Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/69siVHHy1uQQYLNBhXJUhUgQFLg.mft
File: 69siVHHy1uQQYLNBhXJUhUgQFLg.mft (raw, json)
Hash identifier: mjJvd1+4ZDohIFSqN4teSCeTMtzIb/eQ1YRZqqzD6G4=
Subject key identifier: F5:29:F1:DD:F8:AD:87:14:9C:B2:13:8F:93:07:97:31:A3:0D:7D:4E
Authority key identifier: EB:DB:22:54:71:F2:D6:E4:10:60:B3:41:85:72:54:85:48:10:14:B8
Certificate issuer: /CN=ebdb225471f2d6e41060b34185725485481014b8
Certificate serial: 01964A0F9898A134659C44AE2974A40FA68D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/69siVHHy1uQQYLNBhXJUhUgQFLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/69siVHHy1uQQYLNBhXJUhUgQFLg.mft
Manifest number: 1459
Signing time: Fri 18 Apr 2025 18:00:57 +0000
Manifest this update: Fri 18 Apr 2025 18:00:57 +0000
Manifest next update: Sat 19 Apr 2025 18:00:57 +0000
Files and hashes: 1: 69siVHHy1uQQYLNBhXJUhUgQFLg.crl (hash: arEdN5+N3fuSblr9NbCYUPUr7IN9ZqanxOfBMvnYlCg=)
2: fa7NROYx8iSrXkapsnKC5maWgAE.roa (hash: uTBWDWi+lUO6SXQc1mkpkLFQ4pPjE/7aqsWLMLokR9M=)
3: ypiHaIkjWTMZcDzv0-OFLs0Vl8g.roa (hash: VEkHUv83f9ifQbOyDH/QRdAXTrrARw1jb4RzCM/pIXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/69siVHHy1uQQYLNBhXJUhUgQFLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/69siVHHy1uQQYLNBhXJUhUgQFLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/69siVHHy1uQQYLNBhXJUhUgQFLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 18:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:0f:98:98:a1:34:65:9c:44:ae:29:74:a4:0f:a6:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebdb225471f2d6e41060b34185725485481014b8
Validity
Not Before: Apr 18 18:00:57 2025 GMT
Not After : Apr 19 18:00:57 2025 GMT
Subject: CN=f529f1ddf8ad87149cb2138f93079731a30d7d4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:18:92:68:ea:a3:56:f8:ca:e1:ee:99:77:cf:
66:72:a7:d4:0b:f3:16:f7:e1:a8:d9:2b:b7:77:bc:
0d:4e:1a:62:a9:5c:65:2f:e3:da:25:88:06:3d:39:
37:d8:b6:93:a3:c0:3e:e2:1e:9f:e8:58:1d:10:b7:
c3:da:7f:7c:78:2a:18:69:55:d2:92:e6:87:a3:dc:
43:e6:9d:41:97:1c:f6:07:70:01:7b:1e:89:f5:a0:
f5:43:0d:d3:e1:e3:b8:89:57:e4:54:ee:28:0c:77:
31:fd:22:7b:1a:5b:76:48:dc:23:ab:fa:f2:6a:8b:
04:4e:54:2e:df:7e:de:db:f2:a1:e4:06:c8:b6:b1:
7f:23:93:5b:52:39:5d:fd:05:b8:05:cc:f3:0e:0f:
3d:f8:19:7b:26:0b:ed:6d:cc:5f:4a:e4:7f:ef:e6:
45:56:aa:10:6a:b9:eb:a7:f0:d3:af:ac:49:90:44:
fd:0b:81:7b:b2:e1:97:e4:94:34:86:d7:2c:7a:48:
8f:bd:b1:50:4d:4c:f7:8e:04:80:81:52:be:67:6f:
b3:17:ae:d3:13:65:1a:00:44:37:aa:c2:a9:a3:a3:
df:f2:35:e1:85:81:12:cd:52:56:06:9f:85:f9:f3:
20:0f:20:42:d6:89:9b:e2:8f:20:35:60:3a:ef:2c:
46:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:29:F1:DD:F8:AD:87:14:9C:B2:13:8F:93:07:97:31:A3:0D:7D:4E
X509v3 Authority Key Identifier:
keyid:EB:DB:22:54:71:F2:D6:E4:10:60:B3:41:85:72:54:85:48:10:14:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/69siVHHy1uQQYLNBhXJUhUgQFLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/69siVHHy1uQQYLNBhXJUhUgQFLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/69siVHHy1uQQYLNBhXJUhUgQFLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:87:99:10:79:92:c9:3c:1d:2e:c6:a1:6e:5c:3b:f3:ac:4c:
67:35:98:aa:0a:49:c6:60:36:9a:75:f2:9f:95:d1:0b:61:02:
bd:8b:70:10:29:dc:03:e6:3f:c1:17:4a:10:27:b7:32:cb:0d:
1c:51:ac:87:3e:e6:d0:91:89:ab:b3:01:b6:1b:cb:5a:d4:0f:
43:a0:19:66:2a:f4:b8:0d:b4:54:31:32:40:6c:43:be:59:0c:
05:16:13:c0:75:80:06:8d:61:b9:ee:46:1d:44:a5:25:44:85:
34:a7:66:58:73:3c:d9:b0:e2:6a:eb:30:43:88:70:47:ea:2c:
86:2e:49:ba:c1:ba:40:3d:4b:10:90:02:b6:04:d4:11:de:3c:
22:97:26:1c:ef:83:b5:40:f0:79:31:f3:8c:0f:ce:7b:60:56:
52:a8:09:ec:9a:dd:52:66:51:4a:a5:4c:f8:6f:d4:2c:b0:69:
25:ee:8c:d5:a4:a6:b6:5e:e3:ce:f6:a4:f0:79:37:ff:85:2a:
b2:31:47:64:32:0e:21:bd:f1:db:e1:65:7c:32:4b:5a:1b:d9:
c0:82:4f:13:de:d7:37:4e:d4:33:42:1d:11:34:4b:fa:7b:e1:
ec:85:bf:0f:f4:eb:32:34:2e:0b:ca:a2:c9:77:c7:8f:03:b0:
09:0f:63:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 02:34:48 2025 by rpki-client