Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/7920d0-f956-4439-9cd2-4b7808d98664/1/cHr0U0bwa2IqDru0_5ujO-b0Lx4.mft
File: cHr0U0bwa2IqDru0_5ujO-b0Lx4.mft (raw, json)
Hash identifier: rxGTFK6DJXdzlzfL3gQwN8xponbb081Az1ySpSZ25TY=
Subject key identifier: 37:A7:EA:7A:11:DF:95:06:24:95:68:8F:50:FC:A2:AE:74:E9:54:73
Authority key identifier: 70:7A:F4:53:46:F0:6B:62:2A:0E:BB:B4:FF:9B:A3:3B:E6:F4:2F:1E
Certificate issuer: /CN=707af45346f06b622a0ebbb4ff9ba33be6f42f1e
Certificate serial: 01963E0B6C0F6FA2623AFCF9053E22E772E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cHr0U0bwa2IqDru0_5ujO-b0Lx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/7920d0-f956-4439-9cd2-4b7808d98664/1/cHr0U0bwa2IqDru0_5ujO-b0Lx4.mft
Manifest number: 12FA
Signing time: Wed 16 Apr 2025 10:00:57 +0000
Manifest this update: Wed 16 Apr 2025 10:00:57 +0000
Manifest next update: Thu 17 Apr 2025 10:00:57 +0000
Files and hashes: 1: Dg3_0N_QJLl_z9oMjas8amvsSl4.roa (hash: i//fT7WOmOH7LBZUXbS89Zg6KyN/Hg+cEJQRzh4C3DQ=)
2: cHr0U0bwa2IqDru0_5ujO-b0Lx4.crl (hash: 4IOPixZY0ZJ6uLai9W0Kj5Q9sfIiUuFbzYwywkVHEWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/7920d0-f956-4439-9cd2-4b7808d98664/1/cHr0U0bwa2IqDru0_5ujO-b0Lx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/7920d0-f956-4439-9cd2-4b7808d98664/1/cHr0U0bwa2IqDru0_5ujO-b0Lx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cHr0U0bwa2IqDru0_5ujO-b0Lx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 10:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:0b:6c:0f:6f:a2:62:3a:fc:f9:05:3e:22:e7:72:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=707af45346f06b622a0ebbb4ff9ba33be6f42f1e
Validity
Not Before: Apr 16 10:00:57 2025 GMT
Not After : Apr 17 10:00:57 2025 GMT
Subject: CN=37a7ea7a11df95062495688f50fca2ae74e95473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b1:37:3c:42:b8:3c:b5:5d:ec:0f:45:e2:84:
7d:e6:81:ad:ab:62:39:64:9c:4d:40:4f:b9:41:7d:
6b:2d:60:ee:94:86:71:08:99:d5:56:86:d6:ca:0c:
ce:7d:71:2c:2a:a0:a5:fe:d3:cb:56:90:e5:79:e9:
16:a7:52:d7:f8:6d:40:cb:87:ca:41:52:71:74:b7:
8d:74:65:86:14:84:4d:0f:b2:c1:be:72:ea:b4:7a:
30:15:38:14:2e:6e:c2:12:c9:64:92:49:43:c0:8e:
ae:01:b0:0d:a2:bf:f0:f5:24:aa:fe:2b:2b:78:43:
bc:fa:40:8b:f8:f0:5d:e7:4d:cc:30:90:9c:69:8f:
b8:74:43:f6:c8:8d:50:aa:f8:3b:35:be:51:fd:98:
a5:b8:cf:32:d0:09:9d:8c:77:34:31:95:e0:80:02:
3b:05:6a:1c:1d:3d:d7:77:40:3d:31:41:fa:06:f0:
17:25:3f:25:e4:3d:93:06:3c:20:7b:44:74:ff:b6:
9b:f1:69:79:32:74:6f:74:21:6d:d0:78:cb:43:bb:
2d:ea:41:18:81:15:18:97:8d:4a:3c:e7:3a:cc:68:
fe:53:39:39:64:b3:c9:3c:92:5f:60:47:ce:d2:55:
bc:8d:49:c3:f4:cc:47:10:f4:46:cb:eb:35:b1:a8:
fb:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:A7:EA:7A:11:DF:95:06:24:95:68:8F:50:FC:A2:AE:74:E9:54:73
X509v3 Authority Key Identifier:
keyid:70:7A:F4:53:46:F0:6B:62:2A:0E:BB:B4:FF:9B:A3:3B:E6:F4:2F:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cHr0U0bwa2IqDru0_5ujO-b0Lx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/7920d0-f956-4439-9cd2-4b7808d98664/1/cHr0U0bwa2IqDru0_5ujO-b0Lx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/7920d0-f956-4439-9cd2-4b7808d98664/1/cHr0U0bwa2IqDru0_5ujO-b0Lx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:68:48:e1:d2:7e:0e:77:03:4f:70:96:cd:da:f8:76:27:30:
06:a1:6d:5f:57:60:9e:7a:1a:1c:b7:8a:dd:ae:64:79:e3:02:
97:d2:99:9d:42:40:08:3b:62:3b:22:2f:59:bb:98:54:17:2b:
47:32:e3:fe:2a:ba:43:2e:80:77:76:0e:df:3f:9e:ab:2e:80:
cf:e0:43:e5:19:46:ba:cb:79:7a:57:c2:71:74:a0:9b:a1:59:
db:54:e7:cf:7b:20:dd:37:70:72:98:6e:97:90:47:35:75:07:
08:f2:bc:68:68:0a:87:af:e0:ee:db:71:b4:c3:e1:cd:3d:4d:
ec:d7:2a:5f:17:8a:75:8c:cb:d3:e4:d8:37:53:68:c8:71:ef:
22:c6:69:20:57:26:95:91:3a:ec:43:69:e5:93:8c:cd:08:72:
05:d9:d3:86:13:e8:d4:7d:63:7a:88:3b:e4:5f:e0:8b:13:a7:
b3:2a:97:e4:e9:a9:7f:13:da:b4:c7:cd:11:a6:17:70:34:4d:
3d:3a:32:03:1e:5d:51:38:0f:e1:b4:bc:c1:7d:58:42:a9:3c:
d3:5f:e6:28:06:35:bd:2b:b6:e7:77:c8:71:d4:13:74:41:91:
13:77:84:95:2e:52:c6:5f:1e:34:ae:ac:62:03:5d:6a:7c:4e:
72:9d:b3:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 19:12:25 2025 by rpki-client