Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.mft
File: cd9sdT6ghb7zcrOSYw90uldpbuU.mft (raw, json)
Hash identifier: Il7BS9tRoy3YEmSUx9qzW5Pc/yKzYlK6ZYgxDVs71Mk=
Subject key identifier: F1:37:4C:DA:12:0B:3B:E7:E0:6D:07:97:13:72:18:55:F3:C6:F7:11
Authority key identifier: 71:DF:6C:75:3E:A0:85:BE:F3:72:B3:92:63:0F:74:BA:57:69:6E:E5
Certificate issuer: /CN=71df6c753ea085bef372b392630f74ba57696ee5
Certificate serial: 01965537E4F45717C00CD78F9330BBBF62F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cd9sdT6ghb7zcrOSYw90uldpbuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.mft
Manifest number: 120E
Signing time: Sun 20 Apr 2025 22:00:48 +0000
Manifest this update: Sun 20 Apr 2025 22:00:48 +0000
Manifest next update: Mon 21 Apr 2025 22:00:48 +0000
Files and hashes: 1: 26OroNSilLDsLnRmS90OawnRg8M.roa (hash: 2vZiL1ss373Q0TX+B8Q8SMDZKCr1m9fpyjjeqgVg0rI=)
2: cd9sdT6ghb7zcrOSYw90uldpbuU.crl (hash: 6LZa8YDjnMW5mFlSnJU8KvcliXAGIxWRN8GCpzZ3uMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cd9sdT6ghb7zcrOSYw90uldpbuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:37:e4:f4:57:17:c0:0c:d7:8f:93:30:bb:bf:62:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71df6c753ea085bef372b392630f74ba57696ee5
Validity
Not Before: Apr 20 22:00:48 2025 GMT
Not After : Apr 21 22:00:48 2025 GMT
Subject: CN=f1374cda120b3be7e06d079713721855f3c6f711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f0:c3:06:3e:46:9e:a5:58:dc:44:62:94:19:
ae:ca:40:d0:04:c4:1d:c4:30:9b:de:6c:05:79:59:
bf:45:05:67:b6:ae:60:f9:1c:58:6e:14:3b:1b:4d:
5a:09:a3:67:f6:87:72:5a:6b:73:17:db:24:51:89:
d3:f0:d4:10:d3:53:38:eb:62:3e:47:88:2e:0a:ab:
28:fa:13:e5:d1:e0:a9:11:9a:09:65:e8:fa:a8:70:
84:6b:91:37:f8:15:db:a3:ed:ea:56:15:4b:51:7e:
a1:ea:78:62:12:78:7b:d3:5e:1e:22:07:9c:bc:f2:
6c:51:7c:d2:31:2d:99:2f:3b:8d:0a:35:8d:99:61:
4e:73:76:b1:fc:45:20:45:de:4c:b8:9e:59:2b:c8:
2d:39:d8:49:4c:45:1f:51:a7:78:14:de:63:5b:a9:
8e:2d:49:b7:03:be:a6:67:85:e8:1a:e5:21:ac:2c:
d2:52:df:88:5f:58:11:b0:16:bf:ab:71:13:21:79:
ee:62:7a:d4:41:55:db:ef:56:b7:a8:8c:43:7e:53:
1b:2c:c4:88:a6:e1:51:67:d4:da:41:3c:dc:7d:21:
07:19:ab:d4:b2:a3:1c:1b:01:bb:cf:ef:a8:56:b4:
1c:1c:45:3f:27:ee:f3:f4:34:be:3d:7d:8b:b9:0a:
ac:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:37:4C:DA:12:0B:3B:E7:E0:6D:07:97:13:72:18:55:F3:C6:F7:11
X509v3 Authority Key Identifier:
keyid:71:DF:6C:75:3E:A0:85:BE:F3:72:B3:92:63:0F:74:BA:57:69:6E:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd9sdT6ghb7zcrOSYw90uldpbuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:58:ee:81:ec:f0:cf:6a:3f:4f:23:e0:10:65:5f:2c:68:f6:
d5:fd:8d:9f:47:75:3a:09:0c:a4:6f:62:e1:b4:93:37:75:4a:
eb:61:b8:de:5d:db:90:0e:82:89:5a:5f:eb:bc:6c:7c:ad:bd:
a1:2f:e5:72:8b:bb:c2:e6:39:a6:4e:3f:ba:77:2b:b9:2a:eb:
e9:ad:bb:e4:2f:44:96:87:9e:8b:a5:89:56:26:f6:8d:70:7a:
22:b0:da:89:29:3b:5f:23:aa:49:58:95:49:09:c6:45:19:ee:
0f:ab:0a:d2:25:da:f5:9a:09:35:ca:bf:50:8a:91:33:cb:bd:
34:a1:bb:4f:08:4e:db:54:da:ab:4a:6e:ca:dd:ed:e1:01:8a:
31:f7:86:69:2d:bf:6a:26:ca:b4:12:12:3f:b6:ac:50:95:4f:
4e:7c:0f:4e:41:ee:99:5c:14:61:f0:8f:7c:15:6f:85:37:f5:
f5:35:3d:0a:c9:6b:90:6f:be:76:61:0f:b5:a0:04:2c:bf:28:
e6:e4:b4:65:10:b2:9f:33:4d:6f:3b:8b:df:9f:d8:af:b7:c6:
d6:1d:dd:08:6e:cf:c4:b2:5b:f3:c1:9a:d9:1b:6b:5c:ac:ca:
5b:ef:a5:45:c2:a6:3f:82:eb:40:b6:5b:b5:46:53:5a:16:55:
63:62:4d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:31:08 2025 by rpki-client