Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.mft
File: sIWATbFT63JMWFV8eTWcRAggVVA.mft (raw, json)
Hash identifier: EUddArH833ecFPHSvw7cUDgJ6MTgKWTzRBZ0FHYChqM=
Subject key identifier: 09:90:6D:10:E6:DA:63:B5:B9:6C:60:A8:DE:FB:9E:E0:28:F3:81:C3
Authority key identifier: B0:85:80:4D:B1:53:EB:72:4C:58:55:7C:79:35:9C:44:08:20:55:50
Certificate issuer: /CN=b085804db153eb724c58557c79359c4408205550
Certificate serial: 0196564A647EF0B21C939D89BD04C10859FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sIWATbFT63JMWFV8eTWcRAggVVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.mft
Manifest number: 03DA
Signing time: Mon 21 Apr 2025 03:00:38 +0000
Manifest this update: Mon 21 Apr 2025 03:00:38 +0000
Manifest next update: Tue 22 Apr 2025 03:00:38 +0000
Files and hashes: 1: 18TNS4gBaAj1nBKZLGQyvBGXDAA.roa (hash: yG6kNp39rMwW08RfUJ3Cw47Eb4R/ZRHq/FbYcN4tnj0=)
2: sIWATbFT63JMWFV8eTWcRAggVVA.crl (hash: Q/T+Mdee9bKhuGL9ZQ1OgygLCET/kWgZYPDgAsjQHCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sIWATbFT63JMWFV8eTWcRAggVVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:4a:64:7e:f0:b2:1c:93:9d:89:bd:04:c1:08:59:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b085804db153eb724c58557c79359c4408205550
Validity
Not Before: Apr 21 03:00:38 2025 GMT
Not After : Apr 22 03:00:38 2025 GMT
Subject: CN=09906d10e6da63b5b96c60a8defb9ee028f381c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0b:53:dc:ce:ab:8e:15:20:38:11:e9:a0:50:
ba:90:15:1d:69:9b:b6:e4:89:55:95:0f:1d:90:45:
32:66:1a:36:a2:88:0a:b6:43:8c:8d:58:35:2a:f9:
c9:f5:ea:f0:86:fc:68:9d:6d:1e:50:8c:16:de:04:
e9:98:1d:94:30:cc:cb:44:c3:31:1a:47:34:5d:a2:
d7:62:98:f7:c8:72:5f:76:f3:33:7a:e5:87:03:55:
28:51:fd:e3:a1:c6:cb:be:f4:1b:8a:12:09:76:dd:
b1:cf:9a:88:20:19:b7:78:76:2a:9b:a7:74:b8:4c:
14:7a:71:60:45:9b:84:d9:3c:f0:e1:7d:45:e8:9b:
c0:c8:3e:93:8a:28:e9:2b:35:85:15:11:9a:d3:b7:
34:f7:00:d6:08:51:0b:5a:42:96:a6:e8:43:48:99:
48:47:3d:37:04:88:e6:d7:89:c6:e4:e3:1e:23:b6:
3a:88:8e:76:c7:bf:ea:20:be:da:93:73:bd:61:6c:
11:08:96:6b:f0:97:34:18:e2:f0:4e:d5:cb:9a:ed:
0d:ba:4b:dd:e1:a6:72:ff:13:e5:dd:fe:bf:fa:0a:
73:41:25:e7:24:61:09:40:9e:92:97:f7:8c:54:a9:
63:93:ac:74:a9:2d:2f:50:69:22:c1:bb:3f:3e:04:
21:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:90:6D:10:E6:DA:63:B5:B9:6C:60:A8:DE:FB:9E:E0:28:F3:81:C3
X509v3 Authority Key Identifier:
keyid:B0:85:80:4D:B1:53:EB:72:4C:58:55:7C:79:35:9C:44:08:20:55:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sIWATbFT63JMWFV8eTWcRAggVVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:44:95:86:bd:7b:0d:c2:91:07:63:c7:1b:b4:33:0e:b9:15:
60:9e:bb:7d:d8:f2:73:8f:fe:5d:3b:51:88:98:3a:33:7f:78:
59:2b:d9:95:aa:58:18:34:1c:af:cb:85:2c:74:09:5e:4d:7d:
eb:8e:d1:4d:69:ee:9f:f0:a8:91:68:5d:9e:42:03:22:76:ed:
bd:72:85:9c:ef:04:ba:20:78:27:f6:65:55:6f:7d:e3:76:bf:
3a:54:2f:ee:b8:3f:2a:a7:8f:cc:64:06:6d:7d:b7:f5:b1:b1:
bf:8f:cb:cf:78:e6:03:7c:e5:ae:ad:e0:8e:49:5c:61:b2:f6:
42:2d:39:ed:c9:ef:8c:bc:35:3f:24:50:46:08:f7:e3:67:52:
6d:1b:12:90:4f:64:7a:cb:01:15:a6:9f:c7:43:91:2d:b2:ce:
1a:82:e4:5d:0f:c2:8c:66:c4:03:70:0d:65:38:26:0a:4f:21:
f7:64:11:2d:00:ce:8c:58:37:0b:bc:2b:54:aa:2f:f2:a6:42:
37:bb:d2:09:65:67:dc:5a:21:f9:0f:84:27:d7:4a:52:54:be:
9a:5c:c4:94:e4:bf:0e:f1:a4:e4:34:a1:e0:19:3b:71:66:9b:
a3:9e:31:99:3b:f5:15:cf:73:a4:5b:7d:19:43:ac:74:03:c7:
41:18:54:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:36:10 2025 by rpki-client