Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/a621a8-e079-4a14-98ba-e36a9793ea6d/1/unnFAIApfLnMDMk07jifUMPnPUo.mft
File: unnFAIApfLnMDMk07jifUMPnPUo.mft (raw, json)
Hash identifier: vd6hlEBVvLGHcmnz/iJHf1KKHEr5F2F/bB9xBoxQjyk=
Subject key identifier: EC:65:91:E7:AD:52:96:38:3A:AF:AE:15:BD:12:CE:51:B6:C2:EC:35
Authority key identifier: BA:79:C5:00:80:29:7C:B9:CC:0C:C9:34:EE:38:9F:50:C3:E7:3D:4A
Certificate issuer: /CN=ba79c50080297cb9cc0cc934ee389f50c3e73d4a
Certificate serial: 01965ACBB6DDA7948665E138455CA6A5429B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/unnFAIApfLnMDMk07jifUMPnPUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/a621a8-e079-4a14-98ba-e36a9793ea6d/1/unnFAIApfLnMDMk07jifUMPnPUo.mft
Manifest number: 03CF
Signing time: Tue 22 Apr 2025 00:00:21 +0000
Manifest this update: Tue 22 Apr 2025 00:00:21 +0000
Manifest next update: Wed 23 Apr 2025 00:00:21 +0000
Files and hashes: 1: CpPRk_TNW4CH4jbImpFoaI2OcL4.roa (hash: eYYsy6V5aRdmdwv40uWtw/bgoED55t23eDlp8kMf818=)
2: unnFAIApfLnMDMk07jifUMPnPUo.crl (hash: KHJHZIvkVSjJI3xc60XorMa0RyU2PnAol5jwmFDIKjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/a621a8-e079-4a14-98ba-e36a9793ea6d/1/unnFAIApfLnMDMk07jifUMPnPUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/a621a8-e079-4a14-98ba-e36a9793ea6d/1/unnFAIApfLnMDMk07jifUMPnPUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/unnFAIApfLnMDMk07jifUMPnPUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:cb:b6:dd:a7:94:86:65:e1:38:45:5c:a6:a5:42:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba79c50080297cb9cc0cc934ee389f50c3e73d4a
Validity
Not Before: Apr 22 00:00:21 2025 GMT
Not After : Apr 23 00:00:21 2025 GMT
Subject: CN=ec6591e7ad5296383aafae15bd12ce51b6c2ec35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:06:5c:d0:59:59:8c:82:9d:56:36:a2:9b:54:
5c:aa:fa:9c:72:cd:a0:70:74:74:23:d7:aa:80:54:
e4:e0:cc:91:a6:3f:a9:10:ec:d7:fd:a1:61:73:51:
e5:9c:ce:98:ab:8f:a2:8f:81:94:c4:ab:8b:54:73:
5b:e4:13:54:75:9e:92:62:3c:f4:dd:ff:6a:c6:83:
c2:ef:dc:f8:46:12:09:ce:9e:7a:13:2b:ce:84:63:
91:25:8e:85:ea:d5:29:7f:fb:e6:ef:78:5b:30:26:
6f:1f:0d:51:be:32:fa:1d:94:f3:b3:8b:6a:c6:74:
0f:fb:1e:84:33:8f:2a:fa:db:d0:25:23:58:b9:4f:
75:bb:a5:49:99:6e:f1:bf:66:63:8e:25:f0:1b:3c:
4d:9d:43:e2:be:6d:bf:eb:3f:ab:e4:38:80:13:8c:
86:11:7e:56:a9:b5:e4:1f:38:3e:11:bc:dd:65:b0:
e0:fd:57:d3:87:d9:aa:32:64:fa:32:fa:0d:cc:09:
21:8e:93:51:5c:23:88:96:89:63:db:98:19:f8:9f:
45:79:46:01:0e:69:b4:a6:62:f3:f3:79:e2:29:88:
ef:b6:ce:b0:96:63:62:23:e8:be:69:cc:2f:04:70:
de:c1:a1:8e:29:6e:20:a0:b7:cc:73:21:f5:fd:02:
2b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:65:91:E7:AD:52:96:38:3A:AF:AE:15:BD:12:CE:51:B6:C2:EC:35
X509v3 Authority Key Identifier:
keyid:BA:79:C5:00:80:29:7C:B9:CC:0C:C9:34:EE:38:9F:50:C3:E7:3D:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/unnFAIApfLnMDMk07jifUMPnPUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a621a8-e079-4a14-98ba-e36a9793ea6d/1/unnFAIApfLnMDMk07jifUMPnPUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a621a8-e079-4a14-98ba-e36a9793ea6d/1/unnFAIApfLnMDMk07jifUMPnPUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:52:cc:7b:ad:fc:80:ab:95:fc:5d:de:66:39:98:17:88:c7:
94:d1:c9:f1:43:3d:08:19:a2:88:c3:75:51:37:55:59:f7:1c:
86:c3:ef:8f:18:44:f3:70:da:10:1c:d4:1f:e6:7f:ba:90:97:
c8:c7:38:76:70:28:af:d3:6c:f9:c6:8c:34:5d:1b:cc:81:63:
2e:76:b2:82:f4:60:00:23:c8:0d:33:76:27:85:2a:bd:ab:e9:
bd:8d:02:67:fe:78:f8:d5:05:23:ec:22:5d:d4:a6:cd:36:2b:
99:17:98:d6:64:36:05:1d:30:77:16:7b:70:2a:a1:f0:5f:f9:
d9:dd:8f:df:9b:a6:45:77:f6:92:e0:e2:12:24:92:f2:aa:38:
ae:58:87:33:81:9c:56:49:14:dc:94:d5:7c:d5:21:c8:b5:33:
be:87:d7:cb:93:e2:b0:39:57:ee:4a:82:9b:fc:4a:ae:38:07:
7c:8c:e8:fa:7d:20:55:7d:3f:b8:8f:52:40:72:68:91:fb:84:
a9:53:ac:66:27:aa:ee:75:98:20:6e:83:b2:da:5b:ed:fd:ee:
d8:74:8a:59:2c:11:64:eb:3e:d1:a5:1f:6a:96:f7:8d:fd:07:
06:ad:f1:50:c7:fa:48:de:1f:36:8b:ee:fc:53:3a:4e:27:2b:
5d:83:80:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:31:52 2025 by rpki-client