Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft
File: RxGaIFaDFnklufBBdDEmN7FgDAc.mft (raw, json)
Hash identifier: gHkeR8nwdDO/X4SVgc4PQPZoPGykEapTMMvInUMj7Uc=
Subject key identifier: 4B:56:99:5C:1C:AE:3A:A4:21:49:63:B0:24:FB:A7:00:47:08:D8:E5
Authority key identifier: 47:11:9A:20:56:83:16:79:25:B9:F0:41:74:31:26:37:B1:60:0C:07
Certificate issuer: /CN=47119a205683167925b9f04174312637b1600c07
Certificate serial: 019653491EB137FFE218E6AAF1C58EC6ABF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RxGaIFaDFnklufBBdDEmN7FgDAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft
Manifest number: 14FD
Signing time: Sun 20 Apr 2025 13:00:22 +0000
Manifest this update: Sun 20 Apr 2025 13:00:22 +0000
Manifest next update: Mon 21 Apr 2025 13:00:22 +0000
Files and hashes: 1: RxGaIFaDFnklufBBdDEmN7FgDAc.crl (hash: 23c9EXaLEM6O5VSZU3WppcdmrGVM6v+0IE6i424zVt8=)
2: YlLGMMGfzp4BFnoZ0HiHBmcAlqs.roa (hash: imBK0lUnHzFl1op2tHfNsjuMR3mqpTEborDSGd19hUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/RxGaIFaDFnklufBBdDEmN7FgDAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:49:1e:b1:37:ff:e2:18:e6:aa:f1:c5:8e:c6:ab:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47119a205683167925b9f04174312637b1600c07
Validity
Not Before: Apr 20 13:00:22 2025 GMT
Not After : Apr 21 13:00:22 2025 GMT
Subject: CN=4b56995c1cae3aa4214963b024fba7004708d8e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:50:77:55:b3:33:6f:60:ba:09:71:35:a0:eb:
d7:7c:a7:36:24:65:18:07:e9:32:e9:f4:f3:28:64:
60:43:50:0c:52:57:3a:ad:51:55:c5:c9:3b:d2:9b:
68:dd:7f:6e:df:c4:dd:de:04:a8:e0:18:6f:aa:9b:
19:b3:08:20:7c:be:0b:e8:a1:ee:b5:c7:60:c0:be:
88:bf:de:b4:eb:96:50:e6:90:97:fb:37:c7:58:ec:
03:a3:e7:14:f0:8c:9e:23:64:6b:40:18:ba:fd:cc:
9f:49:2d:2e:05:04:51:8f:19:07:1e:fe:d0:b2:d4:
38:8c:0a:c6:70:70:e6:51:dc:3e:33:0a:eb:6d:a6:
b0:4e:22:f7:18:4f:4c:3f:cf:b5:51:33:e2:73:93:
19:a4:26:31:c6:ea:71:51:9e:00:65:17:d1:65:e9:
a9:01:e8:94:bd:9d:8d:32:d9:d7:f6:aa:e9:79:31:
38:46:92:b4:2a:65:8d:4c:bc:df:6a:bb:75:44:02:
fc:5d:fb:a1:c5:23:b2:2d:55:ea:7e:5c:ab:1c:c3:
10:81:e7:54:55:73:b9:d2:86:d9:ae:dc:6d:80:11:
10:43:c4:1a:4e:1b:6f:09:3d:07:9d:1a:76:72:99:
af:95:04:b6:82:50:0b:ad:ed:0a:c0:bb:6b:71:27:
d9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:56:99:5C:1C:AE:3A:A4:21:49:63:B0:24:FB:A7:00:47:08:D8:E5
X509v3 Authority Key Identifier:
keyid:47:11:9A:20:56:83:16:79:25:B9:F0:41:74:31:26:37:B1:60:0C:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RxGaIFaDFnklufBBdDEmN7FgDAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:95:45:72:78:63:a6:0b:f1:4f:26:ae:88:c8:02:c4:26:00:
2e:94:9b:0d:48:96:69:56:e9:9f:60:65:46:52:0a:c0:d8:19:
8c:f8:d3:48:0c:9f:63:bd:f6:02:77:9e:e8:b9:1f:37:f6:c6:
dd:23:73:9f:96:7f:61:3c:7d:33:47:b8:84:4a:35:ba:fb:d8:
cd:f0:82:87:15:96:33:b4:0c:5d:70:f8:78:14:fd:b2:c2:c9:
47:19:0f:79:b8:96:22:48:67:fd:63:ff:ba:32:ae:d3:c1:83:
2f:68:38:0e:28:74:c9:42:8c:12:82:96:c2:e9:a2:54:9e:2e:
b1:9c:ea:04:a1:63:dc:34:12:6b:ad:1d:8c:bc:04:52:27:d6:
7b:c3:cd:ba:91:dc:65:f3:f9:41:3d:b7:f3:c6:9b:8c:92:43:
95:45:e6:5b:44:5f:e4:99:9a:b7:02:cf:ad:ed:9d:fc:fd:3b:
c2:92:ff:62:08:47:79:40:de:a3:0c:ef:f9:3e:3a:1a:ad:76:
73:42:fb:e3:0e:4e:23:50:bd:7f:48:4d:64:e4:ec:5b:02:4d:
d3:c4:cf:07:2b:11:e0:3a:b1:c8:a8:d8:fc:27:e7:26:f8:cf:
d0:ec:74:46:74:22:3d:90:b7:58:7d:58:bf:95:47:62:27:4e:
63:69:21:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 17:32:19 2025 by rpki-client