Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/b5f177-bbdd-40cf-87e5-b0b4c4f2fd90/1/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.mft
File: R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.mft (raw, json)
Hash identifier: kVsjAmj3E01GgHHOkoVq4r5WgBb24Qx1AJ804/rlBL8=
Subject key identifier: 2E:90:3D:FF:53:2F:52:C5:BD:26:2D:E0:3A:49:85:A5:96:D3:52:0D
Authority key identifier: 47:66:2F:9F:F6:B6:43:C4:67:A2:B4:34:B7:6F:82:5E:BB:66:FE:D4
Certificate issuer: /CN=47662f9ff6b643c467a2b434b76f825ebb66fed4
Certificate serial: 0196515B016C5D8D811177AB33B01D874C42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/b5f177-bbdd-40cf-87e5-b0b4c4f2fd90/1/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.mft
Manifest number: 04BB
Signing time: Sun 20 Apr 2025 04:00:40 +0000
Manifest this update: Sun 20 Apr 2025 04:00:40 +0000
Manifest next update: Mon 21 Apr 2025 04:00:40 +0000
Files and hashes: 1: KwW0a13v-16rO2m-BTqCxx8rpAo.roa (hash: krFsjsEBadu6bDJqG1OXIARdZJq+ewHj8q4uQfOufeM=)
2: R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.crl (hash: +tHQVzEV6eDhkU8CqZkwIADGo0qSfCC4fauvkU6S7Ic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/b5f177-bbdd-40cf-87e5-b0b4c4f2fd90/1/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/b5f177-bbdd-40cf-87e5-b0b4c4f2fd90/1/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 04:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:5b:01:6c:5d:8d:81:11:77:ab:33:b0:1d:87:4c:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47662f9ff6b643c467a2b434b76f825ebb66fed4
Validity
Not Before: Apr 20 04:00:40 2025 GMT
Not After : Apr 21 04:00:40 2025 GMT
Subject: CN=2e903dff532f52c5bd262de03a4985a596d3520d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:49:c1:21:b0:66:cb:78:5d:c0:ba:52:94:76:
4d:56:31:11:84:39:20:5f:ab:a2:4c:a8:26:1e:1b:
10:64:cd:95:40:5b:26:4c:da:30:2b:c0:e4:72:b9:
70:c1:15:9b:ca:5f:2a:51:e1:d3:d4:58:b1:90:b5:
bd:fe:63:7e:88:3a:5f:39:84:20:fd:3b:23:3e:5c:
ec:9a:a6:7e:00:10:a9:ae:50:e1:76:2e:e7:c6:83:
cf:28:aa:97:f9:de:e0:e4:8a:52:7c:a1:8f:e5:1c:
ce:98:6f:c1:de:2c:09:7b:6a:77:b2:f5:6b:ab:7d:
2c:22:bd:c8:d4:5f:f6:60:47:64:95:8b:73:4f:0e:
24:cd:ce:71:38:8d:96:c1:bf:6d:fc:a2:e6:b1:37:
29:87:7a:3c:d7:f4:34:a5:40:dc:c7:c9:fc:fe:6c:
e1:d6:46:82:bd:50:29:01:b1:18:6e:dc:fd:1b:f5:
40:1a:4c:65:5a:f0:3f:b2:c7:a0:1c:0b:69:47:1e:
fd:a9:3b:11:39:0c:b0:64:8e:bb:b3:ef:db:a0:51:
ff:c0:ea:1c:e3:2e:a1:ae:cf:08:8b:87:4a:e3:a5:
9d:42:f9:ab:c6:e9:d1:d4:3c:c4:00:cc:c0:29:8d:
c0:3a:08:90:b3:6a:0e:1f:6f:c4:9a:72:c7:a2:db:
d8:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:90:3D:FF:53:2F:52:C5:BD:26:2D:E0:3A:49:85:A5:96:D3:52:0D
X509v3 Authority Key Identifier:
keyid:47:66:2F:9F:F6:B6:43:C4:67:A2:B4:34:B7:6F:82:5E:BB:66:FE:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/b5f177-bbdd-40cf-87e5-b0b4c4f2fd90/1/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/b5f177-bbdd-40cf-87e5-b0b4c4f2fd90/1/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:86:8d:06:d3:f9:f5:26:9a:e0:9d:db:18:6e:78:62:71:e5:
ab:46:03:00:b6:f7:65:2f:d6:0a:09:28:64:9f:01:6c:61:09:
ab:09:81:59:19:9a:ad:38:fc:5e:88:66:8d:34:9c:4c:37:e1:
02:e5:00:d6:7f:08:50:1e:f4:47:2f:38:be:eb:6c:7f:88:1b:
8d:93:68:84:60:31:87:a4:73:45:61:9f:1a:ca:b1:66:12:f8:
2b:cd:1c:02:c1:54:39:0c:d1:5d:4c:91:f4:f4:ed:e2:e9:00:
4b:30:e1:94:48:9b:df:a2:ca:fc:1d:a0:55:69:70:65:b4:42:
fc:0a:50:4f:df:e3:b9:27:9c:17:46:0e:ea:81:9b:e4:fc:5b:
0e:fc:fe:9f:0e:3a:35:d6:b3:3b:ae:d4:6a:60:9c:08:1b:b2:
d5:e7:ca:12:87:1b:a3:b0:ff:d7:eb:80:62:d2:07:2a:4c:91:
55:93:b4:a2:4b:a0:3b:0c:e4:5a:8c:84:b6:4a:21:75:0d:31:
a6:ec:4e:b7:f6:78:a9:2a:ee:30:23:60:40:dc:63:f4:65:16:
1a:cb:98:1d:d7:1b:c0:7d:07:3c:72:20:f0:0f:48:10:f7:60:
43:7d:a5:e2:6d:ec:3d:ee:3e:73:d4:ef:f7:60:81:68:08:c2:
cf:e0:9e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:17:23 2025 by rpki-client