Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft
File: k7R00FVx3z1E9jzKIbQLbhLDktk.mft (raw, json)
Hash identifier: tQd0ecRBskwWkZ7n0upcZq7U+IRbza3+1UBH5ZSsSI4=
Subject key identifier: 0E:E6:CA:03:26:07:B8:A1:00:2E:B8:24:71:D5:E7:6B:1C:34:30:1F
Authority key identifier: 93:B4:74:D0:55:71:DF:3D:44:F6:3C:CA:21:B4:0B:6E:12:C3:92:D9
Certificate issuer: /CN=93b474d05571df3d44f63cca21b40b6e12c392d9
Certificate serial: 019650483B3F4AA7C03DF053780557652CD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7R00FVx3z1E9jzKIbQLbhLDktk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft
Manifest number: 0BE0
Signing time: Sat 19 Apr 2025 23:00:33 +0000
Manifest this update: Sat 19 Apr 2025 23:00:33 +0000
Manifest next update: Sun 20 Apr 2025 23:00:33 +0000
Files and hashes: 1: 1QST1OPlWGgU_KfeCd6-eSc5Fws.roa (hash: 0IX3SPWo/YRidApWFZTcBmj27iQz+V20vqeZhxHtpTk=)
2: UOcYa9_wijcIRHEowaEFsvhzcW4.roa (hash: tUwVIAhXZ1HVd/+8k4HpFkWguLhngA3Bv+h1B/N8dK4=)
3: k7R00FVx3z1E9jzKIbQLbhLDktk.crl (hash: luwFAPfWBbnSVtkk8FaQB/WyY91R4ZEh0/Xc3EqLuZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7R00FVx3z1E9jzKIbQLbhLDktk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:48:3b:3f:4a:a7:c0:3d:f0:53:78:05:57:65:2c:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b474d05571df3d44f63cca21b40b6e12c392d9
Validity
Not Before: Apr 19 23:00:33 2025 GMT
Not After : Apr 20 23:00:33 2025 GMT
Subject: CN=0ee6ca032607b8a1002eb82471d5e76b1c34301f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:65:0f:83:ea:c8:3d:29:b7:c2:ab:a4:1c:14:
91:99:fd:0c:dd:d5:b2:6c:12:40:ec:de:3a:cd:20:
29:f6:14:b1:6b:37:25:d8:b9:e4:b6:34:16:57:33:
0a:d2:62:df:dc:a4:79:fd:1e:81:1d:a5:6f:07:1d:
63:9b:c2:9d:64:35:91:af:38:7e:06:31:c8:13:ba:
d9:45:5e:1d:ec:ce:cb:dd:33:51:cc:d5:6c:5f:16:
89:f2:ca:f1:d6:a7:3f:49:24:3e:2d:65:f5:fa:6f:
98:1f:62:3d:30:7c:ae:fc:52:b7:b6:a4:45:45:61:
33:20:e5:32:a2:f1:99:2c:c8:d7:5d:76:61:c9:6c:
97:1d:7d:1c:47:7b:de:48:b1:ec:dc:8c:a0:31:da:
3a:02:04:f1:14:95:b5:2e:f3:97:7f:5b:d9:48:9e:
37:ee:13:ba:93:b9:ee:bc:be:46:c0:46:81:b0:94:
22:bb:fe:af:8b:9c:91:27:c5:a9:1c:23:9f:87:bc:
bf:65:83:3e:76:be:f0:17:e0:94:7e:b5:88:66:21:
7b:eb:0e:b5:f8:4f:f7:66:65:f0:03:0f:9b:4d:dc:
63:82:de:dd:93:54:99:b4:ba:2b:62:d3:7f:6c:03:
b1:5f:e4:8d:b3:87:fe:4b:80:a7:76:34:89:01:48:
cc:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:E6:CA:03:26:07:B8:A1:00:2E:B8:24:71:D5:E7:6B:1C:34:30:1F
X509v3 Authority Key Identifier:
keyid:93:B4:74:D0:55:71:DF:3D:44:F6:3C:CA:21:B4:0B:6E:12:C3:92:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7R00FVx3z1E9jzKIbQLbhLDktk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:93:98:c9:69:68:bd:fb:5d:61:82:5e:26:00:3a:12:bd:05:
d5:5a:ed:69:1d:a1:73:7a:25:3a:92:44:51:51:db:f0:8f:d7:
f9:3c:c3:c7:55:d3:c0:ac:4f:b1:c3:05:6b:d0:be:1a:cf:83:
0e:34:57:1a:5e:50:26:f6:41:6e:18:c6:82:57:54:d6:ed:2a:
a4:13:7b:d8:02:80:f1:48:1e:14:f8:51:6f:d1:86:b5:6e:7c:
b0:23:14:d7:fb:e6:48:bf:0b:5d:4c:40:82:65:de:d8:b4:ab:
80:0a:4a:87:37:db:50:4e:f5:db:dc:ac:a4:7e:ca:1c:00:13:
2f:ea:92:26:84:4b:4a:38:44:28:c5:64:f0:b4:3a:70:5d:9c:
e7:63:f4:6f:a2:8f:2e:aa:82:31:48:05:b0:dc:9a:07:de:c7:
3c:5a:90:fe:5e:86:10:13:c7:c2:04:ba:4d:37:1f:dc:06:81:
b5:86:58:d9:10:0e:83:a0:85:95:97:5a:f8:5a:01:ea:30:bd:
09:44:58:82:2b:90:51:b0:1f:d3:c6:90:fd:6e:fc:cf:94:0e:
4a:93:d6:53:e2:fb:c6:99:81:0d:e9:49:50:2d:0b:b8:e7:06:
6c:a9:d2:85:eb:c2:4c:8e:2d:a7:31:75:e9:f6:65:eb:8e:44:
83:89:10:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:09:31 2025 by rpki-client