Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/c57b75-10a7-4723-94ea-e857477a7008/1/RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.mft
File: RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.mft (raw, json)
Hash identifier: rz5I38o6atekVdANbEyRDIW9f8rAIrV+tFrxnjHXH4U=
Subject key identifier: 10:96:9F:70:AD:36:98:A1:43:B7:81:B5:21:92:CA:90:36:1C:4A:D2
Authority key identifier: 46:73:50:D5:97:5A:27:2A:88:BF:B8:81:0A:F4:59:81:CD:55:93:5A
Certificate issuer: /CN=467350d5975a272a88bfb8810af45981cd55935a
Certificate serial: 019657CB3FEF41F655D5B33796669CC2702A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/c57b75-10a7-4723-94ea-e857477a7008/1/RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.mft
Manifest number: 0DFA
Signing time: Mon 21 Apr 2025 10:01:00 +0000
Manifest this update: Mon 21 Apr 2025 10:01:00 +0000
Manifest next update: Tue 22 Apr 2025 10:01:00 +0000
Files and hashes: 1: RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.crl (hash: APsF6Bb7iMtfpRyg7jLDNQaqQMkw5NrqXla4iMjxws4=)
2: cM594o8l7Xh7Dw0EOXhcxgvWLYI.roa (hash: 1Ym4804A2QtxpGJhVDPpEbLS0giUeOdd5FG8xMIV330=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/c57b75-10a7-4723-94ea-e857477a7008/1/RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/c57b75-10a7-4723-94ea-e857477a7008/1/RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:cb:3f:ef:41:f6:55:d5:b3:37:96:66:9c:c2:70:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=467350d5975a272a88bfb8810af45981cd55935a
Validity
Not Before: Apr 21 10:01:00 2025 GMT
Not After : Apr 22 10:01:00 2025 GMT
Subject: CN=10969f70ad3698a143b781b52192ca90361c4ad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:70:10:aa:ee:21:b6:2b:dc:ad:86:56:cf:46:
c4:a0:f8:e4:30:e7:1c:2a:53:d5:fc:de:40:38:69:
30:58:a6:ca:3c:90:31:af:63:9e:05:53:a7:e0:b1:
d0:c1:c3:d2:e0:3c:36:f4:e5:5d:c6:43:44:3e:44:
4e:ba:a7:c4:74:02:af:9a:99:49:5e:d2:dc:fe:4b:
f4:d4:5e:f7:7b:54:25:45:53:b3:2c:ab:e7:ef:92:
7a:5b:ea:87:ec:44:30:c8:55:14:80:81:98:08:76:
70:06:f0:8d:a7:e0:57:6d:97:67:97:23:19:69:c0:
bf:4c:f9:96:26:b1:c1:93:9c:c4:ab:99:f9:e3:eb:
d0:3e:85:9c:e4:fe:94:00:13:a7:47:e8:6b:66:92:
3b:f4:d5:ea:87:d9:47:a1:88:42:6c:e9:4c:d3:6b:
ba:63:f8:e7:d1:17:e6:c1:0b:ee:ee:a9:75:13:ad:
2f:07:0b:c3:9c:c8:b1:d1:22:c3:19:2e:87:84:a4:
d5:ec:f0:05:08:32:84:ca:11:c5:3f:23:cf:e8:c5:
bf:a6:5c:1e:6e:19:66:27:73:a2:a6:88:f0:bf:5a:
72:d6:92:60:be:b4:f0:4a:b4:c4:c1:31:4d:c3:ee:
ce:63:1b:43:96:20:f3:b3:38:ce:fe:0d:42:54:f8:
56:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:96:9F:70:AD:36:98:A1:43:B7:81:B5:21:92:CA:90:36:1C:4A:D2
X509v3 Authority Key Identifier:
keyid:46:73:50:D5:97:5A:27:2A:88:BF:B8:81:0A:F4:59:81:CD:55:93:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/c57b75-10a7-4723-94ea-e857477a7008/1/RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/c57b75-10a7-4723-94ea-e857477a7008/1/RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:8a:2c:45:ed:98:4e:e4:c3:af:fb:e3:04:fc:b9:5c:cb:4f:
a3:a1:d4:1f:80:26:8c:8c:0f:53:a1:ee:7e:5d:53:aa:cd:e9:
11:e5:39:f5:78:e8:db:05:80:c1:a7:e1:06:43:df:7a:78:4f:
c8:97:b7:d4:e6:cd:b0:58:87:c5:c2:d3:f0:1c:bd:d0:1f:70:
41:97:a0:9f:30:ba:ac:fd:37:c9:fb:85:7b:35:df:8d:77:f8:
b8:ce:0f:a0:bb:6c:a8:58:d2:6c:6f:10:29:b6:d0:6f:64:3e:
11:8d:c6:d8:1b:f8:22:fe:8f:e2:05:78:21:6c:db:bb:66:e8:
7e:99:79:da:a2:a7:8f:5a:3c:aa:f8:d0:d0:a3:35:72:70:c4:
f9:34:c0:4d:4b:7e:f4:49:f5:e7:53:ed:32:38:09:ac:95:28:
72:2c:c8:5e:bd:f0:61:cc:e7:49:e2:85:c7:38:80:8d:73:c2:
a5:69:5d:14:db:0f:33:c7:5f:21:e5:11:6c:77:18:7c:fb:3e:
6d:45:76:e4:14:5b:dd:21:6d:2f:88:29:75:ce:be:cf:0e:a3:
fc:f6:38:f9:f3:aa:c9:8a:6a:a2:46:06:cb:41:5a:d1:9c:e7:
4e:4c:ab:79:a4:9f:d5:95:c9:40:67:7f:62:5c:fc:05:fa:c0:
37:f3:c4:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:41:58 2025 by rpki-client