Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.mft
File: sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.mft (raw, json)
Hash identifier: oWeNrdfRkN0cLBoYfN9K4VdmP4kX5rh3jSxQNg+3Vtg=
Subject key identifier: 24:76:6E:A0:64:53:93:55:3A:05:AC:95:BC:75:62:21:06:F8:B9:A0
Authority key identifier: B0:80:F8:00:1D:59:93:33:73:FE:8E:58:84:9E:4B:91:DE:AA:2B:B2
Certificate issuer: /CN=b080f8001d59933373fe8e58849e4b91deaa2bb2
Certificate serial: 019655377F1DF78A48B96B5FC4173CACB6D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.mft
Manifest number: 0343
Signing time: Sun 20 Apr 2025 22:00:22 +0000
Manifest this update: Sun 20 Apr 2025 22:00:22 +0000
Manifest next update: Mon 21 Apr 2025 22:00:22 +0000
Files and hashes: 1: f-wF0yIlDOHaFqLViWnFWeP4B9o.roa (hash: 8olsSb6V441J0mOtJjve8qF0Z7IUWgXwJVtuxOxK2Bg=)
2: sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.crl (hash: SLBKuv9m3vWY66xdfm589mQLKOSYBqvNwrhXa2U2L5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:37:7f:1d:f7:8a:48:b9:6b:5f:c4:17:3c:ac:b6:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b080f8001d59933373fe8e58849e4b91deaa2bb2
Validity
Not Before: Apr 20 22:00:22 2025 GMT
Not After : Apr 21 22:00:22 2025 GMT
Subject: CN=24766ea0645393553a05ac95bc75622106f8b9a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:33:29:54:3c:ee:34:bc:d9:5d:10:66:a3:cc:
e4:1a:6a:85:88:e3:e8:b2:01:b3:41:40:32:2f:d2:
e0:da:3e:8b:b5:d9:42:58:7e:51:e4:42:0b:03:10:
79:d0:df:e3:58:1d:0f:42:53:3a:6d:18:80:9b:7b:
aa:a1:63:86:34:65:5f:dd:2c:6d:ab:0d:12:79:2d:
ba:7b:60:2b:9e:5b:44:26:f2:e1:8a:9e:bb:e7:90:
71:68:fa:02:33:af:6a:58:92:50:ce:f8:fc:fd:61:
ad:83:5b:fa:2f:9e:08:2e:8c:fd:45:a6:1a:e3:5e:
8a:73:d0:fc:9f:db:6f:84:90:00:03:ee:ff:e6:6c:
e5:84:da:13:b5:32:90:47:37:4f:a3:62:1d:89:9d:
fa:8b:ff:b1:66:83:8b:99:93:03:7b:34:58:50:57:
20:67:2e:2e:e0:28:74:f9:f6:4a:75:26:b3:fe:51:
b6:ab:4f:3a:38:94:1a:ad:9e:35:ba:dc:2e:be:6b:
71:f5:55:66:c1:96:d8:7e:76:70:37:16:56:77:9f:
56:a3:63:2d:36:51:5b:e3:5f:77:84:e6:a8:f7:e8:
7d:5c:dc:76:1a:ad:74:13:ae:09:80:2a:bc:50:db:
bf:0c:a5:d9:3a:0b:62:cc:7d:c0:d0:cb:e0:a0:64:
73:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:76:6E:A0:64:53:93:55:3A:05:AC:95:BC:75:62:21:06:F8:B9:A0
X509v3 Authority Key Identifier:
keyid:B0:80:F8:00:1D:59:93:33:73:FE:8E:58:84:9E:4B:91:DE:AA:2B:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:e3:68:90:3b:67:33:4d:0f:75:99:04:19:97:23:f6:6e:b6:
a1:f7:40:85:d5:8c:b9:07:1b:d0:ae:ba:6e:a7:a9:52:59:f9:
10:c4:1d:f5:26:5e:b1:13:8f:6f:df:bd:e6:52:f8:85:57:66:
98:dc:07:52:b1:16:7c:d4:06:39:da:a4:45:d5:24:a3:1c:32:
14:7d:d3:2a:f3:37:5e:1b:f8:76:5a:93:32:79:ec:04:89:7c:
35:e4:0b:f2:68:f2:70:4d:e2:67:22:bd:80:a9:33:f2:a1:fd:
7d:90:67:6b:56:bb:3a:4e:8c:e0:ff:b0:a6:88:c3:34:1e:93:
9f:d1:cf:37:f4:53:62:13:fa:d5:31:5a:8e:ba:b9:62:1b:93:
7b:aa:32:07:2f:e3:29:64:b6:f7:3b:c5:c8:fd:d0:46:1b:61:
67:62:fa:60:0c:83:da:2b:5a:ac:a9:92:08:4d:13:91:4f:bd:
e2:94:a7:42:cd:7c:ef:78:59:69:4b:09:f4:13:70:d8:91:cb:
52:78:f2:a7:63:9a:66:ef:67:1b:9b:6c:b5:c3:f8:ec:30:66:
f4:08:2e:f0:0d:f9:67:b3:83:9f:d4:22:73:17:78:7f:69:a0:
88:87:3a:a4:a9:9b:43:4a:f7:14:fe:88:57:4b:c5:d3:b2:26:
a8:fd:4d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:19:39 2025 by rpki-client