Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/37H24AFTpJGGEbFLawP2gS7YikM.mft
File: 37H24AFTpJGGEbFLawP2gS7YikM.mft (raw, json)
Hash identifier: VIW7JDgFwolWue6uM8AvXIcGHw3NE8iK2QmLZKd7ZPk=
Subject key identifier: 0A:09:1C:C9:CA:0E:1D:C9:63:C8:B2:8C:78:54:31:FA:2C:A1:06:10
Authority key identifier: DF:B1:F6:E0:01:53:A4:91:86:11:B1:4B:6B:03:F6:81:2E:D8:8A:43
Certificate issuer: /CN=dfb1f6e00153a4918611b14b6b03f6812ed88a43
Certificate serial: 0196146B7DE6B797C5FF7D6AAA90D92E7465
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/37H24AFTpJGGEbFLawP2gS7YikM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/37H24AFTpJGGEbFLawP2gS7YikM.mft
Manifest number: 0DE7
Signing time: Tue 08 Apr 2025 08:01:50 +0000
Manifest this update: Tue 08 Apr 2025 08:01:50 +0000
Manifest next update: Wed 09 Apr 2025 08:01:50 +0000
Files and hashes: 1: 37H24AFTpJGGEbFLawP2gS7YikM.crl (hash: KmNI6G//OuM2ZO8Z2CpJDCKvj3pYmV54Yame6R9KWo8=)
2: BTmp1b2H10lDEyqaD6QbLg-QUfA.roa (hash: N5JJaG9nV6D42/n2t32zZB6XXWBTeaXuJO0OLEH8EXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/37H24AFTpJGGEbFLawP2gS7YikM.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/37H24AFTpJGGEbFLawP2gS7YikM.mft
rsync://rpki.ripe.net/repository/DEFAULT/37H24AFTpJGGEbFLawP2gS7YikM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:14:6b:7d:e6:b7:97:c5:ff:7d:6a:aa:90:d9:2e:74:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfb1f6e00153a4918611b14b6b03f6812ed88a43
Validity
Not Before: Apr 8 08:01:50 2025 GMT
Not After : Apr 9 08:01:50 2025 GMT
Subject: CN=0a091cc9ca0e1dc963c8b28c785431fa2ca10610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:7b:24:4a:96:20:70:dd:d0:e5:7d:5c:ae:d1:
78:ca:5f:c1:03:1f:47:10:4d:2c:eb:4d:0c:5d:63:
62:3a:4c:60:c1:c0:61:00:3f:9e:8a:e4:d6:3a:2a:
4c:0c:2a:61:2a:ba:7c:86:48:87:bc:f1:49:09:48:
a6:b4:28:35:b6:9b:26:1a:4c:54:93:9a:29:bf:70:
85:1b:69:73:a6:56:6d:34:e8:48:c1:b0:ac:92:8f:
4e:04:25:02:06:16:9b:cf:9a:94:de:b8:da:5d:58:
56:86:41:11:14:8f:8c:e3:c8:14:10:ff:fc:82:85:
f2:84:18:ab:f0:6e:60:08:d7:c6:88:1c:30:a0:6d:
37:1f:be:8a:84:d5:bd:ce:b5:1e:88:43:ca:12:dd:
77:78:55:c8:b4:14:13:e9:48:c0:a4:96:a9:6c:4a:
a3:e6:df:d3:89:39:e6:4a:8e:ce:9d:c8:16:f2:71:
0b:0f:01:a5:a8:78:c1:9b:fc:32:b3:d5:8f:79:8c:
ec:b2:d6:bb:90:6d:02:b3:9f:24:6f:c2:87:03:2f:
e7:62:f6:47:6a:21:f4:ea:73:bc:fb:05:8a:e3:e2:
da:f1:f7:02:3a:fc:d8:6b:45:85:38:3a:76:95:f8:
cb:2c:2f:00:b8:90:50:38:b3:2f:46:5f:f4:0c:68:
68:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:09:1C:C9:CA:0E:1D:C9:63:C8:B2:8C:78:54:31:FA:2C:A1:06:10
X509v3 Authority Key Identifier:
keyid:DF:B1:F6:E0:01:53:A4:91:86:11:B1:4B:6B:03:F6:81:2E:D8:8A:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/37H24AFTpJGGEbFLawP2gS7YikM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/37H24AFTpJGGEbFLawP2gS7YikM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/37H24AFTpJGGEbFLawP2gS7YikM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:71:1a:8b:b7:37:e0:14:71:8f:0a:94:df:69:3b:98:c7:21:
ef:d6:4f:18:26:d6:a4:db:9d:cf:40:15:87:dd:13:ec:ea:c1:
06:98:e3:ee:bb:0a:fb:24:19:b3:ce:08:2b:20:ee:82:86:59:
e6:8e:11:79:5f:ed:8e:b7:80:c1:d0:09:bb:62:49:ee:94:ba:
ba:10:b6:a6:7c:34:83:be:53:6a:6e:80:b1:b0:f5:52:2d:e3:
b3:16:68:27:32:8c:7d:88:25:55:a1:83:6b:07:8a:33:28:31:
11:39:82:b2:78:7b:5c:37:65:5e:75:6a:65:3d:2f:43:a2:12:
3c:c6:d5:17:cd:b4:be:5c:97:89:86:9c:de:1f:0a:9d:5b:1b:
c9:c8:d8:d7:56:ef:2a:2c:1a:6b:7a:42:3e:a1:2d:4b:06:e5:
33:f8:bc:62:73:c9:0f:c3:78:9f:e4:6d:6e:4a:5a:1e:fc:42:
23:d1:c9:66:46:38:ba:ce:73:86:83:db:1b:48:2f:e9:89:05:
a5:e5:c8:ad:3d:48:b8:5b:63:9c:05:5e:31:9a:8f:d5:ef:40:
24:34:48:2f:28:91:24:ba:63:8b:35:4d:e1:bb:a5:a9:96:5e:
e1:5d:40:da:a4:20:13:bc:5a:7c:80:8f:ef:7e:f2:c0:be:1c:
5d:56:2a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:13:37 2025 by rpki-client