Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.mft
File: RQvGf1SesEkldyCgAOsFtU9dK8A.mft (raw, json)
Hash identifier: zPDjLDEMajuVysFrxN4VvagkvTuG0N2aRA9yzJA4Sns=
Subject key identifier: DF:B5:06:F2:4C:DD:62:2C:52:66:05:10:C6:62:62:9E:43:D0:A5:9D
Authority key identifier: 45:0B:C6:7F:54:9E:B0:49:25:77:20:A0:00:EB:05:B5:4F:5D:2B:C0
Certificate issuer: /CN=450bc67f549eb049257720a000eb05b54f5d2bc0
Certificate serial: 019655A5AF3B4BBCB294D38B61F6C28929FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQvGf1SesEkldyCgAOsFtU9dK8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.mft
Manifest number: 0D1D
Signing time: Mon 21 Apr 2025 00:00:43 +0000
Manifest this update: Mon 21 Apr 2025 00:00:43 +0000
Manifest next update: Tue 22 Apr 2025 00:00:43 +0000
Files and hashes: 1: RQvGf1SesEkldyCgAOsFtU9dK8A.crl (hash: WO8N4f9DsRg/fqbvK5J7xDecP8XN2F9B5YLlSx0TmuA=)
2: _YMez48AMFaUyWLbfvnH7KldVDE.roa (hash: 3sepWcNFx6BAgV0N0lNe1VjOZzQwmimdc5bBOyxmzz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/RQvGf1SesEkldyCgAOsFtU9dK8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a5:af:3b:4b:bc:b2:94:d3:8b:61:f6:c2:89:29:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=450bc67f549eb049257720a000eb05b54f5d2bc0
Validity
Not Before: Apr 21 00:00:43 2025 GMT
Not After : Apr 22 00:00:43 2025 GMT
Subject: CN=dfb506f24cdd622c52660510c662629e43d0a59d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:74:f0:38:9c:54:64:6f:2f:86:dd:ef:fa:fe:
33:8e:02:ff:87:e4:e6:19:6e:67:07:1e:66:09:6a:
66:22:53:30:8b:b9:9b:e7:f5:13:3b:61:14:ca:ef:
9d:4c:36:5b:39:81:17:b7:1e:0a:e9:03:35:68:6f:
2f:2b:94:bc:fc:4a:1a:04:63:5d:a8:71:3c:4e:68:
22:29:dc:5f:f8:94:d3:56:78:8a:c2:29:b7:ff:6a:
4d:52:94:76:b5:0d:bc:39:53:97:a0:bc:22:a1:b8:
8e:9d:8f:95:93:52:e4:bc:6c:6e:a4:2f:88:b3:89:
fa:96:d8:2a:34:46:f9:bc:39:52:37:ca:df:07:4e:
ff:be:eb:31:a9:8f:25:bc:92:15:24:46:ca:fa:87:
df:b1:39:9a:c4:a3:15:34:25:d0:b9:63:29:31:5b:
ac:45:d4:96:90:93:4d:45:55:0a:7d:66:62:39:15:
26:fa:48:38:21:c8:48:88:bb:77:59:05:bd:47:ad:
09:59:78:63:58:d8:d1:4f:5a:08:26:38:2c:1a:3a:
82:22:7a:b8:d4:8e:6e:41:44:a1:4b:fa:ab:03:99:
d4:f7:24:4e:5f:a1:19:16:e0:e6:ca:aa:34:e7:2d:
c4:41:28:75:52:9f:12:75:e0:1a:62:12:0a:a5:8b:
4e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:B5:06:F2:4C:DD:62:2C:52:66:05:10:C6:62:62:9E:43:D0:A5:9D
X509v3 Authority Key Identifier:
keyid:45:0B:C6:7F:54:9E:B0:49:25:77:20:A0:00:EB:05:B5:4F:5D:2B:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQvGf1SesEkldyCgAOsFtU9dK8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:96:c4:be:52:e4:3c:94:98:3a:69:9b:7b:c4:e8:a0:92:d9:
28:c8:af:3a:98:9c:bd:c8:68:1a:65:0e:89:b9:15:92:6a:13:
87:05:a8:8d:b7:3c:3d:18:d2:fc:e7:f5:39:1b:8b:7f:21:19:
e7:ef:f7:e3:db:4c:8c:e1:07:ec:f8:b9:6b:be:a5:05:4c:7b:
46:34:7a:23:47:b4:f2:c1:1a:23:c3:9e:b6:d3:bb:ec:07:34:
68:b9:fe:8c:d8:3f:eb:5c:7e:39:0a:c5:e1:f5:bc:3c:52:ea:
ec:f3:49:a6:62:cd:98:b2:6d:ce:39:a6:5b:c1:79:6c:6c:6e:
94:32:4b:49:16:91:14:cc:b1:ef:95:99:69:f7:ca:a4:e3:ca:
0a:5d:13:88:c9:75:e9:a9:83:d2:f5:51:3b:b5:d6:77:04:26:
be:74:c0:f8:f0:4f:ed:e5:fe:28:53:18:1f:98:6f:83:80:d8:
7b:de:95:6e:ad:40:b7:19:c8:90:a8:da:f5:de:d0:b4:f5:38:
91:a2:62:af:22:43:c6:80:dc:0f:d3:a3:e7:bf:8d:b3:d8:aa:
2c:ec:f3:82:81:b2:1a:e4:c2:08:63:11:e3:d2:ca:ce:ee:f5:
58:c8:c2:54:f1:0b:d8:e0:06:68:22:87:32:6a:6b:89:89:93:
94:9f:d9:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:48:38 2025 by rpki-client