Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/e1d4b7-746c-426f-a6c5-dd5f55010a06/1/rcZHugF8ikWZwAm-BNgbJo7KYvQ.mft
File: rcZHugF8ikWZwAm-BNgbJo7KYvQ.mft (raw, json)
Hash identifier: N9Dexb6PYGrcYTSTlWeKPsAA8gAYgkOgI0uxhWNdzaE=
Subject key identifier: 47:8F:C8:5E:07:89:54:A6:D8:19:3A:4B:44:B2:C9:78:C1:CD:CD:3D
Authority key identifier: AD:C6:47:BA:01:7C:8A:45:99:C0:09:BE:04:D8:1B:26:8E:CA:62:F4
Certificate issuer: /CN=adc647ba017c8a4599c009be04d81b268eca62f4
Certificate serial: 019651C878638ADEFB4C10C017CBA11243AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rcZHugF8ikWZwAm-BNgbJo7KYvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/e1d4b7-746c-426f-a6c5-dd5f55010a06/1/rcZHugF8ikWZwAm-BNgbJo7KYvQ.mft
Manifest number: 041A
Signing time: Sun 20 Apr 2025 06:00:14 +0000
Manifest this update: Sun 20 Apr 2025 06:00:14 +0000
Manifest next update: Mon 21 Apr 2025 06:00:14 +0000
Files and hashes: 1: OV34MDvIRVxone0w5cHEhw4n-7g.roa (hash: iRvnIoP0GpD7jIp3Sl87VKOE59U8AR417l/5lvVpf0w=)
2: rcZHugF8ikWZwAm-BNgbJo7KYvQ.crl (hash: 7O81LKJE6UCE4NJ5TKXPBRUuNv8sIQSzXweYTX588/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/e1d4b7-746c-426f-a6c5-dd5f55010a06/1/rcZHugF8ikWZwAm-BNgbJo7KYvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/e1d4b7-746c-426f-a6c5-dd5f55010a06/1/rcZHugF8ikWZwAm-BNgbJo7KYvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rcZHugF8ikWZwAm-BNgbJo7KYvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 06:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:c8:78:63:8a:de:fb:4c:10:c0:17:cb:a1:12:43:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adc647ba017c8a4599c009be04d81b268eca62f4
Validity
Not Before: Apr 20 06:00:14 2025 GMT
Not After : Apr 21 06:00:14 2025 GMT
Subject: CN=478fc85e078954a6d8193a4b44b2c978c1cdcd3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:49:23:24:47:65:1a:25:12:3b:1d:39:a2:e3:
57:89:75:db:1e:0d:b8:dc:96:b5:92:33:51:41:e2:
37:43:27:6e:d4:a7:3d:9a:45:ee:b0:48:6b:38:f2:
f3:df:06:e7:a4:38:97:13:87:72:51:7f:e1:55:ec:
7f:99:9b:51:5b:94:d4:72:b6:fa:dd:bd:92:81:1d:
f8:0d:cd:e4:8c:95:df:06:03:0f:34:ee:cf:71:a7:
6d:57:e5:14:df:b7:22:fa:74:5a:98:5a:98:be:54:
19:37:6c:49:f4:d4:33:57:de:ce:95:0c:4b:92:de:
b1:88:4c:2b:0e:b0:eb:1b:40:d6:75:aa:67:da:7b:
77:8b:2d:6f:c8:28:c4:ab:7b:71:01:cf:35:b2:e0:
ca:8e:4e:99:de:21:20:2e:43:66:59:13:16:a2:d8:
1b:01:da:ac:b8:f5:ba:8a:c1:be:39:1f:1f:e5:57:
56:1d:fa:d6:a7:cd:7d:77:1d:8c:af:94:96:2f:7f:
f5:c2:65:ff:0f:80:0d:5d:81:e4:67:cc:ce:33:d0:
d6:15:fe:bf:0d:98:10:57:54:a8:d2:b9:c3:6e:85:
06:4e:a9:87:e5:7b:51:ee:47:41:06:7e:de:4b:8b:
5e:2f:29:c8:3a:70:6f:77:f6:c0:fd:bc:71:eb:b7:
6a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:8F:C8:5E:07:89:54:A6:D8:19:3A:4B:44:B2:C9:78:C1:CD:CD:3D
X509v3 Authority Key Identifier:
keyid:AD:C6:47:BA:01:7C:8A:45:99:C0:09:BE:04:D8:1B:26:8E:CA:62:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rcZHugF8ikWZwAm-BNgbJo7KYvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e1d4b7-746c-426f-a6c5-dd5f55010a06/1/rcZHugF8ikWZwAm-BNgbJo7KYvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e1d4b7-746c-426f-a6c5-dd5f55010a06/1/rcZHugF8ikWZwAm-BNgbJo7KYvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:10:31:1b:22:c0:05:05:f6:b5:4e:66:37:4d:e0:ac:da:6b:
aa:4d:4b:6b:ec:f1:3e:ba:14:88:e6:9c:3d:32:95:81:8a:97:
30:2b:f4:ac:75:e4:f3:7a:fe:fe:0e:24:52:95:ff:3b:92:32:
73:1f:9d:b1:54:75:09:36:db:6e:e8:48:21:70:ad:f1:36:46:
f5:d5:6a:55:e6:53:cf:07:a9:22:81:f6:98:26:c9:ed:31:8c:
20:b0:02:43:18:58:dd:02:5b:fd:ec:84:7f:30:dd:ba:77:65:
8a:f5:26:ad:9d:10:f2:f0:0b:27:d4:95:a2:40:d6:e9:b3:79:
2d:3c:44:ff:00:bd:c9:22:bd:c8:eb:2f:f2:30:c6:a4:f1:53:
bd:38:cf:bf:87:dd:c7:44:eb:e0:9b:b2:e9:c6:f7:24:67:23:
1f:36:dc:d8:30:21:66:18:3c:cc:5c:b9:85:f2:2d:eb:41:df:
65:a6:97:a8:78:63:49:0f:ad:cb:77:f5:4c:9b:cc:82:ca:3e:
18:c2:cb:e0:b1:bf:43:81:d4:92:6c:43:c9:92:fa:84:04:f0:
26:5b:ce:d2:6b:8a:92:83:6b:c6:53:e5:96:d1:c1:0f:96:bc:
8b:18:88:29:05:6a:23:56:45:9c:f8:6a:99:4a:61:e3:60:02:
77:84:4f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:17:30 2025 by rpki-client