Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.mft
File: A3hj3DwlnmCyyYaALdYCERXovx8.mft (raw, json)
Hash identifier: 0kuq3BnTlRLgInBy1txmr8Oq/Zdo7LYQ9UteDVZpBOI=
Subject key identifier: 79:90:A5:F8:F2:3A:F8:B2:07:70:40:1D:B4:60:97:29:87:2D:78:F7
Authority key identifier: 03:78:63:DC:3C:25:9E:60:B2:C9:86:80:2D:D6:02:11:15:E8:BF:1F
Certificate issuer: /CN=037863dc3c259e60b2c986802dd6021115e8bf1f
Certificate serial: 0196455674C2D2AD3C8F8BA6EC51FF1B508C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A3hj3DwlnmCyyYaALdYCERXovx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.mft
Manifest number: 14F4
Signing time: Thu 17 Apr 2025 20:00:15 +0000
Manifest this update: Thu 17 Apr 2025 20:00:15 +0000
Manifest next update: Fri 18 Apr 2025 20:00:15 +0000
Files and hashes: 1: 0VtcIuxUGMiSf51ESt2U0ZJJN3I.roa (hash: pnzB/pCC1PdPD6bGcX+A1+WWtoVI4A2/GkUREyGlYVs=)
2: A3hj3DwlnmCyyYaALdYCERXovx8.crl (hash: u8UR15yooCts8gnPvQEeg3zDOr8qHD9KzSLUqllzGZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/A3hj3DwlnmCyyYaALdYCERXovx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:56:74:c2:d2:ad:3c:8f:8b:a6:ec:51:ff:1b:50:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=037863dc3c259e60b2c986802dd6021115e8bf1f
Validity
Not Before: Apr 17 20:00:15 2025 GMT
Not After : Apr 18 20:00:15 2025 GMT
Subject: CN=7990a5f8f23af8b20770401db4609729872d78f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d3:29:b1:99:b7:69:c3:37:76:bd:fd:03:22:
2c:7b:d3:59:dc:52:66:2a:be:8f:f2:f9:bf:ae:18:
66:b9:0a:4b:e9:ba:91:82:82:2c:b2:f8:df:0a:d0:
6c:f0:16:41:ac:4a:93:e8:1f:e1:91:07:96:79:09:
28:b8:a9:a5:7a:81:94:84:82:66:6a:21:c3:bf:c5:
f5:9f:b2:96:37:e0:8f:1e:28:8a:b5:b4:df:62:ff:
f4:18:8a:b7:24:bf:ee:5f:74:2c:6a:80:ae:37:b0:
db:88:c4:46:eb:cf:df:c5:e6:cb:d9:9a:39:c1:ec:
4f:d8:c5:81:6c:71:84:72:f8:d0:91:0d:d5:b1:89:
94:96:10:81:29:2b:02:17:17:7b:d7:10:7c:77:3f:
9d:c8:ec:6a:31:97:47:ba:ca:ef:82:7d:9c:2a:7f:
3b:cd:c7:b2:05:4f:84:b0:2f:6d:59:f5:dd:19:22:
36:ad:f4:b6:03:e7:8f:c2:ac:9a:38:ee:3d:ba:30:
e2:92:64:a1:cb:64:f4:73:3e:f0:93:ea:c8:59:a9:
52:b6:c6:4f:78:cc:ac:34:7d:0c:c8:40:d3:01:3d:
f2:69:42:15:ee:b4:62:72:f6:a9:c3:42:c0:b2:28:
bb:6e:e1:66:97:27:a1:a9:c9:09:3c:82:08:bf:9b:
39:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:90:A5:F8:F2:3A:F8:B2:07:70:40:1D:B4:60:97:29:87:2D:78:F7
X509v3 Authority Key Identifier:
keyid:03:78:63:DC:3C:25:9E:60:B2:C9:86:80:2D:D6:02:11:15:E8:BF:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3hj3DwlnmCyyYaALdYCERXovx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:a8:64:68:20:33:90:ac:83:f8:e0:05:fc:c8:c8:81:a9:f4:
e9:4e:89:92:f1:41:ef:c7:75:69:85:f1:5d:46:33:17:af:90:
90:98:29:00:01:3f:fc:13:b1:86:eb:2e:ad:18:00:b4:89:d7:
5b:37:e9:f2:f8:8e:ef:3b:49:39:ae:ff:a9:d9:13:d4:ab:97:
8a:a8:02:8a:b6:25:92:62:35:99:bc:25:7d:89:cc:d0:6a:0e:
84:72:70:17:10:94:fa:c5:5f:cf:fd:16:02:49:62:c2:d8:50:
bd:7e:6d:92:1b:fc:f0:a3:0f:a1:2d:40:f7:94:65:e3:93:17:
27:d5:f4:df:c1:8b:10:59:42:15:27:0f:fb:a9:d6:7c:e1:f2:
f3:ec:06:b2:fc:c1:55:63:30:df:db:dc:5b:ec:13:f5:03:93:
42:d0:ef:fe:0a:06:e8:c9:60:d9:7d:71:a6:fe:2e:fd:83:18:
21:8a:bf:12:1d:b5:eb:13:6e:74:19:92:bd:0a:66:5d:55:76:
50:63:86:d8:fa:64:3e:4b:bb:6c:f1:59:36:13:49:c5:87:d4:
37:64:4e:27:a2:95:f5:53:bf:1f:98:c7:41:69:5a:fe:95:1f:
27:c9:53:36:23:32:de:6b:8c:c9:95:d4:66:f0:86:5c:36:e7:
40:77:20:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:40:18 2025 by rpki-client