Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/103fc9-2cbf-40bf-9625-18762500fe25/1/Rj7duRtTj4Port9VZclg3wsQfqI.mft
File: Rj7duRtTj4Port9VZclg3wsQfqI.mft (raw, json)
Hash identifier: yiIGNRbu8hpXRpagSx/F+aUxh814on109/tn1qqzCU4=
Subject key identifier: 67:02:E3:7F:5E:1D:9A:D7:66:3D:DB:A2:4C:2D:DB:E8:9C:6C:E5:2D
Authority key identifier: 46:3E:DD:B9:1B:53:8F:83:E8:AE:DF:55:65:C9:60:DF:0B:10:7E:A2
Certificate issuer: /CN=463eddb91b538f83e8aedf5565c960df0b107ea2
Certificate serial: 019659F0164F03C2179630A49562DA417D08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rj7duRtTj4Port9VZclg3wsQfqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/103fc9-2cbf-40bf-9625-18762500fe25/1/Rj7duRtTj4Port9VZclg3wsQfqI.mft
Manifest number: 0961
Signing time: Mon 21 Apr 2025 20:00:28 +0000
Manifest this update: Mon 21 Apr 2025 20:00:28 +0000
Manifest next update: Tue 22 Apr 2025 20:00:28 +0000
Files and hashes: 1: Rj7duRtTj4Port9VZclg3wsQfqI.crl (hash: Sy3B4lVP6D9moIoKYnbmapgb+4G8+gTFYMe/l6hwLiQ=)
2: VDpi_TMhu0MubOzMgSkXQ1gGEVo.roa (hash: l1aEmCnDC0lAylyG2lI+yA0mAn8xNZotz2Kipdmx4J4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/103fc9-2cbf-40bf-9625-18762500fe25/1/Rj7duRtTj4Port9VZclg3wsQfqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/103fc9-2cbf-40bf-9625-18762500fe25/1/Rj7duRtTj4Port9VZclg3wsQfqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rj7duRtTj4Port9VZclg3wsQfqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:f0:16:4f:03:c2:17:96:30:a4:95:62:da:41:7d:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=463eddb91b538f83e8aedf5565c960df0b107ea2
Validity
Not Before: Apr 21 20:00:28 2025 GMT
Not After : Apr 22 20:00:28 2025 GMT
Subject: CN=6702e37f5e1d9ad7663ddba24c2ddbe89c6ce52d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:af:76:85:d3:ad:d8:76:32:52:4f:97:d8:73:
da:e7:77:6e:ec:ff:ed:8c:4a:dd:12:b4:bf:81:65:
b6:e7:33:88:f9:b6:bf:f6:23:85:6b:6f:24:1d:0c:
87:f3:d5:75:13:ff:5e:62:60:62:c9:71:64:0d:1c:
04:23:ac:24:9a:dd:11:6e:7c:21:85:12:43:4d:7d:
23:54:de:1a:e0:99:0d:07:a6:db:9b:e4:fc:72:3a:
1b:1c:e2:ba:ff:ec:c8:43:4d:97:e1:0b:3e:e4:8f:
e6:20:39:fe:f4:4e:c3:3b:6b:a2:77:46:c7:54:40:
5e:72:52:98:85:68:8d:a3:6a:a5:26:6b:4f:e3:c7:
4c:75:ec:4b:24:d4:b4:ae:47:ef:6b:e5:11:be:19:
0b:c8:97:01:9e:e5:1c:6a:d2:a3:e0:66:82:eb:c5:
e3:bd:3e:d1:01:bd:2e:7b:a5:5c:9b:7e:41:b9:51:
d8:68:d3:08:91:25:bb:95:1a:42:e9:b8:7e:ba:a8:
cf:c9:0e:20:ac:7c:bd:c0:8f:ce:85:5d:aa:e3:79:
1b:af:05:93:98:84:be:06:5c:8f:7d:68:1b:48:e5:
b7:7e:41:dc:68:c2:b3:d0:61:2d:35:8d:12:74:6c:
23:8d:62:0e:b4:03:c3:51:db:b0:b9:a0:cf:1b:60:
22:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:02:E3:7F:5E:1D:9A:D7:66:3D:DB:A2:4C:2D:DB:E8:9C:6C:E5:2D
X509v3 Authority Key Identifier:
keyid:46:3E:DD:B9:1B:53:8F:83:E8:AE:DF:55:65:C9:60:DF:0B:10:7E:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rj7duRtTj4Port9VZclg3wsQfqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/103fc9-2cbf-40bf-9625-18762500fe25/1/Rj7duRtTj4Port9VZclg3wsQfqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/103fc9-2cbf-40bf-9625-18762500fe25/1/Rj7duRtTj4Port9VZclg3wsQfqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:55:01:64:3e:d0:dc:78:84:49:6a:69:93:82:e0:1b:ef:ff:
68:2b:00:c6:9d:e1:81:d9:2c:77:1b:92:a5:ca:e5:c9:22:0a:
2e:d9:06:b5:63:e7:d7:78:9b:33:ad:1c:1e:d9:aa:ba:11:db:
8a:92:ad:94:48:7d:81:89:77:04:80:1e:19:05:46:45:e0:08:
7c:e7:73:4f:25:b8:2b:2e:34:2d:e6:b2:16:fe:ae:93:5b:32:
13:58:ba:e7:cb:dc:38:aa:bf:a7:f9:79:6a:1e:a2:97:36:ff:
3c:e7:44:67:01:02:3d:6c:33:2d:22:e9:af:01:47:5f:ea:2a:
13:f1:ee:fd:be:13:cc:59:37:1d:82:1f:76:96:7b:57:30:24:
09:8a:d3:10:b9:bf:cc:85:35:a5:f9:7b:aa:15:ab:32:f4:8e:
87:77:4c:c2:8c:4e:7f:80:44:cc:d8:86:ef:5c:2e:76:41:d0:
2b:f1:f8:6b:8e:d1:1d:be:05:ff:bb:5c:1a:2f:fc:a2:74:1a:
b7:28:af:34:ca:b2:c1:08:17:f5:e9:06:88:93:fd:ef:c8:b5:
28:34:3f:c0:32:aa:45:4c:c7:88:6a:25:cb:b6:53:4f:75:6e:
7c:35:94:97:34:b2:28:18:15:71:34:3f:67:51:d4:ac:95:50:
f5:52:66:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:34:09 2025 by rpki-client