Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.mft
File: RMRFXrsJGC1PvrO0Vg4giYbhriE.mft (raw, json)
Hash identifier: X98mNx72NTo61hnjHNjTpPX2/WPVrFpAc19cVSBfNqw=
Subject key identifier: CD:3F:45:D2:B6:F1:A2:1B:DE:BE:00:E6:F1:82:F7:4B:7C:17:B0:C8
Authority key identifier: 44:C4:45:5E:BB:09:18:2D:4F:BE:B3:B4:56:0E:20:89:86:E1:AE:21
Certificate issuer: /CN=44c4455ebb09182d4fbeb3b4560e208986e1ae21
Certificate serial: 019656136992ED99DE3362CB95116014F331
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RMRFXrsJGC1PvrO0Vg4giYbhriE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.mft
Manifest number: 14FF
Signing time: Mon 21 Apr 2025 02:00:34 +0000
Manifest this update: Mon 21 Apr 2025 02:00:34 +0000
Manifest next update: Tue 22 Apr 2025 02:00:34 +0000
Files and hashes: 1: RMRFXrsJGC1PvrO0Vg4giYbhriE.crl (hash: ASDhvzvkFsg0Z9Jo/8umlkmDiWtz5DUiQpBrUCrwKDI=)
2: W1HT74Ti-eehsN9aFk8FhX6Amk0.roa (hash: 3zzhU0Zo0DbhPnuXcPDdzKBUW4Glv+sVBLV3Zhd2+lU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RMRFXrsJGC1PvrO0Vg4giYbhriE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:69:92:ed:99:de:33:62:cb:95:11:60:14:f3:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44c4455ebb09182d4fbeb3b4560e208986e1ae21
Validity
Not Before: Apr 21 02:00:34 2025 GMT
Not After : Apr 22 02:00:34 2025 GMT
Subject: CN=cd3f45d2b6f1a21bdebe00e6f182f74b7c17b0c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e7:6c:a2:5e:1d:b0:61:4d:2c:d4:77:65:42:
44:18:49:65:c5:0b:12:b5:f7:50:af:1d:9f:4e:ea:
d4:7e:2f:53:15:f3:fd:49:d3:08:cf:50:f2:84:43:
f4:15:d4:11:bc:5e:df:62:47:12:1c:a5:e6:bd:db:
8a:29:16:49:83:42:19:07:af:ea:65:da:97:13:95:
9e:30:8d:3a:e5:06:26:fa:bd:ee:b7:f2:8d:51:8e:
f7:d9:9b:f9:5b:63:b1:95:09:9f:a9:a0:d0:ba:ef:
7a:74:e5:f0:98:49:4b:21:16:ec:1f:eb:f7:d4:4a:
1a:ad:e3:8c:81:9b:29:9d:0a:f7:0b:24:59:a4:ef:
3d:e0:8d:0d:cd:ba:ae:93:fb:11:e2:da:ab:18:a5:
8a:7f:59:8d:21:c7:5a:d3:bd:74:a0:15:e8:93:99:
8e:ef:85:7d:27:f5:a3:b7:a5:56:1a:59:a8:9b:7c:
03:29:c0:f5:0a:8c:8d:53:f3:51:e5:d1:61:23:0c:
b2:d3:a0:d0:aa:02:35:3c:f8:01:cd:7e:f1:dc:b5:
fa:04:82:69:3a:92:fb:1e:72:f6:ce:0b:99:8a:4b:
d4:e8:fa:9e:4e:ea:79:76:a8:44:ef:98:59:d9:3f:
7c:06:68:55:6e:ad:28:55:4e:41:d6:ff:e5:a1:0c:
1d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:3F:45:D2:B6:F1:A2:1B:DE:BE:00:E6:F1:82:F7:4B:7C:17:B0:C8
X509v3 Authority Key Identifier:
keyid:44:C4:45:5E:BB:09:18:2D:4F:BE:B3:B4:56:0E:20:89:86:E1:AE:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMRFXrsJGC1PvrO0Vg4giYbhriE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:50:b1:b8:2f:28:20:73:8c:44:50:5a:4f:e0:3f:fa:ff:8b:
ea:60:31:ac:54:59:ca:07:59:b9:73:51:87:5d:6c:59:bb:ad:
c5:57:10:dc:79:2e:14:39:36:fe:30:94:2d:ba:20:cb:13:b2:
58:b6:0a:ac:a4:f5:60:cc:67:88:28:ba:32:1d:4a:7b:5c:59:
4d:99:64:9b:b8:f9:33:a9:a1:a3:c7:bd:3d:0d:a2:3a:0b:13:
a8:5b:46:06:ec:a5:47:cd:a7:4c:82:90:7a:3b:0c:60:31:ea:
fe:85:c6:f1:8b:8f:f5:f5:2f:11:08:4a:03:7c:cb:9d:0d:e7:
bf:31:de:61:31:57:7c:60:4d:5c:02:41:e2:80:99:3a:56:14:
81:97:96:fe:26:de:7d:17:1e:43:07:c2:e1:79:20:3b:68:91:
21:cf:ee:d0:66:7e:d6:d5:6d:43:9e:a5:13:81:1c:88:dd:6d:
d6:24:bf:39:79:55:17:b7:f4:49:9e:fa:a5:d2:89:18:7c:2b:
14:9a:fc:41:d2:8b:ee:fb:ac:c9:de:c8:e5:6d:a2:48:4a:bb:
9e:37:40:ea:9f:1e:91:49:df:42:80:a0:ac:f6:12:96:a8:de:
35:df:bc:d9:c0:31:1d:9d:da:e9:a1:a7:40:9b:33:8b:81:2e:
b5:ba:02:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:36:42 2025 by rpki-client