Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/byDBquA8J08ClCjuoKRCQgjU8-0.mft
File: byDBquA8J08ClCjuoKRCQgjU8-0.mft (raw, json)
Hash identifier: qnsgdG2FGShxRHBj371lKNrlaJKu8toBALa5xrHq7GY=
Subject key identifier: 46:0A:96:E1:65:ED:FF:15:2E:65:81:38:F0:39:33:24:34:26:7E:CC
Authority key identifier: 6F:20:C1:AA:E0:3C:27:4F:02:94:28:EE:A0:A4:42:42:08:D4:F3:ED
Certificate issuer: /CN=6f20c1aae03c274f029428eea0a4424208d4f3ed
Certificate serial: 019652DB736EA97980EB77C690DF7DB9B5AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/byDBquA8J08ClCjuoKRCQgjU8-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/byDBquA8J08ClCjuoKRCQgjU8-0.mft
Manifest number: 14FE
Signing time: Sun 20 Apr 2025 11:00:35 +0000
Manifest this update: Sun 20 Apr 2025 11:00:35 +0000
Manifest next update: Mon 21 Apr 2025 11:00:35 +0000
Files and hashes: 1: QR-XfIkw00mD51XnwCvsG-9T89w.roa (hash: a0XDBbD/tQURYMLpVooHaNMf9NXfcD/rGt0gapo+gwA=)
2: byDBquA8J08ClCjuoKRCQgjU8-0.crl (hash: y1ZY9SHndwGsvL2SuwUlJBQUK1txPLYmBYfYH9iv1Kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/byDBquA8J08ClCjuoKRCQgjU8-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/byDBquA8J08ClCjuoKRCQgjU8-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/byDBquA8J08ClCjuoKRCQgjU8-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:db:73:6e:a9:79:80:eb:77:c6:90:df:7d:b9:b5:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f20c1aae03c274f029428eea0a4424208d4f3ed
Validity
Not Before: Apr 20 11:00:35 2025 GMT
Not After : Apr 21 11:00:35 2025 GMT
Subject: CN=460a96e165edff152e658138f039332434267ecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f6:14:5c:16:b2:b6:28:62:70:dd:65:45:6f:
cc:f2:30:cb:1a:f1:44:40:85:ad:d9:a9:21:51:fa:
15:50:83:b9:c8:84:df:0d:51:0e:8c:bc:f9:b4:43:
ba:a4:fa:34:29:0d:f8:ff:d9:68:94:e2:88:49:e2:
4d:50:2c:4c:2e:cf:f9:1a:dc:92:51:0d:86:e6:0c:
5b:8f:ce:7e:71:ea:56:9a:12:91:ca:75:9f:31:f0:
13:f2:8f:50:36:16:26:9d:c4:91:96:9a:7b:b0:b4:
f6:42:ab:fc:33:de:d5:17:1b:67:4e:1f:50:6e:97:
71:ed:26:ac:a6:b3:99:4f:73:5e:f5:d9:75:0c:4a:
5a:ae:bc:13:74:c5:70:1b:de:37:21:04:a2:6b:b6:
f3:4d:bf:ee:6d:1a:4b:d1:1b:ff:fc:31:c4:82:40:
9d:21:7e:e6:7f:c7:dd:42:e8:71:8b:4e:1a:98:d9:
f9:52:e1:34:89:6f:12:af:92:a6:f1:da:f5:58:71:
6a:7e:b6:88:1e:76:0b:c6:00:cc:ee:e6:77:b4:90:
02:82:c5:ce:c9:31:63:7c:44:9a:9c:0b:98:fd:30:
c4:4f:90:a1:37:f1:25:2b:d0:ef:b3:b5:ea:65:19:
69:99:d5:67:02:79:50:32:68:01:49:7d:2e:91:7f:
fe:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:0A:96:E1:65:ED:FF:15:2E:65:81:38:F0:39:33:24:34:26:7E:CC
X509v3 Authority Key Identifier:
keyid:6F:20:C1:AA:E0:3C:27:4F:02:94:28:EE:A0:A4:42:42:08:D4:F3:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/byDBquA8J08ClCjuoKRCQgjU8-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/byDBquA8J08ClCjuoKRCQgjU8-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/byDBquA8J08ClCjuoKRCQgjU8-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:24:1a:e0:c9:cf:f8:b5:23:40:2e:63:e3:1d:4e:fd:68:1e:
61:ff:2f:bb:5c:4c:97:e9:3a:d8:6f:5a:59:f0:1c:9d:bb:4a:
ce:94:dd:3b:fe:f5:d1:c9:60:2c:73:ae:04:82:bf:4c:7d:5f:
80:cc:c9:d3:3c:bf:4d:99:81:17:28:90:57:12:a4:88:0a:25:
c0:d3:ff:3b:55:76:ef:19:45:57:f7:db:5d:3a:a7:7c:4b:9f:
04:a5:0a:eb:9a:0b:f8:ca:5d:f9:5d:82:00:44:1d:86:e4:99:
6d:82:85:a5:75:5d:12:ed:49:76:32:6d:76:eb:c9:95:47:98:
2e:98:bb:b2:0a:3f:5b:c6:09:cc:c9:43:06:bb:26:9e:9f:7c:
eb:c9:fc:ae:f2:98:6b:fd:18:5d:aa:f8:35:57:8b:22:93:fe:
6e:cb:e7:35:dc:bb:2f:85:7e:ca:d3:4d:99:19:cb:b3:fd:cf:
5c:12:03:16:56:69:77:fb:e8:62:6d:9b:6e:f1:1e:ef:02:c4:
69:40:e3:1b:02:7d:67:cf:18:a6:d2:51:f7:a8:72:c8:b9:af:
fd:28:86:4f:0f:f0:48:e0:34:8b:af:46:33:6e:a6:12:08:50:
7f:5a:a2:e7:bb:24:f6:39:f7:c8:92:d7:77:83:16:ca:0e:8a:
d3:7d:cf:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:57:58 2025 by rpki-client