Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/8c5dc7-bf41-4008-9cff-2c69985359c0/1/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.mft
File: Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.mft (raw, json)
Hash identifier: eqwBjtMUccC2ripzLUlUKM+PgmRQ/uRadt9EJzqAgHw=
Subject key identifier: 77:99:90:D1:B6:E1:0B:14:4B:03:99:62:8C:F7:75:31:97:13:1D:DA
Authority key identifier: 45:AE:D3:D1:A1:A1:E2:83:0D:41:6A:FA:04:7B:95:22:0E:81:40:84
Certificate issuer: /CN=45aed3d1a1a1e2830d416afa047b95220e814084
Certificate serial: 0196575CD6435095E65B0E8F4E1B813EA1DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/8c5dc7-bf41-4008-9cff-2c69985359c0/1/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.mft
Manifest number: 0769
Signing time: Mon 21 Apr 2025 08:00:23 +0000
Manifest this update: Mon 21 Apr 2025 08:00:23 +0000
Manifest next update: Tue 22 Apr 2025 08:00:23 +0000
Files and hashes: 1: 5yM7l9glO5Y_kZZbeV1PY4oF4AI.roa (hash: Zrq7WRCOd9AEwWRm5k4u/56c3wqE+RlRfF9EKNORqJM=)
2: Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.crl (hash: 42r0FvGugBXPTQJwRwBzLMXlodQM4Z/uuLJIjk8ylMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/8c5dc7-bf41-4008-9cff-2c69985359c0/1/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/8c5dc7-bf41-4008-9cff-2c69985359c0/1/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:5c:d6:43:50:95:e6:5b:0e:8f:4e:1b:81:3e:a1:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45aed3d1a1a1e2830d416afa047b95220e814084
Validity
Not Before: Apr 21 08:00:23 2025 GMT
Not After : Apr 22 08:00:23 2025 GMT
Subject: CN=779990d1b6e10b144b0399628cf7753197131dda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4d:5b:0c:23:75:98:c0:64:92:ed:e4:dd:d4:
17:2d:c0:13:70:34:29:3a:29:7d:f2:25:00:cd:3e:
4d:a8:8b:a7:ec:7d:b6:81:f5:cb:37:3d:12:ed:a9:
b5:d0:7d:09:13:a8:38:bd:98:e8:06:18:cb:1e:c7:
c4:84:2c:48:3e:a4:12:be:96:54:3e:dd:c4:68:09:
ed:aa:03:42:3c:d9:9f:0f:fa:78:d7:05:a4:95:37:
72:c9:dc:4a:74:b1:e0:c6:b7:95:5c:65:2b:ba:db:
fc:d0:b8:ea:00:6b:e0:ad:c3:c6:3b:e3:c9:ee:5d:
45:85:87:62:51:61:d2:37:d1:7e:17:40:85:9f:06:
c6:aa:3e:b4:5e:35:49:79:eb:cf:6a:39:5f:d7:10:
96:94:ed:87:bd:80:95:24:01:63:94:6d:96:fe:fb:
bd:c9:f2:21:5b:1b:1e:e3:0f:eb:2b:a8:9c:66:5c:
7f:84:40:a1:83:3f:a3:ef:92:50:a5:0f:cc:85:27:
ba:c6:e1:98:07:22:2f:a8:a8:f2:f2:b6:fa:f4:3c:
72:7b:f2:4b:bd:ef:3e:35:ad:ba:c1:33:00:bb:20:
4e:a8:05:fc:f5:b9:b2:34:dd:70:5f:49:7d:49:9d:
e3:48:c4:1e:c8:77:15:72:31:0c:a8:87:f3:8c:0a:
c7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:99:90:D1:B6:E1:0B:14:4B:03:99:62:8C:F7:75:31:97:13:1D:DA
X509v3 Authority Key Identifier:
keyid:45:AE:D3:D1:A1:A1:E2:83:0D:41:6A:FA:04:7B:95:22:0E:81:40:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8c5dc7-bf41-4008-9cff-2c69985359c0/1/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8c5dc7-bf41-4008-9cff-2c69985359c0/1/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:f2:87:6d:3a:d7:80:c6:64:19:a0:15:1e:3f:06:02:76:d3:
99:88:06:77:4c:ce:3a:4a:4b:bc:84:2a:5d:cd:b1:7f:16:98:
8e:a0:39:79:06:d2:f3:6e:92:88:11:be:54:6a:c4:ea:66:ab:
8e:d0:82:ed:bd:59:c1:8c:6b:d0:50:59:9e:0f:21:7e:11:a5:
e3:c7:dd:24:7a:83:7b:8c:f3:17:cc:30:6f:7b:c3:5e:ad:21:
c5:19:02:97:29:5a:94:a3:66:e9:a7:2e:db:bf:2b:51:e5:89:
3c:fa:79:17:d0:08:50:0f:2c:09:fc:f7:98:ee:32:b6:6b:c9:
21:54:58:be:10:ab:5d:02:04:63:44:22:3a:db:f9:8e:0a:02:
91:39:6a:07:60:ce:18:57:a0:8c:b1:df:3d:8c:1e:a6:2c:63:
ac:41:0f:b3:6a:de:e2:15:00:1b:63:41:13:eb:87:f9:01:6a:
43:bc:14:ec:ad:61:13:1b:f0:99:64:16:15:2e:b2:41:67:2e:
2f:4c:24:ee:d3:a9:5c:40:72:dd:9b:58:2d:2e:e6:73:27:ce:
23:b8:65:67:65:20:0c:0a:0f:36:a9:e3:79:9c:6d:22:9b:df:
82:73:65:04:12:6e:3b:62:ae:f6:4f:33:6d:36:51:78:27:5f:
e2:cc:d9:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:43:39 2025 by rpki-client