Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.mft
File: rZr63kGDroAEjWuEgY7sRvaA-iY.mft (raw, json)
Hash identifier: y3jfZMdopa6be0wDk4GO5o3dyK9GpOypXtzYiW5TPf8=
Subject key identifier: 99:FA:B5:F7:87:02:72:8B:5C:0D:93:90:B4:69:23:EF:55:D9:03:23
Authority key identifier: AD:9A:FA:DE:41:83:AE:80:04:8D:6B:84:81:8E:EC:46:F6:80:FA:26
Certificate issuer: /CN=ad9afade4183ae80048d6b84818eec46f680fa26
Certificate serial: 019640309ADAD49348D0545C0DF00B50588D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rZr63kGDroAEjWuEgY7sRvaA-iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.mft
Manifest number: 1326
Signing time: Wed 16 Apr 2025 20:00:49 +0000
Manifest this update: Wed 16 Apr 2025 20:00:49 +0000
Manifest next update: Thu 17 Apr 2025 20:00:49 +0000
Files and hashes: 1: dHcu1Xe1bMDTNim9SJl30JSk4hI.roa (hash: qRzLbHq22DmrTaMRCm+OCQCo4sWL5SJUeqY8R0TqngI=)
2: g1AtdX4-A4stQRdXTWV50haWr_U.roa (hash: SfjbeTWsFCpHADmiaD0ANERB3vzQ++Aj8Swnoj6lsUI=)
3: rZr63kGDroAEjWuEgY7sRvaA-iY.crl (hash: UUTbMdYIjnd+3/qgo8+S0Z7EBy/Q7WzxAnaQpXe8OV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rZr63kGDroAEjWuEgY7sRvaA-iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:40:30:9a:da:d4:93:48:d0:54:5c:0d:f0:0b:50:58:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad9afade4183ae80048d6b84818eec46f680fa26
Validity
Not Before: Apr 16 20:00:49 2025 GMT
Not After : Apr 17 20:00:49 2025 GMT
Subject: CN=99fab5f78702728b5c0d9390b46923ef55d90323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4a:43:99:ad:2c:08:cb:f0:5c:28:45:73:51:
55:2b:5b:4d:de:5e:1b:46:03:13:1f:eb:ff:24:09:
59:aa:b9:db:4d:72:fb:ea:38:2a:04:3a:4e:a1:1e:
c8:7c:b6:25:07:ae:d0:4c:08:77:63:4b:7b:a4:ac:
9e:be:89:8f:08:7b:bb:53:c2:c2:e5:2a:70:75:35:
b9:d0:85:8b:e5:74:59:d5:57:b5:7d:ac:41:b3:b2:
f6:df:8a:72:62:cf:1b:3b:91:f6:e4:a2:30:a0:2e:
d8:84:4d:c5:e8:da:ba:1c:fa:8d:7a:27:af:0f:01:
7f:0e:12:bb:c5:56:03:78:a2:65:88:3b:1b:5e:0a:
4a:52:20:d4:18:ea:79:14:2a:55:cf:10:13:b8:de:
c2:a2:20:c1:b8:bf:2f:dd:69:41:a8:08:b9:6e:28:
ec:cd:68:52:d9:30:c0:24:92:07:a8:7f:36:77:bd:
9e:93:8e:fd:61:0e:8d:45:0a:c4:32:49:ee:6b:57:
55:0b:fa:cc:23:3a:b4:de:1f:5c:1d:5a:06:2c:ae:
bb:07:d5:86:f6:33:04:d5:d5:96:73:f5:e5:d5:39:
a5:72:63:44:05:a8:85:f1:47:1f:0b:df:01:eb:f8:
3e:bf:fc:10:51:41:d0:2c:eb:d0:e1:95:c5:bf:82:
4d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:FA:B5:F7:87:02:72:8B:5C:0D:93:90:B4:69:23:EF:55:D9:03:23
X509v3 Authority Key Identifier:
keyid:AD:9A:FA:DE:41:83:AE:80:04:8D:6B:84:81:8E:EC:46:F6:80:FA:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZr63kGDroAEjWuEgY7sRvaA-iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:44:ad:1e:4e:71:c5:9f:1c:a4:05:61:aa:ef:ff:c1:ee:20:
8c:dd:ac:8e:70:98:76:c7:9c:1c:35:17:c9:16:c3:10:e9:fc:
8f:d3:59:ff:39:34:eb:7c:0a:a8:8e:85:fd:3c:e8:01:d9:73:
da:2b:0b:b6:6a:93:12:7c:ad:af:c0:f8:0c:eb:d3:d6:63:04:
48:d4:b2:95:46:34:51:0d:cd:81:91:2f:54:17:0a:72:aa:e2:
36:18:0d:f9:86:47:82:cd:11:cf:0f:8b:fb:5f:3c:30:95:33:
05:e6:98:a3:6a:db:ac:62:e3:a6:21:2b:45:b4:39:d8:2f:b6:
52:26:dc:31:65:e9:ab:76:b7:58:59:f9:41:66:e0:dd:ba:59:
ff:c8:d8:d7:c2:1e:e9:ab:73:b0:d6:99:22:98:30:12:41:12:
b2:6f:1d:29:97:ea:7b:99:a6:ab:06:d1:2c:f5:6b:05:63:28:
8a:6f:2b:49:a6:4d:91:a5:59:3e:c8:9e:61:d2:4b:75:34:76:
b0:a1:dc:4e:5d:e9:96:98:64:d0:e6:72:0a:c0:54:da:9a:83:
d2:8f:f4:61:66:a2:e8:ad:75:57:05:5f:0d:38:b9:0b:32:ed:
fb:7c:3b:e0:25:29:4f:72:05:7b:a0:b4:54:cf:44:ee:b9:71:
50:0a:38:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 23:24:47 2025 by rpki-client