Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/d2725d-8001-41f1-80e5-a9eef294ac34/1/_pLvNTIb-Pcic0v_nfpj-9DwaQo.mft
File: _pLvNTIb-Pcic0v_nfpj-9DwaQo.mft (raw, json)
Hash identifier: RxcdEbi9UhsZtz8BioGLP7Fx7YdzLeZSIufSNLLztPA=
Subject key identifier: EF:45:07:D7:D4:C0:2B:73:32:7D:9C:75:E5:07:E7:92:2A:84:70:0E
Authority key identifier: FE:92:EF:35:32:1B:F8:F7:22:73:4B:FF:9D:FA:63:FB:D0:F0:69:0A
Certificate issuer: /CN=fe92ef35321bf8f722734bff9dfa63fbd0f0690a
Certificate serial: 0196515BB41E8FD0EB2FBBFF67EF2ABAC18D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_pLvNTIb-Pcic0v_nfpj-9DwaQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/d2725d-8001-41f1-80e5-a9eef294ac34/1/_pLvNTIb-Pcic0v_nfpj-9DwaQo.mft
Manifest number: 0E67
Signing time: Sun 20 Apr 2025 04:01:26 +0000
Manifest this update: Sun 20 Apr 2025 04:01:26 +0000
Manifest next update: Mon 21 Apr 2025 04:01:26 +0000
Files and hashes: 1: FsJZX9GGj2A1me0tekd7HmtKIf4.roa (hash: wa9LmtrA5IFHkOGKHcF70x4E1HktC1RNDhObryrXOsE=)
2: _pLvNTIb-Pcic0v_nfpj-9DwaQo.crl (hash: UdjbiX5yTibewcmiTB2D2oX4u4dJUo0xfBGAPc4ZbPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/d2725d-8001-41f1-80e5-a9eef294ac34/1/_pLvNTIb-Pcic0v_nfpj-9DwaQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/d2725d-8001-41f1-80e5-a9eef294ac34/1/_pLvNTIb-Pcic0v_nfpj-9DwaQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_pLvNTIb-Pcic0v_nfpj-9DwaQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 04:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:5b:b4:1e:8f:d0:eb:2f:bb:ff:67:ef:2a:ba:c1:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe92ef35321bf8f722734bff9dfa63fbd0f0690a
Validity
Not Before: Apr 20 04:01:26 2025 GMT
Not After : Apr 21 04:01:26 2025 GMT
Subject: CN=ef4507d7d4c02b73327d9c75e507e7922a84700e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:2a:41:87:bb:ae:25:b1:e7:ff:51:e6:9c:fd:
6b:04:7f:c3:79:b6:8b:bf:27:3b:60:17:69:67:57:
ac:93:e4:bc:b7:f8:e0:29:8e:e3:82:bd:d8:c3:75:
3c:71:a7:b0:b9:89:b1:ea:c6:8b:e2:1e:eb:13:28:
08:1d:51:2a:ea:9d:95:26:4f:44:db:4f:b2:fa:60:
ac:87:8b:4b:e5:45:d6:40:dd:c7:25:63:92:76:90:
77:d4:d7:2b:90:4b:8f:b8:31:0c:25:f8:1a:5c:04:
d6:f3:74:c7:e1:1f:ae:8c:56:d4:83:12:c7:76:f5:
bd:a3:30:68:99:bd:bc:e5:35:f9:f2:5d:ca:a9:7c:
16:49:f2:cb:a8:1f:df:87:98:b4:b3:8c:9e:f2:49:
87:2a:4d:2f:88:8f:85:4b:78:d0:d2:79:0c:f1:62:
e3:c1:99:df:e9:fb:e1:39:76:77:6e:26:6e:a7:55:
7a:ba:6a:e9:bb:b7:36:ad:27:9b:ff:3c:44:a3:b8:
94:cc:a6:ca:71:19:89:8a:c9:e0:0d:0f:cc:bb:bc:
bc:6c:6e:48:51:b4:7e:91:21:43:c4:04:4b:54:c3:
2c:d8:66:1a:3a:14:87:61:6c:fd:83:18:d5:b5:64:
16:09:86:db:d7:e4:4c:a6:2d:31:42:32:87:aa:57:
6d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:45:07:D7:D4:C0:2B:73:32:7D:9C:75:E5:07:E7:92:2A:84:70:0E
X509v3 Authority Key Identifier:
keyid:FE:92:EF:35:32:1B:F8:F7:22:73:4B:FF:9D:FA:63:FB:D0:F0:69:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_pLvNTIb-Pcic0v_nfpj-9DwaQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d2725d-8001-41f1-80e5-a9eef294ac34/1/_pLvNTIb-Pcic0v_nfpj-9DwaQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d2725d-8001-41f1-80e5-a9eef294ac34/1/_pLvNTIb-Pcic0v_nfpj-9DwaQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:03:58:3c:86:be:d9:f0:16:34:82:26:f3:0b:9d:48:80:ae:
08:e3:e8:8a:ab:fe:c8:f6:44:a8:6e:5c:67:8c:6a:ff:3a:6f:
1b:f5:2f:89:30:4d:42:71:33:5f:ff:84:3a:dd:fb:ea:3f:be:
59:93:b3:c4:7a:e7:4b:e5:f9:51:de:d4:66:4a:3f:e7:4a:bf:
25:14:bf:47:33:56:6a:82:1c:8f:50:66:7a:ca:ec:92:1f:90:
dd:04:ad:f7:98:3d:53:bb:58:9a:15:c6:ae:fe:2b:a9:1c:a7:
04:85:e5:e8:db:fb:30:87:07:62:6f:a1:5b:e8:63:67:62:12:
ac:9f:69:b0:fa:b7:8c:ff:c6:79:82:14:4f:36:c2:16:89:3a:
f9:a8:aa:b8:03:9c:ec:ed:4b:0e:49:01:72:bd:ad:5b:ae:f7:
bc:da:bc:07:2e:1c:81:85:7b:58:ba:d1:fa:0d:2d:08:78:28:
5a:48:85:44:5d:cd:dc:8f:c0:b3:87:de:b8:59:c1:71:31:61:
0f:3b:17:b2:05:fb:c3:72:b6:29:9c:0f:d4:9b:dc:3c:31:07:
d0:a0:80:ea:a3:62:75:4c:93:d6:e8:ab:90:88:25:ea:55:45:
f5:f1:29:e8:59:a6:b4:3b:8a:72:02:ed:6f:ca:5e:74:3b:5c:
19:02:3d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:55:42 2025 by rpki-client