Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft
File: rrwz1bpYUjTMzvilethsoer8SqI.mft (raw, json)
Hash identifier: WY5NEzI6mCUDeSlmW8LOjEJRDdkYM7d+dPaHiRuzJbI=
Subject key identifier: 54:30:B8:3C:7E:11:2E:2F:0E:72:30:99:41:8C:E8:50:39:2F:BE:42
Authority key identifier: AE:BC:33:D5:BA:58:52:34:CC:CE:F8:A5:7A:D8:6C:A1:EA:FC:4A:A2
Certificate issuer: /CN=aebc33d5ba585234cccef8a57ad86ca1eafc4aa2
Certificate serial: 01965915669159711A7A037FD67B4724B70A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrwz1bpYUjTMzvilethsoer8SqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft
Manifest number: 04AB
Signing time: Mon 21 Apr 2025 16:01:36 +0000
Manifest this update: Mon 21 Apr 2025 16:01:36 +0000
Manifest next update: Tue 22 Apr 2025 16:01:36 +0000
Files and hashes: 1: rrwz1bpYUjTMzvilethsoer8SqI.crl (hash: /lsrrUYduy34Ag1iSXKN+07SqYeBfX/cSaxnodfNp7o=)
2: s8WA6XbVKkNfKDWyIPbKv2MkdEI.roa (hash: cSlX1MSZ3bjIwkd1nKlEU1sHjeRq7ybsweqaQYPJx58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rrwz1bpYUjTMzvilethsoer8SqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 16:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:15:66:91:59:71:1a:7a:03:7f:d6:7b:47:24:b7:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aebc33d5ba585234cccef8a57ad86ca1eafc4aa2
Validity
Not Before: Apr 21 16:01:36 2025 GMT
Not After : Apr 22 16:01:36 2025 GMT
Subject: CN=5430b83c7e112e2f0e723099418ce850392fbe42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:27:3c:f9:32:db:d0:35:ac:59:2f:79:a3:dd:
2f:14:4c:a6:64:a1:21:85:56:31:5a:ff:10:c2:41:
ca:d3:0a:ad:f3:cf:b7:72:33:40:34:eb:68:e9:a7:
ab:d2:1d:36:ef:30:48:87:1d:c5:f2:88:3c:13:50:
fb:82:be:80:d5:11:45:b2:be:b8:d3:e4:91:b1:d4:
6f:cb:09:10:77:8e:2d:41:f8:67:1d:c2:8b:3d:3c:
39:29:82:16:12:8b:52:c4:af:52:90:bc:f2:25:84:
a7:fd:18:a7:08:09:a3:d2:83:a4:0d:42:7b:67:d9:
7d:42:b3:75:8a:33:34:fa:f2:84:e5:c9:42:da:cd:
c1:6a:26:58:ec:b3:3a:56:07:3c:ed:bf:f8:49:be:
f7:69:c3:4a:a0:4b:11:0c:25:09:86:d5:19:ef:85:
d3:b9:ca:c4:f3:1e:36:dd:ac:6a:3d:9c:53:c4:ef:
0a:35:7d:ac:6b:1a:a4:16:f8:dc:7a:84:a1:d5:5d:
e2:d0:24:e6:4c:60:ca:98:ea:f6:6f:c0:07:53:e7:
2d:f2:b0:5b:5a:24:b6:c0:db:dc:53:7b:40:70:a3:
03:c6:ae:0a:e5:17:fe:eb:81:ea:b0:25:04:b6:56:
5d:92:17:a9:e6:25:49:31:f7:e5:1a:a4:15:8a:9d:
31:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:30:B8:3C:7E:11:2E:2F:0E:72:30:99:41:8C:E8:50:39:2F:BE:42
X509v3 Authority Key Identifier:
keyid:AE:BC:33:D5:BA:58:52:34:CC:CE:F8:A5:7A:D8:6C:A1:EA:FC:4A:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrwz1bpYUjTMzvilethsoer8SqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:c9:e3:ab:3c:7b:d3:27:16:b3:8a:e1:fb:0c:5d:e7:31:11:
44:ea:0e:04:46:8c:e5:da:66:29:f3:08:1b:1f:06:0a:78:24:
26:3c:d2:8f:be:43:d2:76:b0:8f:40:37:be:ba:49:58:21:7e:
93:27:1b:4c:3e:23:88:31:0e:bf:55:9a:3e:87:3b:93:61:35:
f4:ab:d8:e2:62:1c:f4:38:62:28:5b:c5:d8:f7:d8:71:de:d7:
24:a4:c9:2a:89:e3:58:a8:08:70:a1:bd:cb:bd:87:05:c5:3e:
f3:ab:cb:26:73:cf:17:cd:6c:d7:03:2e:9c:ae:00:af:ea:62:
ea:1f:45:aa:62:59:1d:a7:ef:50:8d:60:69:77:40:c0:a9:ca:
e7:9e:3e:7f:3f:82:09:d8:a5:b4:d5:a0:07:12:91:c2:e3:46:
f7:1d:bc:47:7f:b8:95:70:48:93:91:38:82:10:55:75:e7:a8:
66:9e:7b:9a:42:4f:ec:49:c9:1b:3a:75:b0:42:bc:a9:10:7c:
30:96:59:ab:da:f4:17:b0:2b:db:1f:4b:4e:86:5a:f9:e5:92:
24:f4:61:3c:06:5d:dd:7a:1b:ad:31:76:93:92:1e:66:bc:8b:
c3:08:90:8a:b6:97:09:74:e2:05:2c:cc:ec:a0:ec:b5:bf:04:
d7:e2:0a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:04:55 2025 by rpki-client