Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/43e959-397e-4e95-9978-9e128cf3c3ad/1/79YM7FOzoM_Iy0VDotCopZ5glu4.mft
File: 79YM7FOzoM_Iy0VDotCopZ5glu4.mft (raw, json)
Hash identifier: qAtpKWNd6Qn225IXpzo5D6gjKw8N6UpStZxm0CcMgT8=
Subject key identifier: 2D:3B:EA:29:23:3A:D1:4C:1E:D7:C7:3E:82:78:9D:99:B6:3B:18:70
Authority key identifier: EF:D6:0C:EC:53:B3:A0:CF:C8:CB:45:43:A2:D0:A8:A5:9E:60:96:EE
Certificate issuer: /CN=efd60cec53b3a0cfc8cb4543a2d0a8a59e6096ee
Certificate serial: 0196556E8E011AA7ADC93EDAE1CF3E868283
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/79YM7FOzoM_Iy0VDotCopZ5glu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/43e959-397e-4e95-9978-9e128cf3c3ad/1/79YM7FOzoM_Iy0VDotCopZ5glu4.mft
Manifest number: 13D5
Signing time: Sun 20 Apr 2025 23:00:30 +0000
Manifest this update: Sun 20 Apr 2025 23:00:30 +0000
Manifest next update: Mon 21 Apr 2025 23:00:30 +0000
Files and hashes: 1: 79YM7FOzoM_Iy0VDotCopZ5glu4.crl (hash: i+omYzY3kXMv9SW7Q3gfDheil8B3LaruVzldVEu0VJ4=)
2: hSNRyfJ3PH2KGCseUOEvDGpfyK8.roa (hash: XdLLCZX0/z3+SIY+d7BWzoDcMrU0AuJsTdPOrDQnlMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/43e959-397e-4e95-9978-9e128cf3c3ad/1/79YM7FOzoM_Iy0VDotCopZ5glu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/43e959-397e-4e95-9978-9e128cf3c3ad/1/79YM7FOzoM_Iy0VDotCopZ5glu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/79YM7FOzoM_Iy0VDotCopZ5glu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:8e:01:1a:a7:ad:c9:3e:da:e1:cf:3e:86:82:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efd60cec53b3a0cfc8cb4543a2d0a8a59e6096ee
Validity
Not Before: Apr 20 23:00:30 2025 GMT
Not After : Apr 21 23:00:30 2025 GMT
Subject: CN=2d3bea29233ad14c1ed7c73e82789d99b63b1870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5d:72:69:6d:40:ec:83:06:8e:93:bb:24:1e:
75:e7:15:3d:3e:3c:37:6b:42:c7:31:27:c6:c4:fb:
33:e8:2c:01:00:a4:ba:9d:3f:33:2e:b8:62:da:04:
4d:17:b8:e8:72:07:62:62:d5:3d:eb:73:e6:b5:b1:
c3:f3:ae:ef:00:0b:c1:15:3e:cf:b8:f3:db:b9:49:
99:3d:a9:bf:d1:09:88:32:e0:60:d0:5a:39:ac:3c:
3a:1e:2f:4a:85:48:54:46:50:21:0c:09:b5:f0:aa:
1e:69:a2:c0:9e:bd:63:d1:c6:be:94:b1:2e:ec:c9:
af:28:5d:30:49:4a:93:b3:f8:78:4f:76:9b:19:eb:
9d:67:16:89:2d:d5:4f:a8:ec:0b:9c:d8:b4:8c:e0:
d2:77:0d:c0:ca:d6:46:3f:ca:09:71:d1:4f:a4:e1:
8e:e3:0d:22:40:c6:7a:50:bb:ab:1d:ff:5f:7c:36:
0f:35:f1:48:1c:ca:3e:bd:7b:f5:02:f0:8d:6e:aa:
31:73:d2:7d:61:db:91:d0:28:35:b8:46:89:65:ad:
63:d9:d6:6b:c8:83:d5:09:f2:cd:e2:9e:ec:9b:7d:
40:6b:64:20:e3:95:1f:fd:92:0a:63:ce:ff:cc:63:
22:82:d9:6e:ee:0e:34:ea:db:02:8e:f3:37:5a:4a:
5f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:3B:EA:29:23:3A:D1:4C:1E:D7:C7:3E:82:78:9D:99:B6:3B:18:70
X509v3 Authority Key Identifier:
keyid:EF:D6:0C:EC:53:B3:A0:CF:C8:CB:45:43:A2:D0:A8:A5:9E:60:96:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/79YM7FOzoM_Iy0VDotCopZ5glu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/43e959-397e-4e95-9978-9e128cf3c3ad/1/79YM7FOzoM_Iy0VDotCopZ5glu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/43e959-397e-4e95-9978-9e128cf3c3ad/1/79YM7FOzoM_Iy0VDotCopZ5glu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:ca:b3:67:38:55:d2:dd:4d:96:6c:e2:33:fb:69:d4:33:f7:
8f:25:f7:26:c6:27:e0:3e:39:c7:ae:a4:b8:cb:8e:db:de:37:
bf:6c:33:e7:52:19:32:fd:67:fb:85:30:76:65:bc:e6:cd:07:
2b:b3:b3:71:ef:85:02:8b:d3:9a:86:d6:45:31:98:7d:f8:bd:
a3:ed:06:95:62:23:64:df:b3:80:f4:ee:c2:58:27:97:05:55:
25:02:e5:b7:ed:21:b9:b1:9c:61:09:bb:b7:cc:63:b4:3d:11:
f1:27:a4:af:b5:55:e3:fa:d2:04:f7:e9:a0:83:99:54:b3:06:
1b:7b:26:05:42:92:4b:cb:d8:da:76:47:b5:2d:62:02:6a:5b:
33:b8:30:10:50:6b:9f:f6:c7:5f:8f:6a:58:8b:45:b0:d5:62:
13:40:a0:0d:a2:9a:ad:59:40:5a:a8:63:7c:e1:c8:6e:a9:92:
36:14:83:d2:21:53:42:ea:de:72:6a:59:c3:dd:07:a9:84:7f:
aa:91:f4:a9:53:92:de:e1:f5:aa:34:a1:eb:fc:9b:49:b7:ca:
63:b2:95:12:91:46:8c:4c:93:08:dd:67:11:9d:63:04:27:86:
54:b4:f0:af:ba:ba:b5:3b:b7:92:f4:11:4c:e5:cf:70:50:f3:
95:24:18:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:53:02 2025 by rpki-client