Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.mft
File: ar0nEML89VGzH9fMxg3x9rtKksQ.mft (raw, json)
Hash identifier: WkoraV+UOJn9D49VN4DyzW1pBgVOIUgiPrEUBAt+hO4=
Subject key identifier: 62:65:13:32:BB:27:C5:84:40:21:59:83:18:BF:37:53:C3:13:81:DC
Authority key identifier: 6A:BD:27:10:C2:FC:F5:51:B3:1F:D7:CC:C6:0D:F1:F6:BB:4A:92:C4
Certificate issuer: /CN=6abd2710c2fcf551b31fd7ccc60df1f6bb4a92c4
Certificate serial: 019655A568D6165A3B745C6705506DA5F450
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ar0nEML89VGzH9fMxg3x9rtKksQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.mft
Manifest number: 0B2A
Signing time: Mon 21 Apr 2025 00:00:25 +0000
Manifest this update: Mon 21 Apr 2025 00:00:25 +0000
Manifest next update: Tue 22 Apr 2025 00:00:25 +0000
Files and hashes: 1: ar0nEML89VGzH9fMxg3x9rtKksQ.crl (hash: wPGrAAD66MNrEvkEq116QWohzfmfwRCkVtL1FKAoEIo=)
2: jUcUyasdB1F_jJ1Iu4Jesu2bOp8.roa (hash: BbNkNKRJ/r5Ixy3RnUBfFtFAmvmPYuPFYMJIKOu9VwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ar0nEML89VGzH9fMxg3x9rtKksQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a5:68:d6:16:5a:3b:74:5c:67:05:50:6d:a5:f4:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6abd2710c2fcf551b31fd7ccc60df1f6bb4a92c4
Validity
Not Before: Apr 21 00:00:25 2025 GMT
Not After : Apr 22 00:00:25 2025 GMT
Subject: CN=62651332bb27c5844021598318bf3753c31381dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e4:db:4d:e1:76:47:e4:2f:68:91:82:c3:0f:
c8:16:a6:f5:12:94:db:b1:d0:a8:5a:c8:3d:d8:3d:
ac:68:87:92:83:17:46:73:4a:6a:d5:ef:51:91:9a:
5b:ab:13:2e:d6:be:53:6d:70:5c:a8:df:a2:f1:9b:
8a:07:1f:51:28:f6:db:8d:8a:91:1d:38:b1:73:b1:
04:d3:71:9c:94:52:05:e4:e5:63:fe:d6:b9:f0:28:
39:b4:4c:dc:8a:f0:8a:50:a7:f2:ed:14:d4:ce:81:
ea:a4:7d:aa:22:4c:a8:dd:eb:f8:90:2a:ac:9f:e2:
f0:31:5f:bd:9b:b3:ad:c3:69:ae:c1:70:8c:19:fa:
15:c5:76:67:98:c7:2e:3b:4a:2c:3b:b9:a6:46:d2:
b2:89:10:ca:a0:61:4d:35:b9:a9:e4:a8:6b:be:71:
e4:84:35:f2:88:ca:17:75:d2:a4:d3:88:2c:55:3b:
af:d2:22:de:1a:93:5e:0a:1d:be:e6:1b:02:82:d9:
44:06:4b:d8:b2:0a:e5:96:bc:b6:68:f8:3e:bb:38:
48:4f:11:0e:14:ce:66:a7:81:b6:9a:c8:c8:6e:f7:
db:f3:22:e7:89:04:d4:ed:08:b4:93:2c:49:72:10:
2f:44:98:a1:53:0b:ff:20:07:04:f6:78:d3:91:d7:
83:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:65:13:32:BB:27:C5:84:40:21:59:83:18:BF:37:53:C3:13:81:DC
X509v3 Authority Key Identifier:
keyid:6A:BD:27:10:C2:FC:F5:51:B3:1F:D7:CC:C6:0D:F1:F6:BB:4A:92:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ar0nEML89VGzH9fMxg3x9rtKksQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:39:cb:5b:22:b7:f3:95:46:b0:f4:17:77:f1:6b:f3:6e:6b:
b7:45:9d:ee:b4:29:e7:82:15:e7:a1:78:05:09:c8:9b:7a:71:
13:82:49:99:b6:97:93:99:e2:62:49:60:28:80:37:06:32:35:
82:37:00:f7:65:6c:dc:cb:b6:60:bd:88:59:20:bf:09:a2:47:
45:9c:98:28:57:a6:dd:2d:eb:1c:b2:ca:6d:df:bc:11:91:79:
7c:00:2b:18:7c:f1:9a:55:7e:b6:04:c3:10:c3:78:5d:0c:7d:
8a:43:b1:be:e1:d1:c1:f0:ed:c3:26:59:f1:61:f3:e0:d6:5c:
0a:22:be:c2:e0:d0:e3:10:d9:6b:21:d3:86:aa:f7:66:c8:91:
08:a6:99:4b:9f:02:96:42:67:46:ec:1d:91:a4:f9:ae:e6:3f:
11:6c:6c:6a:ce:08:aa:f4:6b:d5:a2:8c:5e:f0:c3:7f:17:10:
a8:79:a3:12:78:3c:0d:3d:8f:b7:b5:f9:fd:40:10:a3:4e:c3:
ff:a5:3a:88:46:d2:60:f6:e2:b9:ae:68:d2:9f:4b:2c:1f:41:
ad:33:5d:c9:1a:38:93:f0:62:67:71:06:8e:ce:94:85:3a:9e:
e6:c3:bb:57:f0:f6:2a:17:9c:cf:b6:72:e8:5d:4e:b4:b6:a2:
a6:4f:28:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:47:02 2025 by rpki-client