Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.mft
File: ReKp-3dwEClvm44hXuDbRGcXTS0.mft (raw, json)
Hash identifier: ae1qq3UBOLXntyslE29DywF+AxTXle9rSNL+YBO+GPI=
Subject key identifier: 7E:4C:36:B2:24:08:A7:CB:7B:56:68:DA:1F:B0:0E:61:62:B0:1E:D0
Authority key identifier: 45:E2:A9:FB:77:70:10:29:6F:9B:8E:21:5E:E0:DB:44:67:17:4D:2D
Certificate issuer: /CN=45e2a9fb777010296f9b8e215ee0db4467174d2d
Certificate serial: 0196470E9A3334220C33ABBCD714C396FFCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ReKp-3dwEClvm44hXuDbRGcXTS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.mft
Manifest number: 14F8
Signing time: Fri 18 Apr 2025 04:01:01 +0000
Manifest this update: Fri 18 Apr 2025 04:01:01 +0000
Manifest next update: Sat 19 Apr 2025 04:01:01 +0000
Files and hashes: 1: Da5ukIODRFZkZgl7acW52LzBL34.roa (hash: 2S0h0c/tsGIJ57Pr+A8pwZxQY2/WXek+xC9ZKTvhbzU=)
2: ReKp-3dwEClvm44hXuDbRGcXTS0.crl (hash: qLpTS/JAoq83Dg2Zu/WYANfRqFVY4Q0JNPEbl9HW90Y=)
3: Z45rQavEcQTf3vGUVM_AgWAXCn4.roa (hash: q7JvLSO411WbeIPtlyaZvnsbtnUZIYteyAyCawxKvzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ReKp-3dwEClvm44hXuDbRGcXTS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:47:0e:9a:33:34:22:0c:33:ab:bc:d7:14:c3:96:ff:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e2a9fb777010296f9b8e215ee0db4467174d2d
Validity
Not Before: Apr 18 04:01:01 2025 GMT
Not After : Apr 19 04:01:01 2025 GMT
Subject: CN=7e4c36b22408a7cb7b5668da1fb00e6162b01ed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:95:47:a4:ae:d1:86:8b:7a:38:94:8c:37:1d:
ab:97:35:90:e9:59:37:90:9d:39:98:42:43:f6:88:
b1:c1:83:05:d8:6f:98:12:19:b0:b0:c6:7c:65:89:
d9:a1:56:dc:a7:fa:0e:fe:08:c7:a6:b1:0f:7e:4f:
50:19:38:cc:eb:e4:f0:d3:16:30:a5:a3:27:9e:5b:
5a:ce:e2:68:05:e9:94:17:e8:51:ca:e7:14:a0:95:
80:73:d6:e4:a2:dc:90:f7:b1:ce:e3:2f:ad:eb:75:
34:1c:b6:b9:31:30:51:b4:79:e6:ab:61:31:ab:0f:
8e:cd:59:7e:c5:1d:45:8d:a4:57:de:87:e8:d2:0e:
32:73:c9:3e:95:9b:2c:85:08:8b:6c:56:4f:80:13:
9c:fa:00:5b:e9:c8:08:b7:6a:ec:a1:ef:82:18:99:
5f:58:6e:b4:0f:e4:78:68:17:b8:4d:07:78:09:59:
a6:d9:b3:3a:19:d2:3b:e4:88:7b:0f:56:89:f8:75:
ce:63:a2:7b:d1:d1:9c:a8:e1:f3:41:d6:e7:2f:41:
14:c5:84:07:f2:94:f1:d6:37:de:93:aa:a3:9b:bd:
21:e3:cb:c6:87:a0:3a:7e:38:0a:bf:24:55:3b:c4:
b0:95:dd:40:ad:e4:1a:d3:f4:3f:45:7c:ac:1b:2f:
b8:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:4C:36:B2:24:08:A7:CB:7B:56:68:DA:1F:B0:0E:61:62:B0:1E:D0
X509v3 Authority Key Identifier:
keyid:45:E2:A9:FB:77:70:10:29:6F:9B:8E:21:5E:E0:DB:44:67:17:4D:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ReKp-3dwEClvm44hXuDbRGcXTS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:0b:83:6c:2c:a0:6a:65:48:72:a9:42:90:25:f3:03:7f:9e:
d3:a3:87:58:50:6b:99:65:32:a3:bf:a8:de:ce:da:01:96:60:
97:9f:61:a7:ce:5a:1c:84:25:78:63:b9:fe:ef:e7:f5:9f:87:
d8:bb:4a:e7:f9:af:f7:b9:9b:bc:2f:1e:2b:27:c6:88:cb:50:
60:21:64:8e:ae:b8:02:4c:55:91:e6:88:66:7e:09:b5:c3:3b:
ec:d6:c0:31:84:4e:a6:43:f0:f7:87:81:6b:a8:c2:82:85:45:
2a:dd:81:ba:49:42:57:25:30:bf:62:c0:79:5b:73:1d:d7:a8:
50:53:72:90:5b:95:5c:10:4c:a1:cc:f3:55:c7:b6:dc:f1:8b:
bd:f6:4b:74:ec:5b:ef:b2:4f:58:c6:2b:12:d7:5d:63:84:ae:
ce:89:6c:96:80:7b:57:28:63:58:1b:51:80:9c:7b:0d:ad:79:
a8:2d:0f:13:37:92:dd:93:6e:71:83:3c:ec:32:0c:51:e3:69:
8a:28:5e:3c:57:71:79:62:b6:8b:75:8c:b7:5c:1e:44:91:ac:
64:bc:31:96:e6:75:9b:e1:04:74:89:86:43:6e:8d:7e:d0:99:
62:fa:ef:71:7d:ba:52:ea:7f:d6:8d:00:e6:6a:5f:83:a0:4e:
d6:53:51:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 09:48:25 2025 by rpki-client