Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft
File: ArYQzUO6_O2RSA-r_cquggSfv3E.mft (raw, json)
Hash identifier: tI+iKy3B9Flk5gMkB6xFjMmln91tQ0gGSFKLdAT60fQ=
Subject key identifier: 43:70:C8:9D:87:7B:42:94:21:24:93:BD:52:36:23:A9:A8:97:54:EF
Authority key identifier: 02:B6:10:CD:43:BA:FC:ED:91:48:0F:AB:FD:CA:AE:82:04:9F:BF:71
Certificate issuer: /CN=02b610cd43bafced91480fabfdcaae82049fbf71
Certificate serial: 019646A01262021F32AA9CCC705DAACBF91A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft
Manifest number: 14FF
Signing time: Fri 18 Apr 2025 02:00:17 +0000
Manifest this update: Fri 18 Apr 2025 02:00:17 +0000
Manifest next update: Sat 19 Apr 2025 02:00:17 +0000
Files and hashes: 1: 3jSOaatFzz9swrZhXqD6jHzeDww.roa (hash: tVwdSKcBd6/2MH/mbR0mS1QlYqRRE3gqHsHq5WvFQFw=)
2: 79gW3YAt2XuqijR7nl5mfFtOLk8.roa (hash: 4986fTnHGnlxMjpLE7ZRIeQ2cNZOfNLwZxbij5ru624=)
3: ArYQzUO6_O2RSA-r_cquggSfv3E.crl (hash: fXTN5HjmdEt+B1f4TNBeLJaSEJeGLBBBIbY46sbwopQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:46:a0:12:62:02:1f:32:aa:9c:cc:70:5d:aa:cb:f9:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02b610cd43bafced91480fabfdcaae82049fbf71
Validity
Not Before: Apr 18 02:00:17 2025 GMT
Not After : Apr 19 02:00:17 2025 GMT
Subject: CN=4370c89d877b4294212493bd523623a9a89754ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:13:2a:8f:01:49:d2:17:57:07:9c:6b:e9:ab:
a3:fe:87:23:34:2a:df:d3:cc:6d:76:8b:07:c1:eb:
fb:d6:e7:cc:93:6c:60:41:98:6e:da:ab:5b:c3:cd:
3c:51:aa:4f:40:b2:5b:d2:b4:41:50:6e:a4:c1:75:
4b:bb:a0:85:e2:ba:d1:28:b0:6c:10:81:d8:b9:2b:
59:61:37:a3:ac:07:6a:20:18:7e:9c:f1:2d:1b:fe:
81:31:f1:f2:03:e8:73:1a:8a:bd:e1:34:4b:b9:fb:
23:1c:3e:bf:76:5a:ef:3d:d5:68:63:3e:4e:76:9b:
53:71:85:4d:17:69:41:fe:f6:d3:fd:0d:97:0e:3f:
d1:e5:54:19:38:6b:df:3b:42:ca:11:f6:3c:98:1b:
29:e5:61:8c:65:78:52:3b:c0:77:73:a7:c9:25:a4:
61:77:23:d2:19:83:11:96:54:1e:91:67:d7:b9:67:
69:5d:ac:84:73:d9:6e:06:f2:75:d2:cd:62:62:ad:
63:75:77:ea:f8:9e:fe:f6:58:2f:16:af:00:c9:b6:
e2:27:7b:13:67:59:10:48:f5:fe:6d:bd:32:c8:e4:
a2:e3:cc:b9:fc:d3:00:58:2d:fb:ac:a3:2e:b5:f4:
16:a9:f1:21:58:a4:55:b9:52:40:f7:b4:24:30:b2:
48:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:70:C8:9D:87:7B:42:94:21:24:93:BD:52:36:23:A9:A8:97:54:EF
X509v3 Authority Key Identifier:
keyid:02:B6:10:CD:43:BA:FC:ED:91:48:0F:AB:FD:CA:AE:82:04:9F:BF:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:62:8d:89:ea:aa:9e:06:87:76:06:94:b1:5f:91:34:cc:80:
c0:5a:07:32:a8:e1:d5:d5:6a:89:06:96:7a:0c:fd:df:ec:ce:
00:bb:f3:bf:b1:b1:81:09:48:f3:32:30:c3:5a:77:a1:f7:5d:
1b:40:c7:01:23:63:38:5b:95:f4:8c:df:b2:3f:4e:19:71:d9:
d1:58:6e:46:4b:95:90:e1:4e:77:df:0a:f1:e9:cb:89:e9:e6:
05:52:6d:94:6c:69:8a:e4:0c:6a:37:cf:03:13:e9:64:ee:69:
6e:56:19:17:c2:13:b3:a5:59:44:c0:4f:2e:0e:90:14:f0:a3:
fa:39:46:71:38:04:fe:dd:68:0f:82:12:f5:3a:45:6b:33:f1:
78:f0:91:f3:a5:aa:d9:0c:bb:38:60:81:c6:6f:e3:14:ec:c5:
f0:19:e1:c8:fa:23:58:21:e0:51:58:49:d4:91:00:5f:2a:50:
74:1c:5f:d5:0d:a0:0a:68:52:ff:b5:bf:fe:1e:22:8a:b3:8d:
ad:04:60:ce:ba:b4:1a:81:d6:5a:b9:81:20:51:f0:60:92:4d:
3c:56:d5:32:ca:7e:8c:68:7c:e8:83:75:fb:3d:40:ff:dd:4d:
3f:77:dc:99:ec:b8:64:d0:07:19:e2:48:dc:8d:b6:86:d3:52:
9e:8b:4b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:51:49 2025 by rpki-client