Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
File: 2518V3FO9A_bAWXcGYRYDOHVkGs.mft (raw, json)
Hash identifier: gHHT9CaUOdSI8PZfMHL/G3tY8FdwYb0aNqwN/bUGpvA=
Subject key identifier: 61:AB:52:33:F9:32:CD:21:91:47:DB:AB:48:CF:4F:82:0C:36:92:0D
Authority key identifier: DB:9D:7C:57:71:4E:F4:0F:DB:01:65:DC:19:84:58:0C:E1:D5:90:6B
Certificate issuer: /CN=db9d7c57714ef40fdb0165dc1984580ce1d5906b
Certificate serial: 019651FFD02E5AFE4FADE465672465D21AB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
Manifest number: 0621
Signing time: Sun 20 Apr 2025 07:00:41 +0000
Manifest this update: Sun 20 Apr 2025 07:00:41 +0000
Manifest next update: Mon 21 Apr 2025 07:00:41 +0000
Files and hashes: 1: 2518V3FO9A_bAWXcGYRYDOHVkGs.crl (hash: P7R6LeoJ//28Cf7yR3ZNG1CidZk/5DBTBxkdjJQBfos=)
2: ZCxXOfPObH4boT7reY7sJ5pWUzU.roa (hash: Tbh3eBRkhC/IgUecypI3j1+I4M5Pu1MDDQCmicyE7ec=)
3: rxFd7eqhMDq90CR2tb_lKkld3Lk.roa (hash: wqrxOaDhbmrdzLDEWz1pB4UyOw4VsIT4K3MNi4YvwdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:ff:d0:2e:5a:fe:4f:ad:e4:65:67:24:65:d2:1a:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9d7c57714ef40fdb0165dc1984580ce1d5906b
Validity
Not Before: Apr 20 07:00:41 2025 GMT
Not After : Apr 21 07:00:41 2025 GMT
Subject: CN=61ab5233f932cd219147dbab48cf4f820c36920d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d3:be:0e:f6:ec:ea:e9:04:4b:fb:85:5b:70:
c6:49:99:5e:57:7d:70:2c:99:dd:10:7c:08:eb:65:
a3:43:59:d7:cc:48:e2:f0:7f:d7:65:16:78:8b:70:
99:88:6a:aa:48:ce:0a:4a:cf:f7:8a:ca:0b:49:83:
11:0e:ba:3a:c2:d2:0a:5b:40:4e:df:03:76:61:13:
98:5f:43:3f:19:40:66:b9:6a:04:9c:d9:f5:6a:57:
07:43:22:25:83:ca:7c:ab:1a:c2:63:81:6a:be:95:
aa:a1:d3:83:59:25:5c:30:08:d8:6c:7c:a8:e7:ef:
84:41:5c:4c:73:c8:2e:48:75:4a:81:e1:0b:ad:ca:
7d:60:27:76:62:52:db:64:48:54:91:ef:72:47:76:
ce:30:b9:ab:6a:4b:b6:8b:4e:a5:47:1a:5e:c6:41:
fd:24:1d:11:ba:ea:1e:f0:69:34:45:16:e0:ee:20:
6b:b3:0b:bd:a1:63:4a:ff:2a:08:64:fd:78:7a:de:
82:b5:08:e8:94:fc:3d:21:d9:ef:09:95:3f:57:e8:
c4:65:45:5e:70:6e:75:a5:e7:c3:d8:77:f9:8a:4a:
61:53:f5:85:e1:2b:f2:94:35:41:19:f7:c6:42:3e:
88:d2:14:ea:a7:4e:46:e0:18:e8:b9:b2:61:e9:c0:
65:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:AB:52:33:F9:32:CD:21:91:47:DB:AB:48:CF:4F:82:0C:36:92:0D
X509v3 Authority Key Identifier:
keyid:DB:9D:7C:57:71:4E:F4:0F:DB:01:65:DC:19:84:58:0C:E1:D5:90:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:4f:e7:d4:fe:36:f5:cf:4a:7e:14:21:79:c9:d6:eb:b1:18:
d9:20:f3:d5:32:c4:b4:ed:36:6c:e3:28:6e:d1:c2:5f:09:cd:
79:8d:8b:9b:cf:92:b9:6b:6e:23:d9:93:51:e0:a7:14:38:f6:
7a:cb:4c:b7:d6:40:5b:eb:dd:32:bf:a0:d7:e8:05:9d:b4:60:
bc:5a:11:e7:04:56:91:09:75:4f:d3:b0:12:c8:ef:d2:f2:b8:
fc:42:1c:a2:68:9f:80:f3:26:02:29:79:08:28:62:e6:48:36:
2f:50:1a:99:88:3a:5a:45:22:a5:4c:c8:49:a8:1a:de:86:be:
82:1e:73:b5:8c:00:bb:d6:bf:b8:3c:74:64:d2:bd:47:c3:b8:
6a:7a:d3:ae:52:53:bf:67:ed:a4:0c:a7:89:c1:fc:42:f0:a5:
70:6a:cf:d9:3c:91:ae:75:b8:0e:52:72:93:f9:a1:f7:ff:90:
0d:4d:fb:25:86:ca:4a:48:71:6f:9e:5b:99:3e:f5:8b:01:cb:
27:47:63:7b:24:43:a2:ba:24:84:82:db:a1:8c:27:39:3e:a0:
2f:fb:6b:9b:af:af:67:55:97:af:74:21:db:a2:b9:df:10:1c:
46:9d:82:64:da:38:90:d7:da:5c:2e:b5:44:29:09:09:81:7d:
c9:1d:2f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:33:19 2025 by rpki-client