9:
a6:0d:92:39:60:4e:4d:00:69:28:52:46:a7:92:3c:f1:03:d5:
f2:14:7c:23:1c:71:4c:9a:bc:83:b2:30:23:59:7c:28:b6:0c:
da:e9:43:5f:7e:b4:a0:83:06:a9:fd:30:30:50:76:20:58:df:
ce:0a:1b:5d:a8:53:a2:f1:8e:c2:72:57:a2:5c:51:d6:5a:f8:
32:ca:64:3c:8e:d4:aa:92:f0:bf:cd:5c:f4:ac:6d:f8:4b:5a:
94:79:c1:f8:ce:37:75:12:16:fc:b1:96:eb:f6:29:30:51:29:
27:ac:6c:71:87:5d:7b:18:1a:e0:7c:7f:8e:4c:13:74:50:9a:
9c:50:33:c4:f2:ef:28:c8:7b:3b:56:0d:9f:f5:d2:a4:72:d6:
c0:de:4d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:12:14 2025 by rpki-client