Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/bd7820-5c1c-4884-9ab8-c5ab97dba898/1/k680jsWk5l4MsTeCGuahOe1_rAA.mft
File: k680jsWk5l4MsTeCGuahOe1_rAA.mft (raw, json)
Hash identifier: gw34SRXQKIWbL+ACR3lBRjJQLLdud42Zt467+gl+wDY=
Subject key identifier: A7:7D:49:8C:2E:C4:4B:04:A7:7E:D1:F5:8E:FC:8D:2E:20:CE:83:6F
Authority key identifier: 93:AF:34:8E:C5:A4:E6:5E:0C:B1:37:82:1A:E6:A1:39:ED:7F:AC:00
Certificate issuer: /CN=93af348ec5a4e65e0cb137821ae6a139ed7fac00
Certificate serial: 01964CD96C953A06C5B7F1C0C4AA20F2088F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k680jsWk5l4MsTeCGuahOe1_rAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7820-5c1c-4884-9ab8-c5ab97dba898/1/k680jsWk5l4MsTeCGuahOe1_rAA.mft
Manifest number: 148A
Signing time: Sat 19 Apr 2025 07:00:39 +0000
Manifest this update: Sat 19 Apr 2025 07:00:39 +0000
Manifest next update: Sun 20 Apr 2025 07:00:39 +0000
Files and hashes: 1: gKy-M4ArOB2uxqprqRJ6fbGyEC8.roa (hash: MC8Gw1INJPJBRmJZki75GCuCmqozYCvUY/UxQ+rSFh0=)
2: k680jsWk5l4MsTeCGuahOe1_rAA.crl (hash: jN7OSpj7ImhRgH83swG6UqQAcribbwNdsb6KD+LBM4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7820-5c1c-4884-9ab8-c5ab97dba898/1/k680jsWk5l4MsTeCGuahOe1_rAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7820-5c1c-4884-9ab8-c5ab97dba898/1/k680jsWk5l4MsTeCGuahOe1_rAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/k680jsWk5l4MsTeCGuahOe1_rAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:d9:6c:95:3a:06:c5:b7:f1:c0:c4:aa:20:f2:08:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93af348ec5a4e65e0cb137821ae6a139ed7fac00
Validity
Not Before: Apr 19 07:00:39 2025 GMT
Not After : Apr 20 07:00:39 2025 GMT
Subject: CN=a77d498c2ec44b04a77ed1f58efc8d2e20ce836f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:84:69:c6:41:17:fe:27:ed:f8:4a:ae:06:ec:
30:9b:97:03:e5:a6:12:42:19:f9:6f:f5:03:bb:75:
f1:f5:55:3a:b4:89:a5:1a:eb:22:c6:a2:cd:86:1b:
ef:b0:81:e1:e4:82:20:c4:23:fb:da:ad:b0:91:c9:
f2:58:ef:f6:e2:06:ed:4c:d6:ef:97:ea:f8:b1:a0:
1e:5e:f6:55:aa:be:72:c0:a8:22:c0:7a:bb:f3:b2:
0d:3d:72:d4:88:c6:65:a9:51:4b:4d:72:9f:4e:af:
d5:1f:c7:57:5d:49:ec:7b:26:a5:8e:73:d9:ec:ef:
32:60:51:3a:83:16:63:a9:70:ee:d9:c4:4f:bc:18:
86:fb:f0:45:2f:2f:69:89:85:9e:25:89:1c:e5:00:
c7:27:98:bf:cd:46:26:91:b1:79:9d:39:09:f2:aa:
48:0c:cc:11:13:10:84:65:17:46:d7:f2:b3:e7:fc:
bb:a4:3b:d9:78:db:45:89:8f:44:ac:2d:c5:0a:68:
10:08:d0:67:0a:fb:5e:59:76:60:a2:39:14:6c:91:
03:e6:8c:c7:5f:5e:3a:af:02:55:a3:f2:34:5a:c8:
97:58:66:35:ed:c5:69:5e:8d:c6:08:05:f5:8a:70:
b3:54:ba:5a:44:20:da:d3:de:3f:79:53:77:5f:3c:
24:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:7D:49:8C:2E:C4:4B:04:A7:7E:D1:F5:8E:FC:8D:2E:20:CE:83:6F
X509v3 Authority Key Identifier:
keyid:93:AF:34:8E:C5:A4:E6:5E:0C:B1:37:82:1A:E6:A1:39:ED:7F:AC:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k680jsWk5l4MsTeCGuahOe1_rAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7820-5c1c-4884-9ab8-c5ab97dba898/1/k680jsWk5l4MsTeCGuahOe1_rAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7820-5c1c-4884-9ab8-c5ab97dba898/1/k680jsWk5l4MsTeCGuahOe1_rAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:79:d6:8f:a6:f1:ea:bd:82:3c:6e:09:9f:d2:ee:7f:cf:ca:
5c:b0:ba:4b:c9:ce:7d:fe:81:24:51:8c:a8:5d:97:fd:df:93:
19:ba:d3:0e:02:0f:65:05:77:fc:88:e9:b6:4a:40:3e:de:07:
36:6b:23:98:bc:50:ef:dd:df:e2:f5:0f:20:f0:9f:96:4f:f9:
fc:65:0d:58:08:3b:eb:df:fc:82:1c:e2:86:c8:98:76:c8:d1:
b0:9d:47:96:ca:1c:2f:4a:1a:58:50:15:08:25:b1:7f:3e:50:
c5:b6:26:4e:bc:1d:bb:bd:cf:32:4d:75:06:9b:0e:91:01:44:
ac:83:23:dc:1d:b9:5f:fe:da:9a:85:9e:7e:d7:7d:ad:13:77:
f9:f3:66:cc:76:dc:c0:01:e2:d1:47:fe:cb:d6:36:cd:d6:d9:
14:9c:75:62:1e:4d:04:fb:c9:fb:a9:33:60:e5:b3:38:16:5f:
e8:58:e5:e2:97:15:69:7b:85:1c:49:01:5a:56:68:b3:04:22:
96:3d:34:21:f5:c9:eb:97:90:24:85:74:36:2b:2c:99:95:d2:
d9:f8:97:2a:86:78:31:b4:ef:bc:55:39:f5:93:1c:12:12:a7:
aa:4c:f3:98:de:e0:f4:3b:00:38:92:91:23:97:8b:46:3b:9a:
96:4a:0c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:02:49 2025 by rpki-client