Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.mft
File: rf2QyzV0L55YHoy98OPhI6hJyDA.mft (raw, json)
Hash identifier: kSxAV8ieF94y7S38wuVEyLTKzXSZJF3yA2FBORYIJEk=
Subject key identifier: CF:76:CD:52:D3:86:D0:D3:04:53:A2:4D:C9:28:95:3A:38:B4:87:CD
Authority key identifier: AD:FD:90:CB:35:74:2F:9E:58:1E:8C:BD:F0:E3:E1:23:A8:49:C8:30
Certificate issuer: /CN=adfd90cb35742f9e581e8cbdf0e3e123a849c830
Certificate serial: 0196542571EF47B58287A837628298D20D41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rf2QyzV0L55YHoy98OPhI6hJyDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.mft
Manifest number: 1490
Signing time: Sun 20 Apr 2025 17:01:02 +0000
Manifest this update: Sun 20 Apr 2025 17:01:02 +0000
Manifest next update: Mon 21 Apr 2025 17:01:02 +0000
Files and hashes: 1: csdHd_e7Tx65D2MBS9ZtbLUxU90.roa (hash: fNuNtwuPS3v94+W5VQY9K+dMsKggefc0dwxaWQUAwyY=)
2: rf2QyzV0L55YHoy98OPhI6hJyDA.crl (hash: wT2tzRILDlFBDo41o9dzWyc1gyzgZpaXD6Kbt3taSek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rf2QyzV0L55YHoy98OPhI6hJyDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:25:71:ef:47:b5:82:87:a8:37:62:82:98:d2:0d:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adfd90cb35742f9e581e8cbdf0e3e123a849c830
Validity
Not Before: Apr 20 17:01:02 2025 GMT
Not After : Apr 21 17:01:02 2025 GMT
Subject: CN=cf76cd52d386d0d30453a24dc928953a38b487cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:bf:8a:76:cc:0e:83:93:e9:61:07:6f:35:35:
5d:2f:19:e4:cb:d2:10:de:cc:3f:99:a4:1b:60:c1:
d0:5c:61:70:40:f3:8f:14:5f:9d:25:7d:44:12:c6:
c1:6f:4d:c0:9d:34:85:ec:5b:f2:0e:cb:11:a1:0a:
bf:02:20:6b:78:8c:7f:63:ae:42:36:3a:43:eb:8c:
4a:ca:d3:0b:a1:b2:9b:7a:77:ad:f3:36:cd:f0:6f:
b0:7b:1f:d8:5a:3c:83:ec:28:6a:f6:5a:29:63:a4:
e2:81:b4:f2:7e:71:05:eb:d9:6e:0c:4a:5f:86:c5:
dc:ce:8b:6f:d6:98:61:22:81:f6:8d:9d:0b:6e:02:
9c:a3:e9:4e:97:c7:b9:0b:c9:17:f0:e2:82:19:54:
44:9d:b3:10:d5:ed:51:2b:b1:cd:a2:80:a6:5e:ac:
1a:bc:cd:94:31:80:2b:18:7e:4f:79:25:2a:a6:16:
c4:9b:c6:97:67:36:96:8b:4e:ad:6a:e9:dc:f4:38:
c7:6d:80:bb:2a:36:9d:fd:59:9c:58:98:06:58:71:
ba:3a:08:6b:f4:e0:d8:df:98:de:46:ce:80:99:03:
f9:d4:06:67:c0:9c:21:29:bd:ee:94:9c:f0:c8:c3:
ec:c2:57:ef:7a:ad:18:be:92:25:de:7e:83:61:27:
2b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:76:CD:52:D3:86:D0:D3:04:53:A2:4D:C9:28:95:3A:38:B4:87:CD
X509v3 Authority Key Identifier:
keyid:AD:FD:90:CB:35:74:2F:9E:58:1E:8C:BD:F0:E3:E1:23:A8:49:C8:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rf2QyzV0L55YHoy98OPhI6hJyDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:a6:eb:43:76:1b:fc:7a:3f:30:fe:0a:30:f6:a6:3a:d5:04:
b7:e4:7e:c7:8f:e5:5c:17:b1:a4:fd:72:5e:7b:09:ed:9d:f8:
86:ab:67:b8:3e:43:38:3f:80:3a:75:3d:48:7c:66:da:de:da:
82:93:05:ce:02:80:07:2f:d4:f0:d9:e0:2f:9a:81:09:dc:9e:
6e:2b:17:ca:e7:28:2a:c9:49:6f:34:7e:72:c4:8c:41:a2:3d:
96:94:cd:fc:fa:25:87:63:54:8e:38:62:f0:aa:70:72:61:76:
98:fd:b6:4c:9d:b7:5e:da:00:e9:01:4f:b7:5a:39:35:42:ff:
c9:21:d4:32:f1:d9:14:32:71:1c:a5:60:02:3a:46:5d:03:87:
47:ae:c7:ff:fb:ee:e0:d7:ea:74:e9:ce:ed:18:b6:3c:38:7e:
a2:35:a6:c0:99:37:1b:ba:27:14:4a:2a:23:a5:87:f5:78:8e:
d9:a1:83:97:f6:97:ab:59:9a:08:c8:9c:e5:96:d5:ca:96:36:
62:eb:5f:49:ac:ad:b8:ce:f1:d1:af:e3:50:1b:98:d3:f3:a2:
3c:01:d9:ea:e9:d3:c5:cf:41:19:73:58:95:a2:b9:7c:64:3b:
82:e4:89:18:8a:0f:d3:70:a3:5f:ed:60:a2:f4:7a:63:9e:d9:
ee:be:bd:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:27:52 2025 by rpki-client