Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.mft
File: MtRJGf3QivuaTQqHeJIwESUd1_A.mft (raw, json)
Hash identifier: BOtWi4Zn97Ib1m5P7P4YBiEKGIkhKrDExiLICtOwH6k=
Subject key identifier: 56:76:6F:CB:04:E4:1E:DA:5A:8E:5B:30:73:E6:08:0D:81:C1:2B:A0
Authority key identifier: 32:D4:49:19:FD:D0:8A:FB:9A:4D:0A:87:78:92:30:11:25:1D:D7:F0
Certificate issuer: /CN=32d44919fdd08afb9a4d0a8778923011251dd7f0
Certificate serial: 01965123E4D296757BF2AD969914BAD2A6D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.mft
Manifest number: 0B7E
Signing time: Sun 20 Apr 2025 03:00:28 +0000
Manifest this update: Sun 20 Apr 2025 03:00:28 +0000
Manifest next update: Mon 21 Apr 2025 03:00:28 +0000
Files and hashes: 1: EcMSrqduSSEdpF-7ulVjTtPYpNE.roa (hash: ZA8qM0bISMva3I03nVcIL7KQUByRBGHdqun/Plkp8KA=)
2: MtRJGf3QivuaTQqHeJIwESUd1_A.crl (hash: ot6oj+Tc7GJftE9hfRvYzCNVdBqFcp724DBmjQfJZ1I=)
3: ant41ZKD96l4WAVLo9wrXso0aLA.roa (hash: 4K6WUz90Jye7WV1VDdQMdxKlwlzmRn7OIrbr4mY6WUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:23:e4:d2:96:75:7b:f2:ad:96:99:14:ba:d2:a6:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32d44919fdd08afb9a4d0a8778923011251dd7f0
Validity
Not Before: Apr 20 03:00:28 2025 GMT
Not After : Apr 21 03:00:28 2025 GMT
Subject: CN=56766fcb04e41eda5a8e5b3073e6080d81c12ba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9c:e9:d7:48:33:51:c7:50:12:87:70:8a:38:
76:94:5f:8e:27:5a:7b:06:9b:f9:23:72:94:fc:43:
83:00:66:95:b1:77:5c:4b:5c:3c:d4:d7:24:29:96:
cf:9f:cb:de:c9:f8:7d:a7:ad:85:93:6e:f0:68:70:
15:16:d5:98:51:62:ea:30:95:db:13:b7:96:23:e2:
a2:06:39:7a:2a:f6:c6:1d:d7:fe:b4:ca:8b:7f:4b:
c0:a4:24:f3:58:ea:60:00:87:0c:ab:51:91:04:04:
ce:4e:c1:da:be:95:3c:ca:3c:0b:e6:69:8a:db:ae:
b5:8d:c5:59:94:1f:a5:cc:03:03:87:0e:85:63:e5:
99:18:61:78:c9:4f:47:10:00:bc:e4:f3:65:89:be:
31:78:8b:c6:5c:c8:3e:07:37:a1:ef:b7:df:53:12:
35:4e:55:40:0b:8b:2c:fd:f8:77:c4:03:f9:09:a4:
dd:e8:50:61:0a:c8:25:33:eb:37:2b:34:4b:8a:e5:
fa:1f:c3:ee:7f:0e:e6:19:5f:75:3b:f3:fc:af:67:
87:e3:2a:42:58:d6:31:bd:1e:e6:1f:90:c6:77:0b:
dc:12:35:11:20:c7:72:11:cb:45:06:b2:16:73:dd:
4d:3c:82:4b:06:f3:7b:bf:f7:f2:a8:af:e2:b0:8f:
5d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:76:6F:CB:04:E4:1E:DA:5A:8E:5B:30:73:E6:08:0D:81:C1:2B:A0
X509v3 Authority Key Identifier:
keyid:32:D4:49:19:FD:D0:8A:FB:9A:4D:0A:87:78:92:30:11:25:1D:D7:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:3f:9b:ae:f1:b5:aa:4e:c9:a2:48:8d:aa:fc:4e:fb:60:e0:
b3:2a:f7:a8:7c:4d:47:b7:e6:7c:51:e2:31:c3:a2:52:85:43:
9d:3c:f4:65:4e:ff:7a:fb:8f:76:87:1a:8b:88:70:d3:08:91:
90:e8:93:06:51:52:60:ab:ee:20:59:ed:d1:dc:09:27:40:bc:
ac:00:9d:85:41:41:dc:ce:1a:28:7f:48:ee:c5:01:66:26:68:
b4:3d:8e:2c:cf:1b:f6:24:b4:9f:9c:35:ff:c8:a8:c9:a2:82:
e3:d9:f2:1c:b5:ed:a6:52:a9:63:3e:55:43:1b:25:d3:e5:70:
1d:de:b2:c2:3b:43:8d:1c:82:62:e3:60:f0:5b:6c:74:79:24:
67:da:5a:4f:c0:e9:11:82:1a:47:21:43:91:da:a2:ec:ee:f8:
5c:03:1b:d3:bd:7b:48:03:57:f9:d0:dd:0d:1e:13:c7:00:dc:
c1:be:ba:32:8a:61:03:8e:27:4f:f5:ff:1c:f8:4a:39:7c:42:
cf:5f:61:28:44:3a:66:9f:d6:c0:fb:e2:06:1a:fd:f4:ae:23:
e8:4a:c7:ba:9b:91:78:5b:de:55:f5:b7:01:47:8e:45:3e:c0:
c6:a4:f7:cb:d9:61:64:22:f7:3b:da:9f:98:9d:db:08:14:2f:
a0:b4:8d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:51:55 2025 by rpki-client