Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/0b5860-cd57-4183-b9ae-e84785894838/1/rQ3BCLYPR7DZdygI5fzDgeqoHHg.mft
File: rQ3BCLYPR7DZdygI5fzDgeqoHHg.mft (raw, json)
Hash identifier: pKtP+nAaHxu2KJ/0Bn2q+rxQw8jsAiSmF0G8xMWbPjs=
Subject key identifier: 27:AE:10:86:81:47:C6:17:D2:C8:6B:A3:2C:0E:FA:7B:F7:F5:1E:0D
Authority key identifier: AD:0D:C1:08:B6:0F:47:B0:D9:77:28:08:E5:FC:C3:81:EA:A8:1C:78
Certificate issuer: /CN=ad0dc108b60f47b0d9772808e5fcc381eaa81c78
Certificate serial: 01965914F120931F666B2D69EE438B5DB693
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ3BCLYPR7DZdygI5fzDgeqoHHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/0b5860-cd57-4183-b9ae-e84785894838/1/rQ3BCLYPR7DZdygI5fzDgeqoHHg.mft
Manifest number: 090E
Signing time: Mon 21 Apr 2025 16:01:06 +0000
Manifest this update: Mon 21 Apr 2025 16:01:06 +0000
Manifest next update: Tue 22 Apr 2025 16:01:06 +0000
Files and hashes: 1: OUGzudtTbJQVw_1mFk8aHx4RCVE.roa (hash: pnWv/Z4SyVfyPYv0oxknc3DOerNA4xLQHYB0+b/8kWY=)
2: rQ3BCLYPR7DZdygI5fzDgeqoHHg.crl (hash: 6+j2ptUjYcT4eH59fnamAmnYy5sUcd5oa/wq1UcNIGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/0b5860-cd57-4183-b9ae-e84785894838/1/rQ3BCLYPR7DZdygI5fzDgeqoHHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/0b5860-cd57-4183-b9ae-e84785894838/1/rQ3BCLYPR7DZdygI5fzDgeqoHHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rQ3BCLYPR7DZdygI5fzDgeqoHHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 16:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:14:f1:20:93:1f:66:6b:2d:69:ee:43:8b:5d:b6:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0dc108b60f47b0d9772808e5fcc381eaa81c78
Validity
Not Before: Apr 21 16:01:06 2025 GMT
Not After : Apr 22 16:01:06 2025 GMT
Subject: CN=27ae10868147c617d2c86ba32c0efa7bf7f51e0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ed:ef:0c:43:bb:39:20:b0:75:30:89:78:d4:
3c:d6:86:04:c9:31:92:39:2a:f3:9c:34:63:3b:24:
d0:ab:00:f4:4a:fb:6b:0b:02:d1:1e:63:10:24:17:
65:00:a5:85:45:a8:d8:6a:56:fe:96:e5:19:d2:78:
85:89:ae:ff:82:c1:9c:19:ce:b7:82:07:d6:ad:48:
43:3c:9e:85:ba:c9:44:65:19:76:f4:ff:11:79:e3:
64:d1:ea:64:bf:b6:c0:df:e5:64:e0:7c:d1:f0:96:
80:1c:77:b3:09:e0:aa:58:e6:f6:88:39:02:25:42:
74:e5:e4:b9:cb:05:e1:ce:ae:7f:1d:f2:98:46:6a:
39:78:8b:b3:e5:cf:f1:6c:4a:91:71:9c:25:db:09:
7a:51:90:be:f3:e4:b2:e0:01:84:38:77:86:aa:ad:
c8:c0:4b:b6:25:ef:84:d2:8d:66:a0:85:92:76:ec:
82:55:85:8f:bf:e4:0d:43:2a:70:cc:d4:b7:ff:a4:
9c:46:32:78:ee:4b:0a:e5:56:4a:f9:6a:97:5e:c0:
06:f5:b2:f5:84:25:4d:c3:db:af:6b:1f:e2:a9:37:
5d:bb:16:a8:17:cd:24:28:29:96:73:1b:86:2e:f9:
db:9d:22:5e:ee:1d:a7:c1:52:fd:c5:7e:7f:3a:9d:
75:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:AE:10:86:81:47:C6:17:D2:C8:6B:A3:2C:0E:FA:7B:F7:F5:1E:0D
X509v3 Authority Key Identifier:
keyid:AD:0D:C1:08:B6:0F:47:B0:D9:77:28:08:E5:FC:C3:81:EA:A8:1C:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ3BCLYPR7DZdygI5fzDgeqoHHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/0b5860-cd57-4183-b9ae-e84785894838/1/rQ3BCLYPR7DZdygI5fzDgeqoHHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/0b5860-cd57-4183-b9ae-e84785894838/1/rQ3BCLYPR7DZdygI5fzDgeqoHHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:1c:c5:0a:86:b3:a3:3e:62:b0:ee:d8:24:e3:e3:6f:0e:d4:
7b:73:52:64:64:f3:d1:99:49:77:b1:75:27:1e:48:f4:a2:e2:
9f:a4:f6:47:e1:0e:3e:bb:4d:d2:c4:ff:c6:bb:5e:30:84:01:
9d:22:b7:f1:c1:ed:84:13:c1:10:10:94:ef:83:00:e9:ce:43:
28:06:22:ec:ee:e9:7d:43:0f:a7:2c:d5:e7:2b:8a:56:f3:c4:
47:55:b0:18:24:0e:12:0e:ac:68:20:e8:a6:ae:34:de:36:9b:
e5:f4:d8:fe:87:f3:ae:41:ba:ff:6d:c9:be:80:a5:a3:9c:4d:
47:ba:b4:9c:bd:c3:c9:a2:a0:52:a8:5f:f3:00:c5:45:0a:4e:
5e:bd:f2:b0:73:a7:09:01:a3:6c:e9:19:de:62:04:d8:07:3b:
53:92:fd:db:71:a4:32:51:17:e3:98:fb:65:5b:ad:62:ad:1a:
9f:8e:39:19:1b:d4:c4:88:c5:5e:58:80:83:4a:f8:d2:62:f8:
d9:f9:45:30:87:d9:db:27:f9:8e:8e:74:ee:d6:a7:1f:47:b7:
9b:91:bf:9d:f0:ac:74:ca:3a:82:70:05:39:8e:1b:7e:72:36:
3e:82:1c:e9:a7:43:5b:24:9a:71:c0:66:1d:00:31:83:a1:5f:
f8:0d:ae:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:09:41 2025 by rpki-client