Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/454412-c062-4b45-a644-a038ef1eff39/1/Re0RFjDgUpd5Xd3SmOofsp5pXFM.mft
File: Re0RFjDgUpd5Xd3SmOofsp5pXFM.mft (raw, json)
Hash identifier: EsidNwB4ojiRSBtr4mQJkhqSgRmONPNW0BM8CG7QL8o=
Subject key identifier: 39:A5:55:57:22:F3:7F:A9:4D:E6:18:51:32:DF:84:65:2F:F5:55:EE
Authority key identifier: 45:ED:11:16:30:E0:52:97:79:5D:DD:D2:98:EA:1F:B2:9E:69:5C:53
Certificate issuer: /CN=45ed111630e05297795dddd298ea1fb29e695c53
Certificate serial: 01964D7E2BD4385669FDEEFF6C9435CC7A5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Re0RFjDgUpd5Xd3SmOofsp5pXFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/454412-c062-4b45-a644-a038ef1eff39/1/Re0RFjDgUpd5Xd3SmOofsp5pXFM.mft
Manifest number: 0BDD
Signing time: Sat 19 Apr 2025 10:00:36 +0000
Manifest this update: Sat 19 Apr 2025 10:00:36 +0000
Manifest next update: Sun 20 Apr 2025 10:00:36 +0000
Files and hashes: 1: FdZc5w6NQTxVaX5pVim2SXSRdFw.roa (hash: 3yS2WlAT7COs2QdB7b8/iS1aVVb5UF5pqjux+yVKvWo=)
2: Re0RFjDgUpd5Xd3SmOofsp5pXFM.crl (hash: kbpQk/woNZqWvvaz1kvvPWArYpoiY7fqoHVqdJPoles=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/454412-c062-4b45-a644-a038ef1eff39/1/Re0RFjDgUpd5Xd3SmOofsp5pXFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/454412-c062-4b45-a644-a038ef1eff39/1/Re0RFjDgUpd5Xd3SmOofsp5pXFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Re0RFjDgUpd5Xd3SmOofsp5pXFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7e:2b:d4:38:56:69:fd:ee:ff:6c:94:35:cc:7a:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45ed111630e05297795dddd298ea1fb29e695c53
Validity
Not Before: Apr 19 10:00:36 2025 GMT
Not After : Apr 20 10:00:36 2025 GMT
Subject: CN=39a5555722f37fa94de6185132df84652ff555ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:47:d3:2e:b4:67:98:66:2b:c7:44:ab:32:b4:
07:00:b1:53:3b:fb:ba:04:c4:5e:88:13:89:fb:72:
f2:0a:3b:d1:4a:7b:19:2b:62:02:70:d6:d7:f4:76:
8e:b5:6e:16:6a:96:06:2c:b4:5c:d8:d2:e8:2f:f3:
43:d8:26:dd:5d:66:3c:f4:27:5a:1c:97:02:a5:54:
a5:04:5e:1d:e9:c7:6a:0b:1e:d1:81:72:b5:ea:02:
4d:0d:5c:3e:cb:74:3e:77:08:da:c7:9b:a6:f8:15:
97:5d:6e:13:e2:64:8e:59:cf:b3:f2:7f:9a:05:57:
bc:23:53:e4:1b:26:67:f5:5f:df:4d:8e:91:b1:8d:
fd:60:c0:fd:b1:38:ed:ab:76:f6:84:2c:61:00:b4:
0c:af:0f:fa:eb:f8:13:ec:fb:64:2b:5d:a5:c1:f3:
a7:c9:4e:61:18:07:19:8b:2b:60:19:e5:3e:72:85:
e4:0d:18:2e:41:f9:d6:b2:72:19:6f:3d:f6:a2:34:
c2:14:be:08:fe:da:34:da:98:ae:03:99:88:89:bb:
38:c4:80:27:60:67:0c:b9:db:e2:82:a9:23:7b:fb:
38:28:7f:e7:1c:dc:a9:81:f5:dc:64:43:19:2b:0f:
02:52:0b:2c:f4:df:1e:2d:8c:fd:68:8c:1e:a6:7a:
cb:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:A5:55:57:22:F3:7F:A9:4D:E6:18:51:32:DF:84:65:2F:F5:55:EE
X509v3 Authority Key Identifier:
keyid:45:ED:11:16:30:E0:52:97:79:5D:DD:D2:98:EA:1F:B2:9E:69:5C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Re0RFjDgUpd5Xd3SmOofsp5pXFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/454412-c062-4b45-a644-a038ef1eff39/1/Re0RFjDgUpd5Xd3SmOofsp5pXFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/454412-c062-4b45-a644-a038ef1eff39/1/Re0RFjDgUpd5Xd3SmOofsp5pXFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:41:1a:57:aa:e4:e1:48:9c:fc:db:38:05:cb:dc:d3:80:20:
52:b8:16:de:7a:b1:a2:2f:52:1e:0b:ca:d5:7f:9c:05:39:52:
d8:4b:53:f4:2e:00:23:b6:1d:f1:3e:5a:26:b4:9f:ce:cb:4e:
4b:3c:14:13:37:dd:fd:b2:b3:d4:51:7f:90:40:ce:2f:50:c7:
9c:b7:8e:d2:9b:15:f1:3e:f8:f9:ff:4e:7d:1b:f7:9b:28:6f:
ef:7c:e9:01:fa:0c:fd:98:55:d8:c9:aa:e8:1d:70:74:1e:38:
8b:28:3c:f4:1b:bd:df:88:35:55:1f:c6:2e:7d:58:23:cc:f6:
3e:e9:81:ed:20:4a:f0:6e:5f:74:c2:5c:70:c5:28:93:6f:80:
5f:c4:8e:0b:d4:56:14:f3:4b:72:de:47:95:52:a4:b7:e8:8d:
ff:56:aa:62:ca:fa:7c:59:82:aa:e8:f8:0e:91:f6:13:1d:55:
82:3a:88:e4:ff:8f:87:fc:64:b8:2f:d6:41:93:90:6c:43:b2:
a4:8a:c2:94:38:1f:c0:f7:37:63:4f:f0:71:8f:a5:0f:bd:7b:
ee:59:9c:67:82:c9:58:95:0d:5f:45:19:2f:0f:3a:dd:8b:e3:
e0:1a:04:7d:81:9b:d5:17:64:15:60:86:fd:4b:2d:67:c1:02:
68:5c:e4:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:07:30 2025 by rpki-client