Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.mft
File: r-xPShbMUb1RYhARU5zrV0rBXQI.mft (raw, json)
Hash identifier: FCerAWDJYPSB97oP2BTemEKSPXvUP3geZ32Z6YVTYOs=
Subject key identifier: E8:4A:7B:6C:D4:9B:44:93:FA:11:51:90:4A:D8:41:AA:47:CB:AD:1A
Authority key identifier: AF:EC:4F:4A:16:CC:51:BD:51:62:10:11:53:9C:EB:57:4A:C1:5D:02
Certificate issuer: /CN=afec4f4a16cc51bd51621011539ceb574ac15d02
Certificate serial: 0196564A5926ACEE811DB4B601F741069435
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-xPShbMUb1RYhARU5zrV0rBXQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.mft
Manifest number: 1504
Signing time: Mon 21 Apr 2025 03:00:35 +0000
Manifest this update: Mon 21 Apr 2025 03:00:35 +0000
Manifest next update: Tue 22 Apr 2025 03:00:35 +0000
Files and hashes: 1: 0kNkc387z7I2x4Yteehk0180PTE.roa (hash: Zuu2mJeRDdNqByIOk7bup5wFBYcY2Qe7ktpeoS994ec=)
2: Lul3hUvdV6C5cSn0ykUAxQPhSaQ.roa (hash: q+jHwWcary8atsFBUa3Y/27z3nJW8U1gs5fNpNDELkU=)
3: PIRRrWFSYrZNmeAa6_-TvMTmD6Q.roa (hash: V3+P79bG0jSa7b+MpAG52JNhfjYjObP7ww4sVt5PAYs=)
4: r-xPShbMUb1RYhARU5zrV0rBXQI.crl (hash: 5SoWqRwGcwe7Nm0D4UHyAp6Lw3dU+9qiB0r+rQTFKyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-xPShbMUb1RYhARU5zrV0rBXQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:4a:59:26:ac:ee:81:1d:b4:b6:01:f7:41:06:94:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afec4f4a16cc51bd51621011539ceb574ac15d02
Validity
Not Before: Apr 21 03:00:35 2025 GMT
Not After : Apr 22 03:00:35 2025 GMT
Subject: CN=e84a7b6cd49b4493fa1151904ad841aa47cbad1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f3:4d:df:0f:12:eb:80:5b:c2:b3:d4:6a:1e:
4f:07:4d:5d:e5:f1:bc:6b:fc:17:f1:43:94:40:f0:
bf:de:b0:6a:e1:13:f6:da:be:e7:d6:06:3b:e2:54:
b4:cd:05:28:7b:0d:36:05:f1:51:c9:6c:33:0b:ee:
23:d9:d4:02:d9:84:53:d7:b4:26:65:4d:dc:4d:61:
35:2e:62:75:07:40:83:f8:e4:1a:53:88:41:7a:0f:
06:51:73:11:12:01:b9:f1:df:10:e4:e1:47:b7:0f:
c2:9b:d9:60:c1:48:4c:a4:ca:58:d4:23:73:0c:75:
ab:35:34:a3:f7:0d:f1:63:8a:b3:3d:3b:d7:ec:32:
08:b6:e8:27:0a:54:4a:a0:69:c8:5c:3a:9b:3b:69:
0a:71:a1:61:98:f0:86:8d:24:6a:7c:9f:1d:4a:52:
cc:c4:e0:e1:98:12:16:0a:45:01:f0:16:3d:1b:91:
02:b0:fb:31:eb:dd:5b:37:ac:99:5c:84:44:77:23:
1b:fc:34:5e:80:d6:d1:26:a5:46:5d:fd:86:40:d9:
59:9a:c2:78:c3:a1:fe:ec:6d:4f:3b:b6:ae:b2:17:
7f:a4:6e:96:3c:74:2b:bf:64:90:8b:1a:e7:74:01:
1c:64:ff:8b:13:5b:ee:bc:64:6f:e5:9d:ba:57:d2:
a6:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:4A:7B:6C:D4:9B:44:93:FA:11:51:90:4A:D8:41:AA:47:CB:AD:1A
X509v3 Authority Key Identifier:
keyid:AF:EC:4F:4A:16:CC:51:BD:51:62:10:11:53:9C:EB:57:4A:C1:5D:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-xPShbMUb1RYhARU5zrV0rBXQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:20:b6:46:cd:14:88:a7:c4:b5:91:bd:89:c8:1a:a9:e6:05:
d0:14:53:ff:c6:24:0f:9d:ed:53:02:fb:f5:1d:fb:37:83:8b:
5e:03:02:59:43:fe:5c:60:2a:40:01:63:c3:c2:c8:a7:7a:47:
60:8e:7e:bd:8e:30:60:c7:ab:eb:f4:0b:96:4c:6d:78:2d:e4:
e7:db:1e:90:94:69:c8:00:90:e6:49:27:05:60:4f:96:bb:29:
9e:bc:7a:b5:a3:44:7d:c9:bc:78:2e:35:3e:8e:96:fa:6d:90:
62:c5:4d:46:f7:5e:d9:7d:d4:42:61:7b:7e:fa:52:bc:c7:1a:
5d:b1:f0:cf:62:d3:42:5c:35:86:66:51:7f:74:6d:23:1f:86:
4a:2c:ed:e6:ce:5a:dc:fc:09:e4:4f:aa:96:45:70:52:15:cb:
2e:f0:c4:4d:08:47:b6:12:1c:f4:6c:58:06:dd:28:9c:f2:e8:
66:8f:6f:d7:30:af:d1:29:27:b8:b9:f4:26:75:46:a5:c3:ae:
3b:e8:79:9a:6e:91:ba:17:84:29:78:60:75:76:7a:6e:74:a8:
0c:59:87:fd:f7:ef:85:89:03:72:51:ce:25:05:6d:4e:f6:21:
1e:55:8d:1d:0d:e2:fc:10:f0:74:c4:69:b8:cb:c1:9a:e0:83:
17:80:08:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:33:53 2025 by rpki-client