Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/6cc297-105b-425c-b983-956330170670/1/dVebPdiwkr6Q2p90gOp2HpzSZIY.mft
File: dVebPdiwkr6Q2p90gOp2HpzSZIY.mft (raw, json)
Hash identifier: Hsnm7X+hv5hj2JgfG/YVpA7t1q1GH0vpDuZfSty+1bs=
Subject key identifier: 29:AD:C7:CC:E6:43:0D:DD:EE:E9:A4:3C:97:2B:14:D7:73:10:7F:40
Authority key identifier: 75:57:9B:3D:D8:B0:92:BE:90:DA:9F:74:80:EA:76:1E:9C:D2:64:86
Certificate issuer: /CN=75579b3dd8b092be90da9f7480ea761e9cd26486
Certificate serial: 0196447B69CEA4B89575E0B5EBAE926BD54D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dVebPdiwkr6Q2p90gOp2HpzSZIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/6cc297-105b-425c-b983-956330170670/1/dVebPdiwkr6Q2p90gOp2HpzSZIY.mft
Manifest number: 14F7
Signing time: Thu 17 Apr 2025 16:01:00 +0000
Manifest this update: Thu 17 Apr 2025 16:01:00 +0000
Manifest next update: Fri 18 Apr 2025 16:01:00 +0000
Files and hashes: 1: _q_4z0J5i384UaXDQJYWs6HPoTM.roa (hash: b9Q87HIqk0+LBterNnXAl95RMpu5d8FMkhgmGh/3VlI=)
2: dVebPdiwkr6Q2p90gOp2HpzSZIY.crl (hash: cPMtf+bKou5VxBoALdNeCySxX3QigOIrfVB6JEfNYAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/6cc297-105b-425c-b983-956330170670/1/dVebPdiwkr6Q2p90gOp2HpzSZIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/6cc297-105b-425c-b983-956330170670/1/dVebPdiwkr6Q2p90gOp2HpzSZIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dVebPdiwkr6Q2p90gOp2HpzSZIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:7b:69:ce:a4:b8:95:75:e0:b5:eb:ae:92:6b:d5:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75579b3dd8b092be90da9f7480ea761e9cd26486
Validity
Not Before: Apr 17 16:01:00 2025 GMT
Not After : Apr 18 16:01:00 2025 GMT
Subject: CN=29adc7cce6430dddeee9a43c972b14d773107f40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ee:2d:2f:d5:c7:bd:00:57:a7:8e:1b:bd:58:
ad:ca:c2:82:54:84:60:b8:30:a9:79:87:1d:e5:95:
f6:74:46:b6:e9:40:78:a7:81:30:e2:b6:9a:53:2a:
b5:40:34:34:98:64:11:3a:47:ee:17:ad:4b:1b:0d:
f4:1f:5d:f1:a7:ed:17:9b:29:0b:50:5d:54:37:25:
bc:3c:0b:c5:37:65:bf:3d:65:2f:8b:e9:da:e7:e5:
d9:b6:7a:67:55:99:ec:be:4d:cd:e9:8e:00:80:96:
2c:af:dc:df:01:3b:13:e5:cc:f2:9a:7d:d3:d6:1a:
36:67:f1:4a:cc:f9:0a:cf:40:7f:42:a1:14:f6:6d:
c1:a7:58:9a:c7:44:81:ec:63:0d:3d:de:e3:9e:98:
17:8a:38:1e:77:1f:29:02:70:ba:b6:ff:5c:cf:53:
25:11:0c:54:08:17:cc:77:88:97:49:de:fe:3c:d1:
53:77:79:af:f1:d3:a5:7d:79:c8:e3:6c:d2:e0:9f:
73:64:f3:55:a2:4e:61:45:55:d4:38:ec:26:1d:2f:
d8:48:e0:85:4c:a8:e4:f3:69:cf:44:8e:6c:e5:de:
71:0b:99:d5:aa:b4:0b:f7:0f:22:52:a3:89:79:65:
b3:a9:4b:b5:e4:99:69:4d:c3:3f:90:69:f3:77:a6:
72:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:AD:C7:CC:E6:43:0D:DD:EE:E9:A4:3C:97:2B:14:D7:73:10:7F:40
X509v3 Authority Key Identifier:
keyid:75:57:9B:3D:D8:B0:92:BE:90:DA:9F:74:80:EA:76:1E:9C:D2:64:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVebPdiwkr6Q2p90gOp2HpzSZIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6cc297-105b-425c-b983-956330170670/1/dVebPdiwkr6Q2p90gOp2HpzSZIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6cc297-105b-425c-b983-956330170670/1/dVebPdiwkr6Q2p90gOp2HpzSZIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:52:89:29:e7:a5:22:67:d3:c7:f5:b6:37:c3:5c:28:94:8e:
3b:38:da:25:00:31:0f:81:89:35:29:24:7d:85:cb:4f:e9:c9:
67:61:40:87:29:aa:52:3f:19:02:61:c5:73:02:91:55:0b:ab:
cd:a0:b3:e8:af:00:ae:02:32:0b:72:c6:1d:cd:c8:d4:d8:70:
d2:38:3d:67:ae:9e:01:a9:24:07:29:28:b6:be:40:19:bb:0b:
dd:a4:ef:0b:ca:03:01:94:76:98:ff:92:23:02:33:2d:5b:b0:
c5:90:c0:f0:11:f7:a5:c2:fb:35:e8:e5:54:26:08:f7:b9:35:
5d:69:24:12:80:76:4b:c0:4e:0e:50:e3:b3:d4:60:82:dd:f9:
e5:66:f6:67:5c:e8:fe:36:b0:c7:a9:d3:cf:62:f8:6f:67:98:
31:8b:53:94:a7:3f:40:d0:5f:e9:e5:5d:ab:25:68:05:66:d0:
1a:05:50:1a:aa:df:19:c3:af:d1:dc:78:c7:86:2f:20:d1:84:
2b:cd:0a:5d:12:f8:28:4f:79:9a:9d:2b:8f:6a:fc:53:6c:4f:
97:27:d4:af:17:20:70:af:c9:f5:37:f6:56:14:b0:c7:d0:eb:
51:c6:9c:43:8b:e2:44:88:d7:13:b8:b4:9c:6d:16:54:5f:17:
7b:80:77:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:49:05 2025 by rpki-client