Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.mft
File: 83T3NMNpXmeQanAy6y5Z-z60GyI.mft (raw, json)
Hash identifier: MiBiX86KZnvm4kNn4l65ehSoykZAhXRSRop37GPOaYA=
Subject key identifier: F6:B3:68:D4:B9:73:4F:06:82:73:94:92:B9:7E:0F:17:2D:19:C5:C1
Authority key identifier: F3:74:F7:34:C3:69:5E:67:90:6A:70:32:EB:2E:59:FB:3E:B4:1B:22
Certificate issuer: /CN=f374f734c3695e67906a7032eb2e59fb3eb41b22
Certificate serial: 01965726204899153EBFB5FC96CE4218FB35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/83T3NMNpXmeQanAy6y5Z-z60GyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.mft
Manifest number: 07CF
Signing time: Mon 21 Apr 2025 07:00:38 +0000
Manifest this update: Mon 21 Apr 2025 07:00:38 +0000
Manifest next update: Tue 22 Apr 2025 07:00:38 +0000
Files and hashes: 1: 5PZ3g6OP7Xkkh7yPx23u6neBrAE.roa (hash: Oeq+7unGkdcn5PZadl5yUb8yi+1t207kSQ+K6DCv118=)
2: 83T3NMNpXmeQanAy6y5Z-z60GyI.crl (hash: ePWJ5Wj5OLhxGF+SRN5FZffGOB2wAVAAEROidaofYvw=)
3: TNt6qas3cJ89n8wxiGWzg9MyX8w.roa (hash: rrMidK0OGIBtvobdrSZyglIiGj8pyxF47ABU/7yhc+8=)
4: WPt8oKr1EmQOIK0I7qnH9DYPvJE.roa (hash: OJHjZqCH0qPl8+MzdYjyp7NApYVYsO9hRYT6Cvd6y2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/83T3NMNpXmeQanAy6y5Z-z60GyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 07:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:26:20:48:99:15:3e:bf:b5:fc:96:ce:42:18:fb:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f374f734c3695e67906a7032eb2e59fb3eb41b22
Validity
Not Before: Apr 21 07:00:38 2025 GMT
Not After : Apr 22 07:00:38 2025 GMT
Subject: CN=f6b368d4b9734f0682739492b97e0f172d19c5c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:79:01:22:98:5c:14:73:f5:73:a9:e5:c0:ff:
36:61:8f:ce:d1:ef:de:88:24:f9:72:d2:7a:d5:ee:
8a:ec:99:bb:49:b9:69:dd:d0:6c:ce:48:90:96:f6:
19:d3:33:4f:7f:0e:19:df:08:35:33:bb:c6:45:7c:
e5:b5:a3:21:53:8a:0d:34:52:9d:0f:46:c8:c1:5d:
9e:42:ec:fd:42:1b:90:db:d3:5f:73:05:2a:28:b9:
90:ae:42:fc:8a:5d:13:de:27:83:60:4f:67:89:5b:
06:1a:26:1c:7f:67:95:60:bc:c3:30:71:b9:ec:19:
de:99:e8:f2:c5:ff:a7:e3:ce:9d:12:66:56:a8:cc:
2b:a6:94:a8:64:5a:21:ef:6a:39:fe:30:1d:0b:f8:
ea:e2:bb:78:97:86:53:24:f5:7f:f3:be:a7:83:b2:
da:4a:9b:ae:2e:d5:a6:48:38:b4:fa:7c:ca:4d:f4:
34:41:b9:a2:f8:14:30:8e:10:59:72:ee:7c:6b:db:
70:f5:80:94:19:14:b0:1d:54:fd:fc:ca:2c:e3:55:
9e:3e:62:90:4c:5d:4c:7f:d8:16:22:85:39:28:8b:
57:fd:a3:b7:e0:d3:8e:63:6c:ce:67:a6:d2:02:28:
e3:4a:ff:a6:41:73:72:e5:ee:6e:f1:35:d5:52:75:
a4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:B3:68:D4:B9:73:4F:06:82:73:94:92:B9:7E:0F:17:2D:19:C5:C1
X509v3 Authority Key Identifier:
keyid:F3:74:F7:34:C3:69:5E:67:90:6A:70:32:EB:2E:59:FB:3E:B4:1B:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/83T3NMNpXmeQanAy6y5Z-z60GyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:d2:c0:8b:2e:5e:4b:c2:cc:28:e8:34:b7:66:db:79:54:59:
b5:39:04:bf:69:7b:dc:e8:41:47:32:9b:1a:36:53:d4:d7:9f:
90:9c:b0:a6:1c:10:19:a0:1f:f6:7b:c2:8e:c7:e4:0d:b1:20:
0d:21:f9:c1:d3:4e:91:92:77:f0:51:82:b0:d0:0d:c6:58:1c:
54:9b:69:0d:92:ff:0c:f7:f8:41:57:9d:d5:c8:09:61:25:cd:
3e:bd:ae:79:ac:41:21:37:79:c4:72:e2:19:9b:59:58:e4:e8:
0d:34:7f:20:25:ae:a5:15:2d:85:09:cf:18:2d:31:90:11:65:
48:22:0f:4e:d5:91:a9:ce:7c:53:f6:e2:b9:be:91:f5:99:da:
99:a1:fa:96:a0:c8:ca:df:7d:4d:12:1f:0f:b7:54:9a:54:de:
dd:b5:53:a4:5c:30:77:a8:78:7f:d7:e4:9a:28:87:3a:8f:84:
7f:8f:2d:ef:dc:ea:f5:8c:d0:27:65:c1:ae:e4:a2:ba:0f:b4:
36:ab:2b:f3:2c:5f:3f:08:b6:ac:f0:07:d0:f8:d4:6d:e8:32:
6c:15:11:65:d2:aa:fe:b5:6b:fc:18:03:3c:51:10:d7:a5:81:
51:25:18:6b:36:a2:a2:e6:e4:26:da:fa:91:a5:4d:be:ec:be:
0d:fc:c1:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:03:06 2025 by rpki-client