Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.mft
File: Ba15SS6AmTTWk7EYVedRAyQVaes.mft (raw, json)
Hash identifier: PpcUQ1O2DutixssBr8Bq0YIessqDY42wjkmeqFRkjV0=
Subject key identifier: F4:57:2A:81:58:2C:0C:DD:15:59:71:BF:58:BC:C3:51:E2:63:ED:7E
Authority key identifier: 05:AD:79:49:2E:80:99:34:D6:93:B1:18:55:E7:51:03:24:15:69:EB
Certificate issuer: /CN=05ad79492e809934d693b11855e75103241569eb
Certificate serial: 019612EAC063C7AF0B4FC1AE0181C07F4396
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ba15SS6AmTTWk7EYVedRAyQVaes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.mft
Manifest number: 146E
Signing time: Tue 08 Apr 2025 01:01:36 +0000
Manifest this update: Tue 08 Apr 2025 01:01:36 +0000
Manifest next update: Wed 09 Apr 2025 01:01:36 +0000
Files and hashes: 1: 0ZEHwJyA2KHuRsRQifM_9J9E2UY.roa (hash: 1DO414ntcLEzGPYsqi1T9pktOlbe8IXJos67T1vJeiY=)
2: 1UI6HT_8GUtsbAt1u0K32h0qEv8.roa (hash: RqgJutHKgdkCSusd/ckZpEoLNhIYSrs1ZKahvFk+D38=)
3: Ba15SS6AmTTWk7EYVedRAyQVaes.crl (hash: Zb58GO3xP0s6/vKyifvc8x164VJclkZPXJ8ziV8t1rM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ba15SS6AmTTWk7EYVedRAyQVaes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:12:ea:c0:63:c7:af:0b:4f:c1:ae:01:81:c0:7f:43:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05ad79492e809934d693b11855e75103241569eb
Validity
Not Before: Apr 8 01:01:36 2025 GMT
Not After : Apr 9 01:01:36 2025 GMT
Subject: CN=f4572a81582c0cdd155971bf58bcc351e263ed7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:44:41:6b:52:05:cc:b0:87:c3:4f:37:55:4c:
1f:4b:9e:9f:e9:0f:cd:06:4e:22:4b:83:66:41:55:
39:3f:3f:b3:d3:4b:dc:9c:9b:89:d3:fa:b0:1e:2f:
0a:6a:76:77:37:cc:c0:bf:09:fc:2b:f5:1e:9b:67:
dc:37:ff:39:81:01:c0:5c:36:80:e8:47:79:16:08:
c1:1f:a7:a4:23:58:c2:00:04:5c:bf:73:34:d6:e5:
a0:bf:0a:ae:2d:6b:9c:4c:50:f1:a0:0e:d2:ce:3b:
36:6d:2a:47:84:6c:1a:d2:39:eb:17:f0:9a:c5:38:
ab:8d:7d:bb:8b:b3:f3:ef:6e:a5:59:03:76:b7:04:
36:11:e0:e5:06:a1:ea:02:c7:75:ce:e7:86:91:12:
5f:82:6e:c8:f9:a4:06:d9:65:f3:d8:6b:d8:95:26:
fd:d9:78:1f:ec:af:83:f5:d7:3f:aa:21:9f:4c:3e:
bf:cd:9c:90:1f:1d:d5:28:e9:2d:f0:81:1e:85:ab:
af:2c:b9:be:50:b7:35:89:4b:07:e2:aa:f1:63:c0:
53:df:ab:a2:f4:25:e8:07:31:89:38:2f:df:f7:1f:
db:16:b0:9f:35:20:53:5e:bc:0c:99:49:b6:50:9c:
b8:49:94:d9:26:d9:d8:83:04:e3:00:81:91:db:a7:
23:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:57:2A:81:58:2C:0C:DD:15:59:71:BF:58:BC:C3:51:E2:63:ED:7E
X509v3 Authority Key Identifier:
keyid:05:AD:79:49:2E:80:99:34:D6:93:B1:18:55:E7:51:03:24:15:69:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ba15SS6AmTTWk7EYVedRAyQVaes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:d9:8d:38:63:5e:da:52:21:fb:c0:af:f3:e2:40:df:b5:48:
f1:d9:24:0c:ed:9c:3a:6c:ca:14:23:68:85:7c:f7:c5:7a:60:
f8:af:d0:ea:69:6a:10:08:81:c5:14:ee:2f:d1:68:7c:ae:01:
0a:4a:77:3d:db:c3:d6:90:cf:1f:96:6d:15:81:ab:7e:a6:b8:
67:85:35:26:53:23:8f:84:38:d1:c2:ac:b8:a5:3a:f3:c9:79:
93:35:42:81:e5:cf:45:bb:29:24:68:3b:99:fa:9c:ba:d0:e3:
22:97:53:78:4b:2a:75:85:79:62:ef:34:d7:88:74:b6:01:a8:
7d:8e:23:b5:05:9e:9d:e2:9f:b5:65:dd:10:4a:ed:c3:75:fe:
13:b8:3d:18:95:dc:e9:98:fb:66:59:4c:16:2b:24:1a:62:08:
35:47:fd:2b:8a:20:89:f9:66:34:91:56:34:30:ae:aa:c2:6f:
75:39:f5:0d:aa:40:d6:05:94:d3:6a:e1:9c:a1:29:35:51:06:
ad:5c:e2:36:ca:65:ab:7b:fb:5d:43:22:90:ce:2e:ad:ab:f7:
96:f7:be:81:f5:a4:82:35:27:9e:35:a7:77:f2:92:39:44:37:
7f:8f:76:84:ec:75:f9:25:8e:26:17:60:f9:ca:05:28:4c:38:
12:d7:3d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:28:55 2025 by rpki-client