Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
File: 493Ty2SL60JR1HzEtlvNZLCajUs.mft (raw, json)
Hash identifier: sXCBmBKNIF2HO383lFPtlXen2lL+OeNcunY7hdo2568=
Subject key identifier: 41:E6:40:A5:DD:7A:A8:90:E5:36:C9:DD:F7:F7:AF:E7:85:55:E6:D1
Authority key identifier: E3:DD:D3:CB:64:8B:EB:42:51:D4:7C:C4:B6:5B:CD:64:B0:9A:8D:4B
Certificate issuer: /CN=e3ddd3cb648beb4251d47cc4b65bcd64b09a8d4b
Certificate serial: 019653B767EAAD6D9B388D452962524C7D97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
Manifest number: 0D65
Signing time: Sun 20 Apr 2025 15:00:50 +0000
Manifest this update: Sun 20 Apr 2025 15:00:50 +0000
Manifest next update: Mon 21 Apr 2025 15:00:50 +0000
Files and hashes: 1: 493Ty2SL60JR1HzEtlvNZLCajUs.crl (hash: rGiy8fyCinlClC0rsrzCFoSTOO0lUoD819dUPt371FE=)
2: VaNHYKd7fkf8MUmIAFzRDiRSuAg.roa (hash: kArqpkPgXwbWfVfsCGeziL2LJL/J3oK8UFUA3DsKS6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 15:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:b7:67:ea:ad:6d:9b:38:8d:45:29:62:52:4c:7d:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3ddd3cb648beb4251d47cc4b65bcd64b09a8d4b
Validity
Not Before: Apr 20 15:00:50 2025 GMT
Not After : Apr 21 15:00:50 2025 GMT
Subject: CN=41e640a5dd7aa890e536c9ddf7f7afe78555e6d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:10:16:0a:29:0e:48:94:b9:12:c3:2c:1d:38:
7f:3a:44:01:94:8b:1a:91:b6:33:18:23:ca:63:c5:
99:22:bc:cf:e0:1c:3a:7e:bc:2b:11:42:5f:89:db:
be:ac:08:dd:b2:95:5d:f5:14:e6:78:d8:5d:6c:50:
68:81:03:da:9e:2b:4b:86:bf:4e:eb:1e:c4:2e:b6:
24:9f:1e:0f:61:8d:58:a3:0a:d8:c8:3d:14:9a:2e:
94:43:25:5a:91:6f:61:8c:09:2d:37:84:b0:95:8c:
f8:12:d6:13:56:99:a1:67:ae:fc:bc:a9:1f:03:73:
5a:10:5d:05:9b:3d:53:90:58:d5:ca:65:11:0c:3b:
93:0d:7e:9c:f6:e0:9c:24:ed:0a:9c:25:ca:b1:81:
8a:a4:79:67:21:f0:7e:5e:49:86:a5:e2:51:5b:28:
8e:9c:7b:a5:ab:22:a3:68:9c:4e:cc:44:13:42:ed:
19:73:02:bb:ae:71:88:2b:7e:67:93:33:d9:65:2e:
dc:a2:c1:3d:57:21:b9:18:56:14:aa:14:77:f1:f2:
d8:39:72:42:bb:bf:cf:d2:61:b0:1a:00:11:fd:f7:
b9:54:fd:91:03:b4:77:18:ad:78:41:73:1a:f6:d5:
21:39:fa:91:95:c3:36:9b:fc:95:0d:0a:be:62:b7:
a9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E6:40:A5:DD:7A:A8:90:E5:36:C9:DD:F7:F7:AF:E7:85:55:E6:D1
X509v3 Authority Key Identifier:
keyid:E3:DD:D3:CB:64:8B:EB:42:51:D4:7C:C4:B6:5B:CD:64:B0:9A:8D:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:c1:d7:1d:6b:9a:08:17:db:5d:0c:fb:e2:6d:18:21:64:1a:
06:8a:7b:6b:f0:2f:11:a1:79:21:89:9d:df:96:b9:3b:3b:a4:
f7:58:8f:84:87:41:ac:4c:ff:be:92:23:35:c0:30:01:62:77:
0e:9a:4e:af:ae:19:d9:4a:6c:b9:8f:39:c3:72:c1:31:82:85:
3a:53:51:22:94:0b:1e:39:4d:2e:65:7c:8f:ac:fb:f9:03:ad:
42:23:55:f5:15:a0:0e:86:c1:b3:56:f7:cf:15:17:2b:15:4a:
c4:99:6a:d5:0a:e2:2f:24:7c:9a:78:03:a9:d6:f8:7b:de:d9:
f5:55:b3:4f:6a:93:4a:f2:75:8e:23:05:f3:3f:64:43:23:c7:
cb:e9:4c:44:fc:bd:7b:bb:65:72:fb:3f:7a:f7:ab:fa:3d:ab:
c7:69:5c:46:82:89:5d:55:2f:9a:12:00:ba:2c:2c:cd:41:ed:
3b:b8:c4:f4:88:ce:63:43:13:67:b8:a4:7a:a9:8f:ec:af:e4:
76:cb:ed:8f:0b:82:ab:df:2b:da:7e:cb:d8:79:c7:91:51:df:
9f:15:5e:52:5e:c3:c0:cd:fc:b2:62:53:46:02:8e:43:9e:ac:
dd:ab:e7:8c:50:0a:60:ff:ea:cd:d8:2e:78:5d:b6:a7:3d:0f:
71:79:e6:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:27:55 2025 by rpki-client