Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.mft
File: dAId0eJ80ed44tu9YKoYSxY7zv4.mft (raw, json)
Hash identifier: piubZUHKTrNzt64SsBL6CxhSHZpEAarsnX8t6oBIw/U=
Subject key identifier: 7E:8C:42:C5:5C:29:5A:31:D5:87:83:43:00:CA:24:BD:52:F3:96:54
Authority key identifier: 74:02:1D:D1:E2:7C:D1:E7:78:E2:DB:BD:60:AA:18:4B:16:3B:CE:FE
Certificate issuer: /CN=74021dd1e27cd1e778e2dbbd60aa184b163bcefe
Certificate serial: 01962B97DE555E0F648353C7F89B31A999C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dAId0eJ80ed44tu9YKoYSxY7zv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.mft
Manifest number: 3E
Signing time: Sat 12 Apr 2025 20:01:35 +0000
Manifest this update: Sat 12 Apr 2025 20:01:35 +0000
Manifest next update: Sun 13 Apr 2025 20:01:35 +0000
Files and hashes: 1: SFufe6GxPr18jUulsobsVcJNabA.roa (hash: BS7brnhU1ziQ1RkRsO80taFEBA/xtbs+mzY1lj67wlg=)
2: dAId0eJ80ed44tu9YKoYSxY7zv4.crl (hash: eVqGgSG0PVO/Ed0DqnQ+pfQPIIx7NOoyJuOHt1274T4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dAId0eJ80ed44tu9YKoYSxY7zv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2b:97:de:55:5e:0f:64:83:53:c7:f8:9b:31:a9:99:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74021dd1e27cd1e778e2dbbd60aa184b163bcefe
Validity
Not Before: Apr 12 20:01:35 2025 GMT
Not After : Apr 13 20:01:35 2025 GMT
Subject: CN=7e8c42c55c295a31d587834300ca24bd52f39654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:5a:45:ee:ac:d9:bb:24:c7:16:38:7d:16:0b:
6b:ad:a8:bb:ad:0d:8d:57:30:bb:17:9b:bb:b2:ae:
2a:b8:0f:8f:bb:26:80:c2:a9:4f:a7:84:bb:39:4e:
85:63:74:44:f2:ee:22:f0:9d:16:a8:f4:59:11:ac:
6b:12:29:b9:6b:82:50:6f:9c:7b:c7:27:24:6a:c8:
29:01:65:bf:84:10:39:04:66:a6:71:27:f3:12:8d:
85:6f:68:4b:9d:97:b3:fa:eb:c0:3a:b5:44:0a:86:
ed:61:4b:05:19:36:8f:b6:d2:32:27:68:24:6d:30:
d5:fb:7f:39:d6:b2:ce:2f:c3:ca:fd:70:12:e4:41:
54:65:2f:63:2f:15:e5:b1:eb:7e:82:84:ac:72:39:
4a:18:0b:fe:eb:07:b3:f4:e6:ed:f7:75:5c:23:9d:
bc:e5:c2:d3:01:c9:13:55:73:5c:9e:f7:cf:70:35:
ab:48:c8:ee:cd:43:4b:b6:d5:f0:5f:e1:85:0e:13:
51:46:6d:87:e3:eb:fd:28:a7:d4:b3:79:98:8a:40:
3f:5f:f2:48:90:a1:22:17:d8:ed:16:9f:b2:0d:4e:
6d:f1:31:50:29:99:b4:b3:14:37:5f:62:d9:25:79:
ce:59:65:0b:61:d0:07:c4:53:d1:a4:02:17:cb:db:
f1:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:8C:42:C5:5C:29:5A:31:D5:87:83:43:00:CA:24:BD:52:F3:96:54
X509v3 Authority Key Identifier:
keyid:74:02:1D:D1:E2:7C:D1:E7:78:E2:DB:BD:60:AA:18:4B:16:3B:CE:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dAId0eJ80ed44tu9YKoYSxY7zv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:8f:87:53:16:44:d5:81:b0:32:7e:a7:da:5e:41:27:a9:44:
aa:a0:57:8d:cc:58:37:33:8c:8c:c6:08:9f:77:0e:bf:42:96:
5a:d6:75:19:76:f0:ec:fa:52:da:31:c5:ee:90:04:ee:14:39:
2c:3c:8e:01:d1:9a:00:6b:72:5a:4b:8a:d1:0f:6a:05:15:15:
8e:89:2a:bb:be:3d:45:19:51:74:ba:30:14:11:9a:61:63:38:
da:04:04:a4:a9:4c:4e:e2:06:7f:36:ce:4b:57:65:a5:01:2a:
84:fa:6e:05:91:ff:16:cc:7d:42:10:6b:82:51:e5:19:1d:93:
16:6f:2c:b3:a4:08:29:0a:e8:13:04:90:9b:ed:5d:42:f7:a1:
8b:6c:18:c0:70:2c:f0:31:e5:10:a7:e9:bb:d8:16:b7:b2:20:
b6:cd:8d:43:8c:74:91:c1:51:86:2d:36:52:78:35:ec:f3:82:
92:39:fd:5c:e5:bb:5b:36:10:31:b4:96:58:7c:87:c8:aa:1e:
85:c1:4c:89:e8:22:91:23:9b:66:e9:62:a4:f6:b0:04:e0:1c:
57:f6:df:a9:8f:62:bc:fc:e6:26:25:b9:f8:94:9c:e7:19:3d:
60:6a:98:44:43:2c:4f:83:bd:e2:2b:31:e6:ce:4c:ad:a7:1b:
dd:01:a9:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:48:32 2025 by rpki-client