Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft
File: dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft (raw, json)
Hash identifier: 1BTv654ZPqgP8lbH/QOyP7/eTVt+cYl2on4gm3f0neI=
Subject key identifier: 03:9E:FE:06:64:B5:A8:E4:E9:FB:3F:19:4A:BF:EB:E7:01:6D:9E:05
Authority key identifier: 74:AE:94:1A:68:1C:15:86:37:9E:07:24:7D:CC:19:F3:F4:10:35:D8
Certificate issuer: /CN=74ae941a681c1586379e07247dcc19f3f41035d8
Certificate serial: 019667E2D79ADF1F2468B38DC41549D1D115
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dK6UGmgcFYY3ngckfcwZ8_QQNdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft
Manifest number: 0CA5
Signing time: Thu 24 Apr 2025 13:00:41 +0000
Manifest this update: Thu 24 Apr 2025 13:00:41 +0000
Manifest next update: Fri 25 Apr 2025 13:00:41 +0000
Files and hashes: 1: aRphps94ueev9_cb0Fbr1t6EWos.roa (hash: qY/6yr4D72wfd0je0UgbA5pXBnLSwy4IbEDXkYKHi6c=)
2: dK6UGmgcFYY3ngckfcwZ8_QQNdg.crl (hash: lUOPmiLj/PDUm1JqT4wmOwKJI4MKj1KSKhMkM212hYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/dK6UGmgcFYY3ngckfcwZ8_QQNdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Apr 2025 13:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:67:e2:d7:9a:df:1f:24:68:b3:8d:c4:15:49:d1:d1:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74ae941a681c1586379e07247dcc19f3f41035d8
Validity
Not Before: Apr 24 13:00:41 2025 GMT
Not After : Apr 25 13:00:41 2025 GMT
Subject: CN=039efe0664b5a8e4e9fb3f194abfebe7016d9e05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:39:a2:2f:65:42:c2:6f:d3:0e:42:65:a3:be:
39:57:ea:41:18:3a:4b:55:ec:bf:90:fe:bd:96:65:
9b:e3:b5:6e:db:93:cc:8e:30:1a:16:5c:35:1b:68:
cf:4c:6a:5c:50:38:2a:ef:58:fe:6a:42:de:25:af:
a8:0f:28:00:ec:58:f4:a9:2b:a7:2d:88:9f:00:ec:
24:02:05:c9:10:2c:7e:0e:86:6e:81:e2:8a:1d:df:
e5:1d:85:e8:94:dc:1e:20:ca:61:9c:eb:dd:f0:15:
41:6e:f3:15:ec:bb:c3:0d:47:7a:6e:3e:42:de:a0:
75:53:16:ee:6b:22:21:55:9b:03:5e:7b:a2:88:33:
98:57:55:35:be:d2:3e:c1:cf:6f:ec:4a:f0:f4:7f:
1b:62:5a:18:fc:9d:9e:6d:7d:3e:f1:33:be:03:3c:
1f:98:66:23:d8:87:71:72:f2:30:0b:3a:ee:58:30:
38:b9:c4:0d:3d:97:7f:2d:f3:71:9f:b3:2e:b9:47:
cc:17:e7:1c:be:1a:d4:89:a8:97:62:97:ec:a0:d2:
2f:45:f8:e3:fe:3c:26:78:4d:8b:f4:a0:ef:4a:69:
31:c8:92:d1:df:56:e0:93:b2:53:b5:1c:a7:00:50:
c4:72:d4:f3:64:e8:df:05:3d:9d:ad:3b:a4:d1:1c:
2f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:9E:FE:06:64:B5:A8:E4:E9:FB:3F:19:4A:BF:EB:E7:01:6D:9E:05
X509v3 Authority Key Identifier:
keyid:74:AE:94:1A:68:1C:15:86:37:9E:07:24:7D:CC:19:F3:F4:10:35:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dK6UGmgcFYY3ngckfcwZ8_QQNdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:27:7c:60:68:60:45:74:fd:2f:b7:25:54:be:b6:d1:61:c0:
02:f1:b6:a0:72:eb:ed:12:be:0e:fd:69:b7:66:1a:1a:b5:37:
e7:c2:31:08:47:1d:4b:93:e1:dc:ba:b3:d7:58:97:1c:68:2c:
91:52:75:75:7c:47:99:5f:f7:8c:6b:4c:50:ae:f8:9a:70:80:
23:95:e4:98:69:50:f7:83:90:cc:9b:7d:9e:63:6f:b3:aa:f2:
b7:a1:37:b1:06:cc:76:e5:50:52:c6:18:d2:e8:a0:0b:92:a8:
54:cd:50:39:56:d8:aa:d1:2b:05:8a:e1:73:f3:ca:8d:34:11:
8b:98:f3:1a:f6:11:ce:1c:51:7e:94:1a:ad:8c:c5:d4:08:ad:
fe:f8:4f:56:e6:98:6f:2a:b5:b8:56:32:3d:8b:ff:b3:6d:57:
1e:a0:a0:c6:fe:5d:4f:8f:cd:9f:c9:45:f0:c4:6b:51:e6:47:
6b:5c:22:5f:73:2a:5a:f6:63:b6:38:fd:bf:b7:0a:37:67:6c:
ee:7f:e1:62:ab:97:99:b0:d8:f4:4f:d4:84:b9:f5:db:b3:16:
b5:02:86:25:5a:98:07:13:ca:5a:60:64:18:00:52:be:df:0b:
d6:2f:ad:7d:e7:16:9f:4a:3b:16:fb:d0:28:6c:08:a3:a3:c9:
3e:52:50:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:07:34 2025 by rpki-client