Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/107db4-9fd7-4fcd-8d19-25413c260e45/1/R600-MIKUHPoYIIcjAm_dXmibQs.mft
File: R600-MIKUHPoYIIcjAm_dXmibQs.mft (raw, json)
Hash identifier: YWNlNAB1UcDgf0uML+ynoE14C3aARsPk0Z+CyWoXUbg=
Subject key identifier: B6:89:B4:E8:13:86:53:EE:76:A0:95:CA:EC:5B:B0:80:AD:97:01:4B
Authority key identifier: 47:AD:34:F8:C2:0A:50:73:E8:60:82:1C:8C:09:BF:75:79:A2:6D:0B
Certificate issuer: /CN=47ad34f8c20a5073e860821c8c09bf7579a26d0b
Certificate serial: 019613216668F46613A53280AD8F9D68DFF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R600-MIKUHPoYIIcjAm_dXmibQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/107db4-9fd7-4fcd-8d19-25413c260e45/1/R600-MIKUHPoYIIcjAm_dXmibQs.mft
Manifest number: 1448
Signing time: Tue 08 Apr 2025 02:01:18 +0000
Manifest this update: Tue 08 Apr 2025 02:01:18 +0000
Manifest next update: Wed 09 Apr 2025 02:01:18 +0000
Files and hashes: 1: R600-MIKUHPoYIIcjAm_dXmibQs.crl (hash: CFnEoWu7cF0A9gs99SNAeORE5AHDgfMBo8qQKq9p38c=)
2: jbn0uNt62cbm-5uAutTNS6KIeT0.roa (hash: JjRHfVTqZW3BM/UoOGJBXI5IB1+oYeNHfz6C/Sa7drI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/107db4-9fd7-4fcd-8d19-25413c260e45/1/R600-MIKUHPoYIIcjAm_dXmibQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/107db4-9fd7-4fcd-8d19-25413c260e45/1/R600-MIKUHPoYIIcjAm_dXmibQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/R600-MIKUHPoYIIcjAm_dXmibQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 02:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:13:21:66:68:f4:66:13:a5:32:80:ad:8f:9d:68:df:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47ad34f8c20a5073e860821c8c09bf7579a26d0b
Validity
Not Before: Apr 8 02:01:18 2025 GMT
Not After : Apr 9 02:01:18 2025 GMT
Subject: CN=b689b4e8138653ee76a095caec5bb080ad97014b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:86:cb:9e:bd:b8:61:fc:b4:25:d8:1e:0e:dc:
2a:3f:2d:19:3d:46:ba:b6:c7:e0:aa:39:17:8f:d6:
15:b7:79:16:68:5b:8f:4f:06:34:3d:75:f2:5a:53:
aa:cf:9e:1a:a6:be:20:78:b6:fc:cf:ad:90:55:6f:
f5:49:c7:39:98:ac:a6:87:09:f8:4d:c8:2d:99:25:
9e:a2:0d:01:5f:b5:7c:ed:a4:3e:54:2a:c7:3a:cb:
0c:88:9f:fa:2b:85:14:01:cd:c0:70:cb:9a:1a:3c:
a6:80:80:30:22:b6:2e:44:a9:47:1b:47:b5:3b:c8:
4d:33:28:74:7b:d8:4a:6d:46:6d:41:94:b1:cb:98:
70:d6:5c:1f:f0:c6:3f:9c:45:78:38:ee:63:9b:e9:
88:4a:01:4b:84:d4:be:02:8a:c9:a4:51:97:fc:38:
0e:9b:fb:40:4f:db:d4:65:b9:ec:a2:31:c7:d2:f6:
18:3f:fa:89:e8:8d:97:70:24:6c:f1:0f:ed:be:4d:
13:0e:ec:21:e1:13:c2:59:5d:26:3b:d7:1d:0c:55:
ec:9e:06:2e:c0:2c:12:fe:09:95:a3:f5:2e:20:8a:
41:71:f3:d4:cd:29:52:de:a3:63:2e:2c:82:da:76:
ba:4e:6d:66:3f:4f:00:f2:04:5e:d5:77:82:c4:7f:
54:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:89:B4:E8:13:86:53:EE:76:A0:95:CA:EC:5B:B0:80:AD:97:01:4B
X509v3 Authority Key Identifier:
keyid:47:AD:34:F8:C2:0A:50:73:E8:60:82:1C:8C:09:BF:75:79:A2:6D:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R600-MIKUHPoYIIcjAm_dXmibQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/107db4-9fd7-4fcd-8d19-25413c260e45/1/R600-MIKUHPoYIIcjAm_dXmibQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/107db4-9fd7-4fcd-8d19-25413c260e45/1/R600-MIKUHPoYIIcjAm_dXmibQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:d9:4a:06:19:ae:83:fb:24:7d:94:2e:6a:3e:0c:3e:2f:7b:
5e:90:88:ab:eb:76:70:e0:a8:d9:18:88:4c:d2:9f:b4:bd:a6:
24:a4:53:2d:0f:22:bf:5e:11:3c:ba:79:65:44:a0:dc:ec:51:
27:4f:ee:69:20:e1:7e:e8:8b:31:10:fb:1c:97:cf:00:0a:75:
62:87:46:7b:5f:05:d2:0a:ae:4d:75:c8:60:c4:21:67:dc:04:
fd:19:42:a9:94:e3:88:66:1f:68:7b:c5:f9:0f:e5:fe:f9:e8:
95:cb:32:18:b7:28:6e:7e:ea:83:47:9f:1a:9e:4c:5d:2e:bd:
8d:31:8c:2d:60:c0:f7:d6:96:59:4e:d1:0f:9d:07:a8:1e:09:
95:d3:8d:75:04:53:65:ea:a7:c6:65:af:01:70:36:84:18:d4:
80:a5:d7:6b:61:2d:aa:b7:94:03:02:0b:d2:1a:b3:9d:a7:cb:
ae:e1:43:f7:8e:b9:69:d7:bb:5e:a5:e0:f2:6c:55:25:c5:78:
bc:ba:0f:4b:ba:39:ca:d5:3c:5c:1d:0d:18:e5:2e:10:76:cd:
c8:5a:d8:a3:32:9a:b5:ba:47:69:b8:61:a4:9d:e1:cc:e8:95:
29:8d:45:20:06:84:ec:6b:cf:0d:d7:93:87:7b:4f:f9:9b:69:
6b:49:cb:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:12:51 2025 by rpki-client