Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/aP4jOevgl_9pirMOW2PswhoqI6s.mft
File: aP4jOevgl_9pirMOW2PswhoqI6s.mft (raw, json)
Hash identifier: BX921FM8mG8VxMs2kSR2qwCG8Ws098d/pjjTXfxCfxw=
Subject key identifier: 7A:9B:C9:A0:B7:8F:2D:99:EC:C0:F9:93:4E:F8:B0:E1:06:F7:4C:5F
Authority key identifier: 68:FE:23:39:EB:E0:97:FF:69:8A:B3:0E:5B:63:EC:C2:1A:2A:23:AB
Certificate issuer: /CN=68fe2339ebe097ff698ab30e5b63ecc21a2a23ab
Certificate serial: 019657270AD8019D31FC158BCEC4696E2D0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aP4jOevgl_9pirMOW2PswhoqI6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/aP4jOevgl_9pirMOW2PswhoqI6s.mft
Manifest number: 03C7
Signing time: Mon 21 Apr 2025 07:01:38 +0000
Manifest this update: Mon 21 Apr 2025 07:01:38 +0000
Manifest next update: Tue 22 Apr 2025 07:01:38 +0000
Files and hashes: 1: 9V1tND3zl52dvTGUP5zkoYgjSzk.roa (hash: ZFwBT8PQBALn0UQygkKFbmysfnKpnWDyHSFsXkqI3os=)
2: aP4jOevgl_9pirMOW2PswhoqI6s.crl (hash: U3yQlTG4LkXFttPuPWElm+bv5AlYUciDRX3YwmqkL4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/aP4jOevgl_9pirMOW2PswhoqI6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/aP4jOevgl_9pirMOW2PswhoqI6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/aP4jOevgl_9pirMOW2PswhoqI6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:27:0a:d8:01:9d:31:fc:15:8b:ce:c4:69:6e:2d:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68fe2339ebe097ff698ab30e5b63ecc21a2a23ab
Validity
Not Before: Apr 21 07:01:38 2025 GMT
Not After : Apr 22 07:01:38 2025 GMT
Subject: CN=7a9bc9a0b78f2d99ecc0f9934ef8b0e106f74c5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:db:54:04:a6:f3:60:2e:50:e5:cc:aa:14:70:
f3:e7:07:c7:81:4e:29:56:bd:a1:51:a0:0a:e5:38:
2a:56:68:b6:30:0a:86:9f:5f:be:83:03:4c:f9:1c:
8e:c3:8a:21:0e:cb:d0:65:11:6a:31:81:08:5a:04:
12:12:ce:79:2f:d3:a6:30:2a:24:9f:8d:e4:f9:86:
da:02:d6:16:93:31:77:bc:11:3b:d2:f8:fa:f5:0e:
5f:94:23:44:ff:ab:2c:5a:5e:0f:31:40:ef:58:be:
65:8d:8c:98:0b:8b:25:94:67:14:0f:7d:25:1a:73:
4a:9b:7a:0d:f3:65:18:93:38:27:dc:a5:8a:b3:ce:
a9:a5:03:45:c8:b8:ad:08:66:47:b7:77:14:19:6c:
10:da:2e:68:a9:17:8f:f9:e5:fd:92:b1:dc:e0:c8:
06:e1:e6:be:66:83:8c:2d:3e:08:0c:ac:0f:aa:c5:
06:fe:c7:2a:6b:ca:98:b0:5c:bc:e4:7f:bb:b9:8e:
a8:09:79:ed:57:aa:07:6c:cd:41:9a:2e:71:31:c5:
b3:f7:47:4f:bd:83:b7:8a:70:6a:a2:53:1c:b6:0a:
c4:98:2b:26:f3:9c:fb:c5:24:d1:c9:eb:8b:f8:f6:
d3:29:bc:02:70:cd:c3:71:04:cc:4e:48:b7:bb:24:
3f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:9B:C9:A0:B7:8F:2D:99:EC:C0:F9:93:4E:F8:B0:E1:06:F7:4C:5F
X509v3 Authority Key Identifier:
keyid:68:FE:23:39:EB:E0:97:FF:69:8A:B3:0E:5B:63:EC:C2:1A:2A:23:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aP4jOevgl_9pirMOW2PswhoqI6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/aP4jOevgl_9pirMOW2PswhoqI6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/aP4jOevgl_9pirMOW2PswhoqI6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:d8:55:ad:db:e8:f9:dd:2f:f2:80:c3:00:6c:b4:e1:f8:0a:
5c:6d:61:60:47:c6:5e:d8:87:e0:3e:37:80:9c:4e:90:38:ec:
16:0c:18:19:26:c5:6d:d4:24:11:77:6d:e9:61:d9:e0:50:7b:
35:94:21:05:b7:10:05:d7:f5:6e:00:fc:9e:84:2c:71:42:30:
64:da:f1:30:51:7c:86:2f:c1:a0:53:56:fa:17:fb:e6:8a:0a:
65:09:7e:a0:30:9d:61:94:62:15:07:e2:15:a1:1a:47:ea:8d:
2a:f2:81:37:e5:03:da:fc:e2:37:43:34:00:42:85:a0:c3:6c:
d9:79:28:09:46:2c:2f:10:8b:57:74:7c:c0:3c:7e:48:a3:c0:
9a:40:b4:71:03:6f:42:92:f9:ff:8d:1e:39:cf:80:9a:86:3e:
ad:91:f0:57:56:4c:11:03:d2:c5:67:ad:4e:60:5c:cc:17:9a:
90:37:2c:40:e0:3a:db:25:f0:39:99:cd:a9:e1:98:34:ab:49:
cb:c8:23:12:f2:82:82:cd:fd:73:d1:02:d1:dc:43:f6:67:8c:
0c:6c:b6:b6:a9:07:01:7e:34:85:3e:51:8d:65:5f:39:61:98:
9c:36:38:b8:1e:76:eb:87:3d:fa:87:07:39:d9:51:9a:41:d4:
20:70:3d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:37:36 2025 by rpki-client