Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f090be-422b-4f2a-864f-9fca29decda8/1/rgMnvx57e_vdLyFMjvYpqink1m8.mft
File: rgMnvx57e_vdLyFMjvYpqink1m8.mft (raw, json)
Hash identifier: dqf9eMAjC6mAPnpsk7VLRB5L5TVJJLdc3lpj+vek/H4=
Subject key identifier: 66:FB:26:D6:89:27:6D:02:7C:F4:CA:80:2D:F2:EC:56:16:73:76:F9
Authority key identifier: AE:03:27:BF:1E:7B:7B:FB:DD:2F:21:4C:8E:F6:29:AA:29:E4:D6:6F
Certificate issuer: /CN=ae0327bf1e7b7bfbdd2f214c8ef629aa29e4d66f
Certificate serial: 01965A5DAE4F88484DB4645CBD32D1FDA10B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rgMnvx57e_vdLyFMjvYpqink1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f090be-422b-4f2a-864f-9fca29decda8/1/rgMnvx57e_vdLyFMjvYpqink1m8.mft
Manifest number: 1503
Signing time: Mon 21 Apr 2025 22:00:10 +0000
Manifest this update: Mon 21 Apr 2025 22:00:10 +0000
Manifest next update: Tue 22 Apr 2025 22:00:10 +0000
Files and hashes: 1: D07K9M73JE_RghORuqvEImVGd0Q.roa (hash: kPt/ZOiMf9T1o4/zGBCvETiXAjwGaiEUsN/6gQ2oC8U=)
2: rgMnvx57e_vdLyFMjvYpqink1m8.crl (hash: z1Qzjnp3p8LFz9qFLxl2hiTnX9N8YHboDs4MTLs1v5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f090be-422b-4f2a-864f-9fca29decda8/1/rgMnvx57e_vdLyFMjvYpqink1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/f090be-422b-4f2a-864f-9fca29decda8/1/rgMnvx57e_vdLyFMjvYpqink1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rgMnvx57e_vdLyFMjvYpqink1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:5d:ae:4f:88:48:4d:b4:64:5c:bd:32:d1:fd:a1:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae0327bf1e7b7bfbdd2f214c8ef629aa29e4d66f
Validity
Not Before: Apr 21 22:00:10 2025 GMT
Not After : Apr 22 22:00:10 2025 GMT
Subject: CN=66fb26d689276d027cf4ca802df2ec56167376f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7b:cb:8f:b8:e6:74:77:2f:d8:86:5f:96:42:
35:0a:f8:c1:86:cb:e6:b6:73:3e:4e:9c:6a:d8:56:
c5:d2:36:98:9d:76:8e:fa:51:20:0c:eb:74:49:e9:
96:f8:d5:01:9f:d4:0f:d2:1c:ca:1b:b4:04:ab:a0:
de:90:80:f8:c1:6d:27:cc:09:58:fb:a0:39:66:06:
24:2c:78:39:5f:a3:f4:12:a6:53:a7:42:df:23:0a:
23:70:3c:9f:e5:00:27:dc:bc:80:22:ab:9d:af:97:
0f:6c:30:f9:6f:e1:e4:17:97:ed:8f:1e:f5:bf:b1:
38:14:5d:cf:71:17:01:7f:57:ad:40:d3:26:c6:16:
39:ff:a8:ad:58:60:7d:88:ab:44:6e:df:9b:65:3d:
82:61:66:af:bc:d3:5b:d4:46:34:a0:8c:be:b6:1d:
f6:30:a7:01:b0:80:99:6f:59:d8:f7:e6:c8:7d:58:
24:44:17:06:ea:9c:bd:d1:c2:cc:26:9a:fd:62:74:
57:ea:ed:23:89:21:78:77:8f:38:55:24:79:e8:5d:
d0:70:05:3f:98:40:c6:fc:43:db:0f:50:67:68:79:
15:ed:b9:de:78:dc:b4:bb:26:86:45:08:37:4a:12:
5e:8c:f9:c0:36:57:96:65:e1:79:af:71:bc:76:34:
8a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:FB:26:D6:89:27:6D:02:7C:F4:CA:80:2D:F2:EC:56:16:73:76:F9
X509v3 Authority Key Identifier:
keyid:AE:03:27:BF:1E:7B:7B:FB:DD:2F:21:4C:8E:F6:29:AA:29:E4:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rgMnvx57e_vdLyFMjvYpqink1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f090be-422b-4f2a-864f-9fca29decda8/1/rgMnvx57e_vdLyFMjvYpqink1m8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f090be-422b-4f2a-864f-9fca29decda8/1/rgMnvx57e_vdLyFMjvYpqink1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:48:bb:3a:69:50:05:d1:9b:8d:1a:39:44:5b:c9:5e:73:57:
a2:30:7a:32:6e:5d:48:72:1a:b9:0a:4d:25:7e:d9:03:07:9f:
88:81:21:86:65:65:cc:15:7c:77:88:b8:19:7b:27:e2:c1:fe:
b4:94:5b:10:23:70:24:93:9e:91:95:74:38:73:e0:a1:94:2f:
46:07:52:c9:69:bd:a6:94:e3:c4:eb:71:eb:be:9e:e0:eb:3a:
52:d9:15:60:72:86:04:c2:c3:14:0d:79:3a:d8:11:0c:ad:b2:
ad:70:46:14:5e:4a:56:b7:55:46:8b:13:4a:0b:55:85:98:2c:
9d:df:e3:af:94:eb:c8:12:e0:22:7e:7b:b3:0c:29:a6:6a:96:
6d:9e:d5:7f:ce:71:67:bf:5e:26:30:4a:98:b0:62:59:b3:5c:
b1:a6:29:f2:3c:76:40:04:40:f9:a2:72:8a:24:6b:ab:41:9b:
4f:e1:61:03:da:b4:9d:45:d1:3d:fa:f0:56:bc:bd:92:75:4c:
47:f5:2c:63:52:e2:f0:05:ab:ec:6b:b4:07:aa:4a:1b:e2:ff:
f1:70:3b:27:0b:25:8b:a1:f0:d2:ba:94:b9:bb:0e:ad:b0:f8:
be:ae:f1:ad:be:6c:88:57:49:3a:76:9e:0f:c7:c2:39:8e:07:
a0:07:cf:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:42:55 2025 by rpki-client