Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/ec9e26-20f2-4e23-a08f-a34c855b5aab/1/RkVleaUXL8oI4EOwK7ly-3UDrq8.mft
File: RkVleaUXL8oI4EOwK7ly-3UDrq8.mft (raw, json)
Hash identifier: mHGHSUMvq6Z3yPLaCSnHci1GLNcGu9UbrTcEZtTy0+c=
Subject key identifier: 28:49:63:21:F3:F5:EE:CB:46:13:FF:3F:A2:C6:BE:B6:D2:3D:50:C6
Authority key identifier: 46:45:65:79:A5:17:2F:CA:08:E0:43:B0:2B:B9:72:FB:75:03:AE:AF
Certificate issuer: /CN=46456579a5172fca08e043b02bb972fb7503aeaf
Certificate serial: 0196561387A2EDCE4868A7F911AC49C4CBE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RkVleaUXL8oI4EOwK7ly-3UDrq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/ec9e26-20f2-4e23-a08f-a34c855b5aab/1/RkVleaUXL8oI4EOwK7ly-3UDrq8.mft
Manifest number: 1253
Signing time: Mon 21 Apr 2025 02:00:42 +0000
Manifest this update: Mon 21 Apr 2025 02:00:42 +0000
Manifest next update: Tue 22 Apr 2025 02:00:42 +0000
Files and hashes: 1: 6--mKTLhcJSvHElJeuoDt_lQE_Q.roa (hash: SXpjKVkVSr9zsLSxhubs4WsDg8DBpMmGqFFwLSfPmwo=)
2: RkVleaUXL8oI4EOwK7ly-3UDrq8.crl (hash: yHdy9S02e9l8QynyRW0fedsfP0pDTnjItN+jmyS9Jtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/ec9e26-20f2-4e23-a08f-a34c855b5aab/1/RkVleaUXL8oI4EOwK7ly-3UDrq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/ec9e26-20f2-4e23-a08f-a34c855b5aab/1/RkVleaUXL8oI4EOwK7ly-3UDrq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RkVleaUXL8oI4EOwK7ly-3UDrq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:87:a2:ed:ce:48:68:a7:f9:11:ac:49:c4:cb:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46456579a5172fca08e043b02bb972fb7503aeaf
Validity
Not Before: Apr 21 02:00:42 2025 GMT
Not After : Apr 22 02:00:42 2025 GMT
Subject: CN=28496321f3f5eecb4613ff3fa2c6beb6d23d50c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7b:37:2a:4a:f1:e6:60:41:76:20:96:9f:65:
74:2d:52:79:ce:79:ee:61:24:8a:fc:06:eb:1b:b7:
2a:45:43:12:4a:19:24:71:fb:00:78:d3:82:eb:c0:
70:d5:7a:5e:50:8e:ee:c8:0f:9a:5e:46:b2:ca:8d:
b8:ea:db:c2:68:31:dd:3a:2c:8d:a2:ee:ec:67:b5:
e1:12:34:f4:0a:e1:3d:dc:80:a7:4c:91:f4:9e:b6:
9d:41:8f:1b:21:39:fd:40:08:75:b5:8b:6d:b8:8b:
46:ed:9f:8d:f6:27:58:14:7d:90:96:41:7b:46:b9:
b0:06:7f:27:dd:b0:f6:66:84:7f:79:77:f4:f5:84:
c8:bc:1e:53:09:cc:74:d5:dd:06:0e:5c:70:9c:55:
8b:83:92:be:6b:16:ab:b2:05:ab:be:43:2d:15:21:
46:2e:52:8b:0d:89:f2:2b:1a:20:ac:ae:b3:d7:31:
0c:b9:9e:1f:48:0b:84:45:9f:aa:0b:7e:8f:79:97:
47:4a:32:e6:a8:ad:db:d4:af:26:71:54:9d:45:da:
cf:57:19:82:d3:43:7a:36:ae:65:76:18:bf:3a:4e:
4b:a0:f9:ab:97:d1:17:b2:1e:cb:b0:54:75:0a:55:
01:1d:bf:18:b1:83:46:ff:79:06:93:9c:9a:0f:12:
0d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:49:63:21:F3:F5:EE:CB:46:13:FF:3F:A2:C6:BE:B6:D2:3D:50:C6
X509v3 Authority Key Identifier:
keyid:46:45:65:79:A5:17:2F:CA:08:E0:43:B0:2B:B9:72:FB:75:03:AE:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RkVleaUXL8oI4EOwK7ly-3UDrq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ec9e26-20f2-4e23-a08f-a34c855b5aab/1/RkVleaUXL8oI4EOwK7ly-3UDrq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ec9e26-20f2-4e23-a08f-a34c855b5aab/1/RkVleaUXL8oI4EOwK7ly-3UDrq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:cd:f3:16:ab:9d:14:5f:bf:7b:4d:33:92:ea:03:b8:b4:59:
fa:fa:69:14:41:4a:79:d2:a7:2c:80:0c:6e:84:8b:ae:e5:a1:
84:94:d1:93:87:a8:90:61:89:66:56:e7:07:b8:d4:f2:80:74:
98:f9:df:fd:da:59:78:9c:76:fe:f3:7e:55:71:89:dd:15:1c:
ce:ca:27:52:e5:aa:4d:e4:2f:4a:87:a4:67:87:91:ab:b5:2b:
c3:a6:f7:ae:82:c2:21:55:8c:b9:d9:bb:cf:40:84:54:82:a9:
bf:10:4b:ac:79:97:92:e5:15:5c:dc:30:5d:5d:f3:eb:d9:eb:
5b:20:7c:52:ca:76:48:dc:c1:dd:18:18:01:8d:55:24:91:8f:
85:69:f6:53:4b:e7:4e:b1:ea:99:7d:19:8d:ca:70:67:fb:c3:
3b:9c:0a:da:90:d1:3c:43:a7:8e:3b:bc:e5:d3:e5:5b:c9:67:
99:19:ee:bd:2a:22:b5:84:e6:bf:1f:86:51:1d:c5:5b:4e:61:
9c:f7:30:3c:a6:79:06:94:a0:b2:72:45:1b:f6:13:55:82:09:
c0:4e:4a:4b:ec:02:83:13:60:ba:59:2a:8a:dc:6b:75:5c:28:
00:10:1a:79:d5:ec:08:c1:c8:09:cc:41:74:bc:39:4b:79:f6:
f4:fc:25:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:37:27 2025 by rpki-client