Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft
File: a7ptDw-bGff0POtD5zWaPYTpnZk.mft (raw, json)
Hash identifier: Xdv/YQtfFQcoqk8rKNEE46bQvZj76vTTnkRtVd201ss=
Subject key identifier: 23:CF:B2:16:F8:BE:9A:C4:68:34:52:80:E8:41:57:82:48:2B:FF:B4
Authority key identifier: 6B:BA:6D:0F:0F:9B:19:F7:F4:3C:EB:43:E7:35:9A:3D:84:E9:9D:99
Certificate issuer: /CN=6bba6d0f0f9b19f7f43ceb43e7359a3d84e99d99
Certificate serial: 01964D107805E4971F9494E40B97D20DAB80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7ptDw-bGff0POtD5zWaPYTpnZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft
Manifest number: 1502
Signing time: Sat 19 Apr 2025 08:00:46 +0000
Manifest this update: Sat 19 Apr 2025 08:00:46 +0000
Manifest next update: Sun 20 Apr 2025 08:00:46 +0000
Files and hashes: 1: TUphJ-jTdc6RyopsPbQVUooNovI.roa (hash: 5SMLcPW5pd+tHnvqH88hThCDDFketkICiSOllb1LCN8=)
2: a7ptDw-bGff0POtD5zWaPYTpnZk.crl (hash: A12LLWA3T5VL4weJLFrCkck+zPoxVk+6MnB5ozj7pC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/a7ptDw-bGff0POtD5zWaPYTpnZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:10:78:05:e4:97:1f:94:94:e4:0b:97:d2:0d:ab:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bba6d0f0f9b19f7f43ceb43e7359a3d84e99d99
Validity
Not Before: Apr 19 08:00:46 2025 GMT
Not After : Apr 20 08:00:46 2025 GMT
Subject: CN=23cfb216f8be9ac468345280e8415782482bffb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:79:85:be:7c:1b:a5:cd:e2:a3:7c:46:13:e1:
04:0a:ec:9b:be:bb:7f:00:85:cd:b8:d5:25:f1:8f:
f5:02:9a:2c:c4:6d:ec:1d:66:a6:34:ad:45:e8:0f:
41:ef:53:6b:d5:b3:22:f4:d6:50:9e:c1:ac:b1:6f:
bd:b1:54:fd:00:bb:27:fb:0b:c3:fc:bd:75:6f:dc:
2b:2a:a6:b7:a6:f0:40:93:4f:2a:e7:d1:72:49:44:
43:2b:6b:72:39:0c:87:63:2b:b0:61:f3:85:a8:09:
9c:db:ce:4f:50:9d:35:61:19:96:f0:7f:20:50:5c:
fa:0f:d0:1d:ae:0a:b7:96:3e:f2:a6:ff:6f:ae:52:
06:1f:45:b1:2f:67:e4:51:a5:91:af:a9:ec:d3:c2:
b2:91:16:8f:ef:b3:09:7c:11:6a:f4:45:a4:59:b0:
11:9b:68:ea:e8:42:0f:e0:d5:74:af:1a:fa:c0:e7:
57:66:e9:1b:0e:6a:d7:6b:35:c0:c7:89:df:0b:50:
e1:8e:59:39:57:d9:d1:e8:b6:bb:d8:53:9b:1c:33:
0d:e5:aa:8b:31:44:35:1e:2d:a1:76:81:4c:de:93:
bd:4e:65:92:e9:54:a4:60:08:1e:ea:71:b4:44:1f:
bf:5e:07:2f:79:f5:a2:53:d8:29:7d:ba:e9:c9:a0:
65:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:CF:B2:16:F8:BE:9A:C4:68:34:52:80:E8:41:57:82:48:2B:FF:B4
X509v3 Authority Key Identifier:
keyid:6B:BA:6D:0F:0F:9B:19:F7:F4:3C:EB:43:E7:35:9A:3D:84:E9:9D:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7ptDw-bGff0POtD5zWaPYTpnZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:41:11:7a:b1:0d:42:a1:59:92:7c:c4:98:51:e4:20:07:a3:
16:f5:f6:9c:df:fc:14:06:16:f7:5d:c8:4c:92:61:ce:5e:5e:
95:8d:07:e9:7f:ac:7a:9d:be:33:fa:4d:f8:de:46:35:37:c2:
bf:d4:03:e1:95:13:dd:54:de:e3:ae:ae:a7:ec:e6:86:06:25:
a1:58:4e:fa:20:ac:80:91:a1:98:66:3f:05:bd:50:39:a2:e8:
42:0a:a2:c0:b8:34:6a:7b:75:bc:e7:bc:ab:a5:18:a8:e6:9a:
88:10:c3:1a:4c:fb:e6:42:86:de:54:b6:09:90:0f:69:88:00:
e0:dd:d8:51:32:f1:9b:55:1c:f7:14:5b:d9:de:8f:44:0d:f2:
68:02:b0:30:4e:a0:9c:ab:d3:a2:aa:df:73:fc:69:ce:d6:6e:
ac:28:73:30:fd:f1:38:a6:2e:c3:f3:1e:14:7f:e9:47:2f:04:
c8:ed:b0:b4:2c:1d:8a:9f:61:92:18:59:0d:4f:01:3e:0a:d7:
0d:ac:a6:b3:44:36:29:94:b9:3b:b2:32:43:e0:8c:65:6c:4b:
19:1c:f1:6c:6e:07:36:1e:f3:1b:54:d0:68:85:15:89:ab:56:
b7:82:64:1f:34:54:d6:99:ea:76:b4:cb:3c:6b:82:b8:a1:7c:
e2:bb:32:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:18:17 2025 by rpki-client