Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/EdGf2unFPY0oseQcqROcM1VrpiU.mft
File: EdGf2unFPY0oseQcqROcM1VrpiU.mft (raw, json)
Hash identifier: b5Q9yFJzGscZJ+4d9euEq/lNYf9k92QaaiPQvR9kKxA=
Subject key identifier: 72:70:A4:F5:97:64:19:E8:AC:D6:C2:BD:54:CC:57:E5:2D:72:C5:9B
Authority key identifier: 11:D1:9F:DA:E9:C5:3D:8D:28:B1:E4:1C:A9:13:9C:33:55:6B:A6:25
Certificate issuer: /CN=11d19fdae9c53d8d28b1e41ca9139c33556ba625
Certificate serial: 0196458D794B6A1510293FDB13929D55D606
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EdGf2unFPY0oseQcqROcM1VrpiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/EdGf2unFPY0oseQcqROcM1VrpiU.mft
Manifest number: 0955
Signing time: Thu 17 Apr 2025 21:00:21 +0000
Manifest this update: Thu 17 Apr 2025 21:00:21 +0000
Manifest next update: Fri 18 Apr 2025 21:00:21 +0000
Files and hashes: 1: EdGf2unFPY0oseQcqROcM1VrpiU.crl (hash: 1DQRiSwDzyPRuuIB16DL68/dqjtx/BZMCQx1G3iCRLI=)
2: hjbzdQG0z4fmkgxJ5yW_AFN2Z3I.roa (hash: FIaXEpRqjmfrs5VrZ6nFL+BtqxgLq2lRPch8+CMAMWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/EdGf2unFPY0oseQcqROcM1VrpiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/EdGf2unFPY0oseQcqROcM1VrpiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/EdGf2unFPY0oseQcqROcM1VrpiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:8d:79:4b:6a:15:10:29:3f:db:13:92:9d:55:d6:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11d19fdae9c53d8d28b1e41ca9139c33556ba625
Validity
Not Before: Apr 17 21:00:21 2025 GMT
Not After : Apr 18 21:00:21 2025 GMT
Subject: CN=7270a4f5976419e8acd6c2bd54cc57e52d72c59b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:91:d4:76:72:e8:10:9a:7a:34:35:41:08:c6:
d2:29:a5:c8:7b:74:5b:ce:14:0b:8c:29:48:df:c3:
6c:54:a8:2e:95:93:d4:d8:a2:70:d5:b2:07:9e:52:
65:56:91:a6:64:1c:89:60:ad:3d:74:f5:6f:d3:86:
55:f1:7e:e2:16:ea:dc:ed:6f:90:7b:2a:cd:58:d4:
e3:ae:30:13:71:cf:ad:22:2b:9b:15:e7:4e:50:b2:
2a:94:70:26:4c:b8:ed:1a:4a:0e:cc:87:fc:10:b6:
65:ad:35:ec:ff:fc:cd:7e:72:f0:3a:8b:c4:c8:80:
bf:96:f8:35:df:2b:3d:1d:6f:2e:b0:54:c9:01:af:
0d:d9:93:12:16:c7:90:aa:aa:b0:3f:04:ac:86:79:
ab:48:bc:42:0b:e6:8e:c8:b8:5f:d6:7c:92:13:e8:
5a:28:0a:45:83:8d:ed:e0:9b:b6:d3:3a:ce:e4:52:
4e:6b:be:3e:96:a3:43:41:c5:ef:dd:0a:20:1a:c2:
39:bd:f2:69:6d:d2:4a:39:10:b6:0c:a6:7d:bd:57:
30:6a:87:88:67:98:22:ad:7d:a9:08:84:c5:25:fa:
c4:97:a1:13:52:0e:fc:68:9b:d7:bc:e5:a3:be:3f:
a9:84:cb:b7:0a:9f:dd:a6:1c:73:4e:5a:fc:a2:15:
39:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:70:A4:F5:97:64:19:E8:AC:D6:C2:BD:54:CC:57:E5:2D:72:C5:9B
X509v3 Authority Key Identifier:
keyid:11:D1:9F:DA:E9:C5:3D:8D:28:B1:E4:1C:A9:13:9C:33:55:6B:A6:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EdGf2unFPY0oseQcqROcM1VrpiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/EdGf2unFPY0oseQcqROcM1VrpiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/EdGf2unFPY0oseQcqROcM1VrpiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:cd:96:d0:b4:c6:a5:08:b6:28:79:fa:d7:44:12:ac:7d:6f:
a2:56:ed:e4:5f:7a:e3:30:89:4d:e2:8d:27:64:16:5c:ec:d2:
0f:53:ee:8b:20:2d:1d:62:30:43:55:2b:81:33:0e:22:e9:4f:
1d:8c:a2:fc:19:88:4c:a2:9e:57:00:67:39:dd:8e:6d:c8:f4:
f5:fa:0b:39:6c:61:ea:1e:d4:5f:60:94:c8:f2:c4:52:7e:55:
74:a9:2a:ff:73:f8:06:72:a0:e2:e8:58:8e:51:59:90:5a:c2:
3d:e6:f1:08:2c:9f:01:5e:de:b7:10:75:2c:d9:50:0f:54:00:
90:24:4a:7c:89:01:ca:e7:bf:e6:86:1f:c2:9b:80:a3:a7:ca:
a3:9e:c2:5d:26:fe:92:e5:89:49:14:22:18:04:ff:ed:ca:8d:
6d:8f:a8:ee:f3:52:11:41:11:36:66:39:a1:6c:74:cb:ea:64:
cd:12:6d:10:1d:8b:85:50:d3:ea:04:5c:69:b9:f1:85:25:08:
9a:43:63:15:0b:2c:7a:24:94:ba:8c:1f:8d:8c:32:57:30:04:
e2:8a:c0:ac:cd:57:9c:46:1b:62:ae:66:fc:e9:8e:ce:a9:82:
7e:78:de:3c:ab:39:ba:87:dd:b1:de:9d:e4:43:52:42:42:f0:
83:a8:45:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:53:56 2025 by rpki-client