Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/034971-b4da-4ba4-8d6e-d3c8a48f7a32/1/d6U9LpdwTb6oMaZEAHKQTukacbA.mft
File: d6U9LpdwTb6oMaZEAHKQTukacbA.mft (raw, json)
Hash identifier: Ei+5ZDC90t9tacBDEMB3fAs/Yepi8OkvcTmYKhzgC+0=
Subject key identifier: 51:39:1B:4C:AA:4C:0B:32:97:40:08:DB:E9:0B:AB:3E:ED:6B:B8:90
Authority key identifier: 77:A5:3D:2E:97:70:4D:BE:A8:31:A6:44:00:72:90:4E:E9:1A:71:B0
Certificate issuer: /CN=77a53d2e97704dbea831a6440072904ee91a71b0
Certificate serial: 0196579439A1AA78BE2FE161D6832AAB39CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d6U9LpdwTb6oMaZEAHKQTukacbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/034971-b4da-4ba4-8d6e-d3c8a48f7a32/1/d6U9LpdwTb6oMaZEAHKQTukacbA.mft
Manifest number: 11DC
Signing time: Mon 21 Apr 2025 09:00:53 +0000
Manifest this update: Mon 21 Apr 2025 09:00:53 +0000
Manifest next update: Tue 22 Apr 2025 09:00:53 +0000
Files and hashes: 1: 8YLxHIrqEOpYdEsGGRi0e0TkaqY.roa (hash: ZSlp7CySsW2GetrGVI9UQkRD/3974H3lwSYsXYBiMcM=)
2: d6U9LpdwTb6oMaZEAHKQTukacbA.crl (hash: 7C+wX2QZ5gOVZPWfMGz0UZgJakD4klpLd+0ocm6l/CA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/034971-b4da-4ba4-8d6e-d3c8a48f7a32/1/d6U9LpdwTb6oMaZEAHKQTukacbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/034971-b4da-4ba4-8d6e-d3c8a48f7a32/1/d6U9LpdwTb6oMaZEAHKQTukacbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/d6U9LpdwTb6oMaZEAHKQTukacbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 09:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:94:39:a1:aa:78:be:2f:e1:61:d6:83:2a:ab:39:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77a53d2e97704dbea831a6440072904ee91a71b0
Validity
Not Before: Apr 21 09:00:53 2025 GMT
Not After : Apr 22 09:00:53 2025 GMT
Subject: CN=51391b4caa4c0b32974008dbe90bab3eed6bb890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a7:28:dc:37:4f:d3:f1:21:70:25:0e:ce:13:
d7:cc:4a:1b:12:de:13:e9:4d:88:c8:e7:62:e4:c5:
9b:e6:73:3d:e2:10:1e:35:69:cd:fd:a4:cd:ae:ab:
a4:f7:30:6c:60:a3:7f:72:44:b2:ae:f4:ac:7a:29:
1f:24:12:6b:09:da:c5:bb:fc:d2:31:94:5e:be:ca:
63:fc:5c:7f:48:49:c0:3e:12:57:86:82:9b:55:bd:
f1:f8:e7:0f:ae:24:fd:c1:61:b1:15:82:99:c0:32:
d8:9f:a3:57:3d:c2:32:cc:2d:e9:8d:6f:be:f5:cc:
b0:fc:90:1a:29:01:d2:6e:06:39:33:fa:61:1d:5e:
55:4b:ca:8a:59:3f:25:b3:66:ce:c1:63:7f:b1:9b:
e6:dd:64:d9:b6:c9:74:ce:b1:77:aa:21:2f:49:06:
87:97:16:76:8b:04:f1:91:65:46:be:85:48:4f:b9:
f1:1a:b1:56:6b:77:27:f9:bc:31:25:8a:e2:15:a6:
c4:db:70:78:c7:82:37:b0:19:28:8a:93:bd:e8:71:
86:f1:fb:4f:24:e6:27:a0:50:11:80:f7:25:e4:1b:
ab:b1:30:9e:c0:25:53:8e:a4:9e:bd:2f:b1:ca:c0:
8c:09:0e:48:70:57:08:8e:b0:84:d1:a9:b0:d4:0c:
aa:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:39:1B:4C:AA:4C:0B:32:97:40:08:DB:E9:0B:AB:3E:ED:6B:B8:90
X509v3 Authority Key Identifier:
keyid:77:A5:3D:2E:97:70:4D:BE:A8:31:A6:44:00:72:90:4E:E9:1A:71:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6U9LpdwTb6oMaZEAHKQTukacbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/034971-b4da-4ba4-8d6e-d3c8a48f7a32/1/d6U9LpdwTb6oMaZEAHKQTukacbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/034971-b4da-4ba4-8d6e-d3c8a48f7a32/1/d6U9LpdwTb6oMaZEAHKQTukacbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:9e:03:d3:c2:aa:6e:2e:3e:f5:b4:87:73:6d:09:4d:07:7d:
14:dd:50:d1:31:36:8f:c4:2f:67:a0:02:4a:64:3a:45:a6:29:
8b:b1:59:28:2d:74:cc:22:d9:8f:3a:e3:9e:a1:9d:c4:ed:34:
69:50:1f:20:f9:7b:d1:48:c1:0f:41:60:8b:85:ee:17:dc:6e:
eb:48:18:3e:ec:c9:ee:97:08:fe:b4:fc:b3:2c:0b:82:e6:ad:
75:ae:d8:46:3a:df:cd:0d:cf:fc:d6:c7:a4:bb:a0:44:34:ec:
7b:64:8b:f7:3e:19:52:bb:74:aa:10:28:88:7d:8f:7b:27:e1:
2e:1c:47:10:d1:a8:f9:00:41:1f:cf:e7:68:f2:2e:46:82:d6:
fe:ee:f7:d1:5c:08:6a:0b:0b:e6:a2:99:c7:b0:30:5d:c1:03:
e8:54:76:cd:55:8d:ba:74:6b:ad:4c:a4:13:81:e5:34:5b:9e:
92:c0:31:4d:bc:3a:3e:9a:f5:65:54:c5:5c:58:7d:7c:22:09:
30:cb:e5:3d:81:b8:f0:e9:ec:31:0c:34:d8:78:36:91:b3:e4:
ac:41:b3:7d:15:29:2d:ab:1f:7c:dd:4c:8f:02:37:e7:cb:c0:
ce:14:85:28:b5:bb:77:ea:94:1c:05:13:d7:3b:7b:1f:cc:be:
01:90:31:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:01:55 2025 by rpki-client