Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.mft
File: ruL45TYnrcJ2eAY7k9PZ_W7OkAI.mft (raw, json)
Hash identifier: f+hZMYpbavuH6q6q6m3KGg1fY/y7zMz+pyeiU30we84=
Subject key identifier: DF:21:AC:41:BC:56:CB:9B:71:C0:9A:87:21:06:DC:2E:A1:03:1D:F0
Authority key identifier: AE:E2:F8:E5:36:27:AD:C2:76:78:06:3B:93:D3:D9:FD:6E:CE:90:02
Certificate issuer: /CN=aee2f8e53627adc27678063b93d3d9fd6ece9002
Certificate serial: 01965801F11283855E4EEDDE954C3D9C1688
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.mft
Manifest number: 13F1
Signing time: Mon 21 Apr 2025 11:00:44 +0000
Manifest this update: Mon 21 Apr 2025 11:00:44 +0000
Manifest next update: Tue 22 Apr 2025 11:00:44 +0000
Files and hashes: 1: NasWHXHMUrneYOPi_YEJHup68SM.roa (hash: vL3Q2Q0+7pnxdL6gd2R9r+dXrTLQulaJB+4Rjiarvgs=)
2: mQMuKDoHnr1LeGkTlxHsfTZ3PWQ.roa (hash: zwJx6M98s8at6u4x9fLfaXSOW6xFzqNRxDzug5GEBAw=)
3: ruL45TYnrcJ2eAY7k9PZ_W7OkAI.crl (hash: Yika6gAv24nDYDjxsf5rU4ZmOuk341kyh3lLhZvMnQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:01:f1:12:83:85:5e:4e:ed:de:95:4c:3d:9c:16:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aee2f8e53627adc27678063b93d3d9fd6ece9002
Validity
Not Before: Apr 21 11:00:44 2025 GMT
Not After : Apr 22 11:00:44 2025 GMT
Subject: CN=df21ac41bc56cb9b71c09a872106dc2ea1031df0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a0:cb:28:e1:62:27:e1:6d:c6:d2:36:97:6f:
11:8b:9f:4a:17:3d:9c:da:2d:8c:6d:6f:eb:82:e0:
69:dc:ce:29:39:69:67:ec:40:8f:86:72:9d:89:83:
e8:62:5c:0a:04:5b:c1:65:66:a4:26:6e:2d:0a:7a:
16:29:73:c8:7f:c2:1a:dc:22:6b:fb:09:75:3e:37:
56:b3:10:df:7f:84:7a:c2:b1:f9:16:28:d3:bd:81:
34:f9:a3:33:64:9e:01:fa:7a:40:b8:e8:88:40:0b:
2d:89:ff:da:dd:85:e5:39:b0:60:9c:4f:b8:fb:b3:
9a:4e:72:3c:99:ab:2f:93:c0:37:29:3d:65:44:11:
f6:6c:c8:9a:6d:f3:16:42:27:39:cf:1f:ac:63:dc:
37:a1:17:8c:27:20:ef:60:bd:f2:50:74:5d:64:06:
1a:af:b9:38:15:95:f9:b4:54:43:cc:d2:c1:d5:2a:
6a:a5:44:e9:0f:65:b6:f7:15:a3:82:8d:70:86:4f:
e3:f0:00:46:33:4a:6f:0b:7d:23:7f:6b:0e:08:f8:
9b:b7:f6:43:6e:e4:73:df:35:3c:c0:c8:3d:84:f4:
58:b7:7f:19:b0:4f:54:ca:42:e0:2e:3a:f3:1c:8c:
aa:d1:4d:6a:35:74:ff:b8:31:06:98:4c:70:e8:0e:
cd:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:21:AC:41:BC:56:CB:9B:71:C0:9A:87:21:06:DC:2E:A1:03:1D:F0
X509v3 Authority Key Identifier:
keyid:AE:E2:F8:E5:36:27:AD:C2:76:78:06:3B:93:D3:D9:FD:6E:CE:90:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:42:5c:58:6a:25:f9:31:c5:72:3c:de:ba:65:2d:72:5b:77:
0c:7e:70:fc:65:43:ad:14:50:7b:78:74:0c:58:21:4d:84:00:
75:9f:24:02:22:79:10:44:d8:87:e4:a4:d0:03:7e:84:bf:73:
2e:2e:23:f6:fe:ff:40:58:2d:b5:40:e1:bf:00:f5:f3:c9:f4:
70:ea:b0:b0:81:6b:be:a8:20:ab:4d:06:5f:31:95:b9:40:cc:
2b:2e:b0:d0:ba:95:8b:5b:53:b3:e5:d1:9d:99:a8:d1:77:1b:
a2:1c:49:72:3e:16:b6:43:db:d7:da:32:ed:2a:44:9a:b2:db:
d6:69:6e:f5:18:94:0d:a8:00:9e:80:cb:36:17:aa:f0:b3:3d:
42:22:72:bb:2c:53:12:c7:04:d1:92:26:c1:f5:42:b1:ae:80:
d3:7f:10:74:96:88:5c:c6:17:c9:ba:44:e3:5d:4b:cb:90:9d:
5f:23:da:5e:07:2b:45:ca:6f:92:68:5d:96:1c:23:f0:20:cd:
81:21:96:93:ce:61:e8:9d:33:e7:05:8a:e1:ff:a1:dd:e2:76:
46:0e:9f:a3:2b:c9:73:a6:e8:c6:07:6b:83:74:3c:a1:e6:52:
a1:66:e6:de:d3:f2:09:82:d3:fd:e1:d9:bb:78:86:55:1e:54:
e7:69:bc:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:09:59 2025 by rpki-client