Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.mft
File: 7d1hus9lTmZdkSp23o9jtQBMfkg.mft (raw, json)
Hash identifier: YtZ070HDEs287mvUo+pLRE4PRKjzKAPxvH/QQBXGzV8=
Subject key identifier: 6B:75:63:D9:AF:13:5B:50:DF:4B:7D:D8:9C:50:D1:06:CC:EA:B5:BA
Authority key identifier: ED:DD:61:BA:CF:65:4E:66:5D:91:2A:76:DE:8F:63:B5:00:4C:7E:48
Certificate issuer: /CN=eddd61bacf654e665d912a76de8f63b5004c7e48
Certificate serial: 01965DCCEC0BA488663DCD10E580F02CEA20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7d1hus9lTmZdkSp23o9jtQBMfkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.mft
Manifest number: 1504
Signing time: Tue 22 Apr 2025 14:00:32 +0000
Manifest this update: Tue 22 Apr 2025 14:00:32 +0000
Manifest next update: Wed 23 Apr 2025 14:00:32 +0000
Files and hashes: 1: 36Bb65z44MAsVTDbQRVeDeDmufQ.roa (hash: uPSc0dWD/LjqPKmpNOCLQpNBH6/TFH+CbImLmGpMPVg=)
2: 7d1hus9lTmZdkSp23o9jtQBMfkg.crl (hash: 46N0KNPwQgQvpzyfxqREEFAl+U66df0lG7brD96mxTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7d1hus9lTmZdkSp23o9jtQBMfkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:cc:ec:0b:a4:88:66:3d:cd:10:e5:80:f0:2c:ea:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eddd61bacf654e665d912a76de8f63b5004c7e48
Validity
Not Before: Apr 22 14:00:32 2025 GMT
Not After : Apr 23 14:00:32 2025 GMT
Subject: CN=6b7563d9af135b50df4b7dd89c50d106cceab5ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:12:31:1c:1a:0e:0e:1b:f6:31:da:77:aa:60:
e9:77:d5:73:5d:49:8e:e8:67:93:9e:7c:b6:a6:a7:
55:18:16:5e:eb:90:50:e8:4f:da:e5:85:59:0c:fa:
25:7c:ce:33:0a:60:7e:39:a1:ae:ce:fb:97:67:de:
5b:d1:ee:28:36:38:91:38:21:56:2c:e5:ae:b7:46:
0d:20:c0:03:73:6c:78:e9:39:d9:dd:c3:f4:ee:d3:
67:35:b2:aa:97:ce:eb:52:e7:06:e4:5e:8a:30:30:
ed:81:e4:54:db:c7:cd:0d:96:20:5f:26:01:45:ff:
1d:6c:9b:eb:7c:96:e1:4e:50:d9:a7:78:10:21:06:
93:91:5d:55:1b:b0:56:95:97:19:3b:eb:0a:e2:e6:
a2:4b:13:fe:79:d5:02:90:ad:34:7c:aa:24:8b:26:
44:02:e1:f3:84:42:4e:0d:6c:9d:ac:3e:6b:6f:9d:
02:a7:49:d6:82:64:15:1c:68:c5:b1:a9:c2:e8:a3:
0b:cf:b7:b5:84:a8:52:25:cd:1a:24:0d:e1:f5:d2:
86:1e:50:42:a1:0b:13:03:d9:3d:a7:62:72:f0:3b:
17:17:96:18:78:f8:9c:67:6a:df:09:e2:11:1b:1c:
44:06:d0:de:4d:ce:43:06:30:92:ed:45:f5:ba:72:
bb:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:75:63:D9:AF:13:5B:50:DF:4B:7D:D8:9C:50:D1:06:CC:EA:B5:BA
X509v3 Authority Key Identifier:
keyid:ED:DD:61:BA:CF:65:4E:66:5D:91:2A:76:DE:8F:63:B5:00:4C:7E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d1hus9lTmZdkSp23o9jtQBMfkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:5b:59:6f:f2:92:ae:c8:ff:41:e6:04:9a:2b:07:25:d9:9c:
70:d1:3d:30:5f:e0:f6:0b:d4:f4:98:62:b2:5b:eb:2e:66:6f:
f9:33:c7:8a:f7:8a:7d:e6:31:77:1d:04:63:d1:99:a0:a8:60:
41:f5:ba:77:b7:ea:bc:93:34:f8:05:c6:dc:38:b9:94:ef:31:
46:7f:56:97:5c:7d:04:00:bb:bf:d4:c8:e7:e9:ed:78:91:f5:
2b:8b:11:1a:15:32:3e:c4:10:6f:31:b8:fa:b1:a3:ae:96:d1:
70:9c:97:7a:76:d4:f3:b8:36:ca:1f:7b:67:c2:47:c9:e9:c3:
2b:8e:a4:56:10:c2:74:70:de:b2:80:1b:29:be:78:ec:09:a8:
a5:27:f4:56:56:01:ca:03:84:4c:b9:a9:52:58:26:57:45:af:
91:1c:d8:49:a8:c1:71:5b:5f:c0:b1:f3:3c:84:4a:2d:5e:79:
9c:58:c5:36:cd:76:9b:13:ca:75:71:80:8d:c3:64:e7:35:5b:
45:ea:7a:29:8a:27:ad:08:4a:77:14:c6:69:4c:a0:d9:61:47:
de:b4:3c:1c:88:e6:57:0c:92:21:4f:6e:22:a5:85:ea:c6:ef:
6c:cf:1c:60:78:ba:16:e6:88:5a:a5:99:0a:40:45:05:fb:bd:
73:52:b2:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:52:24 2025 by rpki-client