Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/f7761a-fc38-475c-8a11-94c73346c0ea/1/exPgVmn1VmYr7FZk4QFln5Zsgmo.mft
File: exPgVmn1VmYr7FZk4QFln5Zsgmo.mft (raw, json)
Hash identifier: mABllmZ1FQQAh65PIhd9g4jRcAhwkZ/ULnDtI4M7jTQ=
Subject key identifier: 84:71:1E:CF:7F:3C:29:F4:E5:23:F0:3A:6A:CC:82:BE:F8:EE:14:9F
Authority key identifier: 7B:13:E0:56:69:F5:56:66:2B:EC:56:64:E1:01:65:9F:96:6C:82:6A
Certificate issuer: /CN=7b13e05669f556662bec5664e101659f966c826a
Certificate serial: 019616C7015243D3449E14D8B8A963FB1752
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/exPgVmn1VmYr7FZk4QFln5Zsgmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/f7761a-fc38-475c-8a11-94c73346c0ea/1/exPgVmn1VmYr7FZk4QFln5Zsgmo.mft
Manifest number: 0BBE
Signing time: Tue 08 Apr 2025 19:01:02 +0000
Manifest this update: Tue 08 Apr 2025 19:01:02 +0000
Manifest next update: Wed 09 Apr 2025 19:01:02 +0000
Files and hashes: 1: HyKdTkKV5STn1J4Rxe8JxbMCpv4.roa (hash: 6If9g5ZI4fy1JxA85rEnX+2Sovu9Js7JocSs132zGS0=)
2: exPgVmn1VmYr7FZk4QFln5Zsgmo.crl (hash: o2aGALJ6cfYdCSyOe696tDhv2gWiqeLCYssj3b7pKOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/f7761a-fc38-475c-8a11-94c73346c0ea/1/exPgVmn1VmYr7FZk4QFln5Zsgmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/f7761a-fc38-475c-8a11-94c73346c0ea/1/exPgVmn1VmYr7FZk4QFln5Zsgmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/exPgVmn1VmYr7FZk4QFln5Zsgmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 19:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:16:c7:01:52:43:d3:44:9e:14:d8:b8:a9:63:fb:17:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b13e05669f556662bec5664e101659f966c826a
Validity
Not Before: Apr 8 19:01:02 2025 GMT
Not After : Apr 9 19:01:02 2025 GMT
Subject: CN=84711ecf7f3c29f4e523f03a6acc82bef8ee149f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:28:20:02:b1:14:af:64:7a:64:d5:90:5c:2b:
41:10:17:05:33:58:0f:43:5d:db:bc:6b:93:72:7c:
49:5f:70:e1:26:f1:a2:fb:a9:5e:a7:33:34:28:c7:
8c:f8:c4:72:cf:22:7b:4c:77:0d:3f:a6:76:aa:52:
b6:0b:a2:fd:c0:8b:e0:7d:2d:90:eb:70:14:4e:b6:
c8:d8:ac:7a:89:fe:bb:26:7d:6c:1f:ef:68:6b:c6:
bd:80:1b:63:36:45:d6:d2:7e:f0:d4:1f:dd:ac:e7:
c4:cd:3d:b8:df:93:a8:b3:5c:da:01:cc:84:79:bf:
ce:d2:cc:6b:05:d9:5b:d5:c8:e9:a7:ae:48:fa:02:
d2:ac:02:ea:19:d5:32:62:16:42:48:86:e7:c4:99:
28:0c:ed:e6:16:38:af:83:94:0c:18:ca:0a:9d:7b:
f3:e7:2b:0c:be:a8:0f:f9:13:f5:ee:1f:94:05:b4:
f6:d8:1f:19:1f:e2:7f:c2:ab:29:08:7a:7c:b4:65:
a6:49:a8:30:d5:e5:94:c2:e5:03:e4:ac:78:ba:c3:
2c:88:7e:4f:a9:05:0a:c2:e7:27:d7:b2:2b:c0:60:
6f:d6:8c:45:4e:d2:b7:55:e8:b2:2e:fe:2c:e9:2c:
f4:39:ac:f7:c8:e4:98:53:b0:7e:2e:98:95:a2:2b:
79:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:71:1E:CF:7F:3C:29:F4:E5:23:F0:3A:6A:CC:82:BE:F8:EE:14:9F
X509v3 Authority Key Identifier:
keyid:7B:13:E0:56:69:F5:56:66:2B:EC:56:64:E1:01:65:9F:96:6C:82:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/exPgVmn1VmYr7FZk4QFln5Zsgmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/f7761a-fc38-475c-8a11-94c73346c0ea/1/exPgVmn1VmYr7FZk4QFln5Zsgmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/f7761a-fc38-475c-8a11-94c73346c0ea/1/exPgVmn1VmYr7FZk4QFln5Zsgmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:89:cb:14:b9:51:a7:a7:eb:cc:43:54:53:c1:05:4c:ab:f6:
bd:75:12:e6:38:04:71:e2:6d:b3:08:8b:9e:81:92:a1:20:1e:
08:08:7e:05:0b:22:0b:ad:6f:77:f6:2a:01:e3:57:99:24:17:
d7:9d:89:68:33:2b:65:49:f4:2c:3c:6b:9d:81:e6:18:91:a8:
a6:27:cc:f1:32:91:1b:09:30:5d:c3:6f:33:2e:ba:34:c6:48:
6d:be:72:1d:3b:96:24:70:86:45:ed:c0:d7:30:f1:53:8a:6c:
fb:13:be:ec:c6:ad:6f:16:61:b3:ba:a5:24:4d:e7:af:7a:a6:
11:97:3a:ad:84:19:17:5c:e0:e1:65:90:b5:5e:33:13:6f:fb:
e8:95:35:5a:52:c2:fb:26:fe:b2:12:c1:47:7f:f5:d7:2e:cb:
2e:30:c1:b4:6c:5f:b8:f5:d4:81:04:8b:99:a5:16:47:0a:b6:
80:74:eb:af:83:0b:f1:3a:d7:7a:42:56:17:69:c4:f9:03:fc:
28:98:0b:8d:61:73:ee:64:db:1f:cc:a0:38:00:de:03:24:85:
b7:c4:d2:53:0b:e2:a9:c7:a8:8a:e3:cd:32:f7:21:8f:46:34:
cf:63:45:ef:ee:1d:42:17:51:0e:a4:1b:f1:5c:96:03:ef:2c:
d6:40:76:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:53:46 2025 by rpki-client