Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.mft
File: RxQ91mdp2xg7i9ebkPyD2V1uSPs.mft (raw, json)
Hash identifier: oBp01MwkGnBuv75FrX5NKXcSqw9RS/eoOcILNp6FCPU=
Subject key identifier: 0D:61:72:52:2D:74:11:14:64:92:EC:58:B4:A4:1F:BB:6E:36:36:D7
Authority key identifier: 47:14:3D:D6:67:69:DB:18:3B:8B:D7:9B:90:FC:83:D9:5D:6E:48:FB
Certificate issuer: /CN=47143dd66769db183b8bd79b90fc83d95d6e48fb
Certificate serial: 0196561380AB7FA1D42A42901F90D6718EAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RxQ91mdp2xg7i9ebkPyD2V1uSPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.mft
Manifest number: 31
Signing time: Mon 21 Apr 2025 02:00:40 +0000
Manifest this update: Mon 21 Apr 2025 02:00:40 +0000
Manifest next update: Tue 22 Apr 2025 02:00:40 +0000
Files and hashes: 1: 6XJE8rlYoWtrh2ad3Kvm7Q_y5CQ.roa (hash: 7BUcSs/WeuS6GOcIo66oyt8ibf2WB0YlmBoooxU7KVI=)
2: RxQ91mdp2xg7i9ebkPyD2V1uSPs.crl (hash: hwlhfKy1wM0C2VeuxqdCAcJhXG3uhHj81/UglVlTu20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RxQ91mdp2xg7i9ebkPyD2V1uSPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:80:ab:7f:a1:d4:2a:42:90:1f:90:d6:71:8e:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47143dd66769db183b8bd79b90fc83d95d6e48fb
Validity
Not Before: Apr 21 02:00:40 2025 GMT
Not After : Apr 22 02:00:40 2025 GMT
Subject: CN=0d6172522d7411146492ec58b4a41fbb6e3636d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f9:c4:32:dd:2a:f1:4a:a5:7b:ec:b9:03:97:
c3:b0:1d:50:b8:b6:9d:6f:3a:8f:8a:2e:ca:04:cb:
54:4c:42:4f:a1:6a:64:2c:f2:46:c2:b7:be:bd:5f:
c8:bf:e6:e5:3f:d1:14:5b:33:fb:55:11:7e:c5:30:
de:ce:4e:b1:b6:d0:e4:73:43:65:88:1e:67:df:94:
7d:66:03:fa:9d:e9:cd:f1:f9:43:1e:68:fe:16:3f:
0f:a0:d1:b2:db:93:b8:6a:de:a9:d7:82:53:af:8f:
87:4a:a2:0b:10:59:22:12:70:d6:51:61:aa:08:79:
04:46:7a:f7:c7:86:ee:f3:8f:c2:35:87:09:8e:60:
8f:8d:e1:bf:05:66:6f:e7:29:45:45:3c:2b:8f:44:
73:4a:39:99:2b:6f:75:9f:35:25:bb:05:6e:86:42:
34:b8:19:20:56:85:35:3b:ba:7c:35:82:e2:2c:7d:
bf:dc:d9:1b:ad:a2:8b:dd:f9:72:b6:c9:2f:fe:ea:
c1:0c:d2:0f:b1:c1:d8:78:78:0a:78:cd:74:f7:40:
35:e3:f3:1a:8a:fa:32:e4:57:7c:1e:01:cd:36:a8:
a1:b0:18:32:77:6e:9c:27:65:41:7f:13:ae:7a:80:
dc:24:e9:10:0d:03:0f:4a:19:34:78:5f:ea:6d:24:
09:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:61:72:52:2D:74:11:14:64:92:EC:58:B4:A4:1F:BB:6E:36:36:D7
X509v3 Authority Key Identifier:
keyid:47:14:3D:D6:67:69:DB:18:3B:8B:D7:9B:90:FC:83:D9:5D:6E:48:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RxQ91mdp2xg7i9ebkPyD2V1uSPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:fc:d6:ef:1a:21:54:56:e6:bd:9c:f5:2c:ca:e2:bf:26:44:
5a:7e:0b:36:63:4b:b6:c4:8b:8a:57:93:ce:17:20:08:e4:03:
0e:08:ac:58:d8:d6:03:90:15:7b:d3:be:cd:06:23:2a:7b:47:
11:a7:f1:35:95:c9:a9:f0:95:62:52:d8:cf:c9:56:ef:3b:08:
ae:64:51:a6:9f:d0:15:9c:ff:46:d5:0c:46:93:4f:24:c4:cc:
02:b3:c8:af:3f:62:eb:bd:7f:ff:49:3c:96:54:c7:28:5c:50:
8f:14:04:2c:73:e4:3b:80:33:3f:a9:21:22:ab:4d:74:bc:48:
22:23:fe:53:9b:d2:89:52:15:7e:27:50:ef:68:61:5e:49:7e:
24:4d:96:02:04:2c:a8:11:53:4a:ab:8e:65:25:42:63:58:24:
31:29:95:88:0e:88:1c:9c:9a:3d:f5:2f:28:34:af:dc:1f:1d:
80:39:e4:85:db:c5:d1:34:e2:c4:20:9e:97:47:02:ec:60:f5:
8c:f2:e1:71:07:ea:e9:15:c2:75:be:61:41:a1:89:fc:a7:89:
84:06:fd:7e:83:82:57:b7:fe:34:32:29:65:c8:c9:f8:9f:f7:
5f:a8:1f:e4:66:7c:59:58:e3:e3:e9:e1:b0:88:80:9e:54:65:
0f:28:e7:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:42:14 2025 by rpki-client