Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.mft
File: 1-ETh6vqtPLCR8g7lvxwEgkh8MG4.mft (raw, json)
Hash identifier: 6SKPxheBiqlbtLLSHjJuVInaDTFlFiOIymQWNgJk3Fw=
Subject key identifier: 71:A2:B7:D2:54:49:1A:A9:34:96:F1:F2:12:8C:16:00:DB:6C:51:DD
Authority key identifier: F8:44:E1:EA:FA:AD:3C:B0:91:F2:0E:E5:BF:1C:04:82:48:7C:30:6E
Certificate issuer: /CN=f844e1eafaad3cb091f20ee5bf1c0482487c306e
Certificate serial: 019657CB925C5507AB6816D3BCBD6C88C258
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.mft
Manifest number: 0D97
Signing time: Mon 21 Apr 2025 10:01:21 +0000
Manifest this update: Mon 21 Apr 2025 10:01:21 +0000
Manifest next update: Tue 22 Apr 2025 10:01:21 +0000
Files and hashes: 1: 1-ETh6vqtPLCR8g7lvxwEgkh8MG4.crl (hash: 3wQ3zeuRU5gw6sx7Uu1BDgAYMZU2HuFVFjkxo+FT1fY=)
2: 3H8Iz5hHhMEKn8xskQH_PIfxJ2M.roa (hash: kRuaNE5DN0ER4h4yEzfsi+B5+sjpCYHLxCQH23V/CIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:cb:92:5c:55:07:ab:68:16:d3:bc:bd:6c:88:c2:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f844e1eafaad3cb091f20ee5bf1c0482487c306e
Validity
Not Before: Apr 21 10:01:21 2025 GMT
Not After : Apr 22 10:01:21 2025 GMT
Subject: CN=71a2b7d254491aa93496f1f2128c1600db6c51dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:15:65:8b:96:8c:7b:9a:95:ce:2c:be:2f:a9:
7c:bf:5e:b5:9e:70:d7:01:0e:ca:3e:a2:17:e4:14:
42:99:18:d4:11:ba:44:d3:2e:0c:87:2b:ca:ad:e4:
e8:b0:e2:c9:44:7c:ad:11:07:ad:61:06:79:e3:88:
be:2d:4e:9d:25:26:3f:ad:eb:79:6e:65:cd:ca:a0:
63:86:3a:a0:a1:9f:23:6a:b9:df:0a:4a:eb:7f:05:
5a:11:2c:bd:00:05:61:30:7e:b1:1f:5f:33:91:24:
9a:2b:a5:1e:f0:91:74:a2:58:f8:41:4f:c1:21:b9:
02:5e:1b:a6:b7:e7:8f:04:5d:10:bc:0e:c3:91:15:
a0:b0:5e:69:82:a4:60:6f:b2:2c:b7:ea:6a:73:ac:
36:a2:26:21:fe:8b:45:5a:2a:35:06:11:9a:3d:1f:
cc:bb:1d:36:3d:d2:fc:11:10:5e:d9:d6:d5:d9:68:
5e:5a:ae:cf:b2:4b:d3:25:1f:0a:3d:dc:22:49:65:
b0:de:e5:4e:27:c2:aa:79:9d:74:42:48:ba:6e:3d:
6f:a6:c5:80:72:bc:47:27:47:4e:8e:46:fb:e8:cf:
0e:6c:51:7f:4e:16:fd:b5:96:f0:d9:00:63:b6:e3:
ae:b2:8c:d5:3a:40:fa:0d:34:6e:d8:d8:35:a2:ab:
1a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:A2:B7:D2:54:49:1A:A9:34:96:F1:F2:12:8C:16:00:DB:6C:51:DD
X509v3 Authority Key Identifier:
keyid:F8:44:E1:EA:FA:AD:3C:B0:91:F2:0E:E5:BF:1C:04:82:48:7C:30:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:c2:bc:81:da:61:a4:a1:94:69:1a:fe:cf:02:6a:28:cf:ef:
2d:85:b8:dd:d2:76:ad:cd:ef:72:ae:9c:e6:92:0c:a5:79:85:
67:e9:aa:46:a3:6a:56:c8:d3:21:42:c0:fe:ba:8a:77:ef:80:
1f:f9:79:ae:fa:0a:1f:aa:8e:96:2b:3f:c0:7e:09:a9:3f:22:
ee:7e:7d:e3:b9:56:6a:3d:f2:8e:f6:04:c5:1d:e3:69:d8:bc:
82:28:2a:bf:ea:31:a8:55:19:10:43:f3:76:84:f9:7d:18:a6:
e1:b8:3e:3c:0f:26:af:5b:06:24:2f:96:b8:35:fd:3a:64:83:
3b:e5:f3:b3:83:7c:33:0c:b9:94:3b:0c:58:c4:97:72:04:27:
13:ae:49:86:ae:84:b8:84:92:f7:0b:37:30:e6:60:4f:54:ee:
fe:1d:e7:1d:97:74:ac:d1:47:79:2b:72:48:e3:ed:ba:8b:e4:
ab:07:4f:02:93:21:56:53:da:42:90:e7:2a:fe:d5:33:c0:bf:
ed:80:99:de:a2:65:87:7f:25:af:d6:5b:2f:ce:05:d0:98:7e:
1b:52:cc:bc:dc:fc:d6:2d:46:75:08:dd:c5:3a:21:e1:b2:47:
8f:5c:46:8c:a0:47:d1:e5:28:d2:5b:34:8a:12:41:4e:1c:fb:
e8:ec:ec:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:23:59 2025 by rpki-client