Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/cd555b-f73e-48ad-b544-e3eb4e8a38db/1/rQt55LWcX82kk6IK0Y6UVYWdAxs.mft
File: rQt55LWcX82kk6IK0Y6UVYWdAxs.mft (raw, json)
Hash identifier: j9p7NDuSKyEfY1VzItQapOPiT7Epo14R7fVBU+TdKn8=
Subject key identifier: AE:A7:FE:60:0E:1B:3A:D6:1D:14:C8:58:DB:E4:69:6B:7E:DC:82:F4
Authority key identifier: AD:0B:79:E4:B5:9C:5F:CD:A4:93:A2:0A:D1:8E:94:55:85:9D:03:1B
Certificate issuer: /CN=ad0b79e4b59c5fcda493a20ad18e9455859d031b
Certificate serial: 019651C975C6EA2E8361CDE8902F1BB8FE80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQt55LWcX82kk6IK0Y6UVYWdAxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/cd555b-f73e-48ad-b544-e3eb4e8a38db/1/rQt55LWcX82kk6IK0Y6UVYWdAxs.mft
Manifest number: 14FF
Signing time: Sun 20 Apr 2025 06:01:19 +0000
Manifest this update: Sun 20 Apr 2025 06:01:19 +0000
Manifest next update: Mon 21 Apr 2025 06:01:19 +0000
Files and hashes: 1: rQt55LWcX82kk6IK0Y6UVYWdAxs.crl (hash: 16ijx7pxOGzQMSpuOwjdSQ/GbQD1wwDCah1whHzSpXg=)
2: u-TIzzCbIsSdGOd1CtfNEcgemko.roa (hash: DN7JFzlpz7Go6ldmAhoYI+Qwq1vNoGjP9zoXjX6dqwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/cd555b-f73e-48ad-b544-e3eb4e8a38db/1/rQt55LWcX82kk6IK0Y6UVYWdAxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/cd555b-f73e-48ad-b544-e3eb4e8a38db/1/rQt55LWcX82kk6IK0Y6UVYWdAxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/rQt55LWcX82kk6IK0Y6UVYWdAxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 06:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:c9:75:c6:ea:2e:83:61:cd:e8:90:2f:1b:b8:fe:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0b79e4b59c5fcda493a20ad18e9455859d031b
Validity
Not Before: Apr 20 06:01:19 2025 GMT
Not After : Apr 21 06:01:19 2025 GMT
Subject: CN=aea7fe600e1b3ad61d14c858dbe4696b7edc82f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0c:db:1c:69:71:2a:3f:61:29:95:89:3f:90:
f3:4c:e4:cb:e0:e0:cb:e8:b9:f2:f4:03:24:f0:4d:
b0:6b:b8:3b:fe:20:d5:e4:6b:5a:5d:3e:16:2d:6c:
ba:71:2c:2b:b1:e9:26:d7:0c:15:f1:fb:d0:b4:7a:
38:d6:58:b2:d7:6a:e4:39:30:be:13:cf:fd:e7:6c:
cd:ff:d7:34:ef:f7:79:06:24:70:d0:58:ba:15:c9:
95:7f:c1:b2:2d:b9:fa:d9:45:84:ad:fc:d0:ee:1b:
9e:a7:54:d2:c9:3e:89:a9:d7:e6:49:43:c8:a8:28:
58:45:e1:51:0f:03:ca:ba:bc:fd:b2:82:b3:ae:28:
df:b2:43:12:75:57:44:fa:0c:38:e8:4b:a3:8f:ee:
1f:85:02:90:d4:9c:7e:50:e4:c1:4c:41:93:2e:f4:
11:d3:86:0c:5b:bd:98:6c:26:95:c5:26:46:74:b7:
ba:ca:1b:8e:a8:86:e7:34:47:34:b7:29:d6:67:02:
8d:45:cb:08:11:fc:69:9f:bf:34:d0:31:ee:03:bc:
31:0d:40:21:d4:dd:f0:12:ef:40:3c:2a:e0:f9:c7:
17:ee:8e:3b:5d:66:35:4b:84:28:02:ec:cc:5d:8e:
84:52:88:ce:7e:35:7d:02:a7:81:9f:c3:cf:55:1c:
e6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:A7:FE:60:0E:1B:3A:D6:1D:14:C8:58:DB:E4:69:6B:7E:DC:82:F4
X509v3 Authority Key Identifier:
keyid:AD:0B:79:E4:B5:9C:5F:CD:A4:93:A2:0A:D1:8E:94:55:85:9D:03:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQt55LWcX82kk6IK0Y6UVYWdAxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/cd555b-f73e-48ad-b544-e3eb4e8a38db/1/rQt55LWcX82kk6IK0Y6UVYWdAxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/cd555b-f73e-48ad-b544-e3eb4e8a38db/1/rQt55LWcX82kk6IK0Y6UVYWdAxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:d4:49:db:7e:7a:60:e5:5e:cb:5d:ec:fe:8e:6b:38:38:2e:
b1:66:51:33:b9:4b:9f:80:3b:ad:f9:4f:d6:62:cc:d3:73:72:
88:77:c2:c8:21:e8:80:65:8c:d6:86:09:90:34:2c:31:b5:19:
1a:7f:9a:bd:79:e3:af:84:36:12:b0:9a:cb:33:e6:0d:05:b6:
7a:19:a0:d0:b1:64:8c:34:1b:c5:13:ad:8c:49:d2:a4:c8:06:
29:43:92:ed:f2:b2:84:67:00:78:b3:06:0a:80:05:82:82:90:
b9:04:5d:ba:1d:50:4f:3b:99:f3:95:b4:92:31:49:09:0f:48:
9e:55:c9:32:a3:2d:ae:2d:b9:8c:e8:31:1a:6f:6f:27:b2:83:
2d:8c:b6:ca:85:b8:1b:9d:50:7c:61:77:3d:90:f8:1a:2d:e7:
83:44:43:3c:8c:57:a7:e6:50:dc:2c:f2:3f:f8:20:68:8d:88:
b4:42:7b:b3:b0:69:11:e7:eb:c9:ba:0a:04:c4:2d:a2:44:32:
bb:0b:75:41:40:28:d8:9c:14:81:2a:92:4a:72:5e:0b:ef:35:
f8:77:c5:6f:32:7e:87:5e:ff:ef:45:65:50:50:e6:f9:7a:8a:
dc:2c:2c:a5:a6:2e:b6:bc:7c:08:e4:a3:c2:81:68:69:b4:00:
96:6b:89:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:14:53 2025 by rpki-client