Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.mft
File: o082XngGS1jETUjPs5KR0_sdnhA.mft (raw, json)
Hash identifier: Q28pLhbtswBoH4iXUBLjditAIlavjwqg/un+TuUUSDo=
Subject key identifier: A4:D3:41:38:51:B0:BD:22:7A:1F:96:1D:95:3E:48:E1:DB:75:49:91
Authority key identifier: A3:4F:36:5E:78:06:4B:58:C4:4D:48:CF:B3:92:91:D3:FB:1D:9E:10
Certificate issuer: /CN=a34f365e78064b58c44d48cfb39291d3fb1d9e10
Certificate serial: 0196594B38E068D5F4A2F41E84F664E08878
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o082XngGS1jETUjPs5KR0_sdnhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.mft
Manifest number: 1442
Signing time: Mon 21 Apr 2025 17:00:23 +0000
Manifest this update: Mon 21 Apr 2025 17:00:23 +0000
Manifest next update: Tue 22 Apr 2025 17:00:23 +0000
Files and hashes: 1: 8M6EvOOueKa7PM6SUMWysNV1P1E.roa (hash: tXy3k1V6q4E+Xjy/ypSFyuA9ZzVHmCAzqLsaHasRW9o=)
2: o082XngGS1jETUjPs5KR0_sdnhA.crl (hash: KjtgDbMKAuO2taUdj/BfshIdcfkQbY0KQ5CsvFq8Zho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/o082XngGS1jETUjPs5KR0_sdnhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 17:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:4b:38:e0:68:d5:f4:a2:f4:1e:84:f6:64:e0:88:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a34f365e78064b58c44d48cfb39291d3fb1d9e10
Validity
Not Before: Apr 21 17:00:23 2025 GMT
Not After : Apr 22 17:00:23 2025 GMT
Subject: CN=a4d3413851b0bd227a1f961d953e48e1db754991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:da:19:43:ff:00:c5:34:78:1a:9f:f3:a1:a3:
fe:3e:dc:db:8d:47:1c:b5:0f:4c:5d:c7:1b:2a:03:
70:8a:2a:d3:ef:63:09:a0:67:af:e2:49:fc:da:ad:
82:5e:51:a7:48:9f:ff:16:6e:79:ff:78:4b:20:53:
15:40:e8:68:24:b2:6d:0b:57:be:81:04:ad:e7:1e:
9b:84:54:e8:43:86:54:24:ba:1e:4d:ae:4b:a5:e1:
57:fa:c3:e8:9e:25:60:a6:44:56:e7:04:ad:98:b6:
a5:b7:f0:ef:1e:34:7f:2c:df:8d:ef:8f:83:36:ea:
6d:c2:85:d7:71:be:bb:95:fd:da:75:3b:37:d9:d6:
85:37:c7:5d:dc:2a:a0:10:6b:1a:81:d7:76:d6:5f:
33:43:b4:0f:6f:7c:8e:99:1d:db:6a:64:80:ec:a8:
38:36:04:45:6a:cf:b7:97:14:b8:24:4a:5f:11:da:
34:b6:37:8b:a2:b0:1b:3c:f0:e9:d2:45:b3:75:26:
38:66:be:de:57:31:97:89:17:c8:dc:48:11:2c:36:
6d:14:27:c0:b5:68:4c:c1:cd:27:8d:a9:c2:78:a8:
64:51:6e:06:d4:2b:54:05:6c:6d:48:7b:1c:cb:bb:
e2:5e:9b:21:44:03:32:bd:4e:0a:60:fc:b8:e6:56:
71:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:D3:41:38:51:B0:BD:22:7A:1F:96:1D:95:3E:48:E1:DB:75:49:91
X509v3 Authority Key Identifier:
keyid:A3:4F:36:5E:78:06:4B:58:C4:4D:48:CF:B3:92:91:D3:FB:1D:9E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o082XngGS1jETUjPs5KR0_sdnhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:f1:1b:62:28:b0:00:6e:ed:39:c0:fb:61:f5:c0:b3:38:32:
5a:19:f1:44:a8:83:06:8d:d7:e1:03:82:01:49:e7:c4:d4:9d:
20:57:a9:f5:32:b7:99:67:a2:62:07:f7:61:88:2d:94:e7:d1:
50:a8:4b:d5:cf:b1:9a:4b:33:3e:3b:21:20:eb:9a:1f:5d:67:
c8:82:7a:f5:d6:1e:90:cc:91:6c:c0:72:5e:0e:9e:b3:71:c9:
58:e5:ed:64:da:19:e0:89:03:83:43:8f:a9:be:7a:1c:6b:43:
89:d4:07:7c:6b:d0:de:24:d6:79:f4:9e:aa:5a:0e:e8:2e:fc:
22:f5:a9:3f:df:55:6f:e8:a7:66:73:4d:22:d7:5b:c9:0f:ae:
44:c2:3b:3b:bc:b8:fd:f9:05:6f:c0:a0:31:93:42:86:9c:76:
d5:25:1a:7b:34:b5:a9:7b:0c:8f:ca:4b:17:03:30:2b:1b:18:
9d:3b:b6:3f:a9:2e:da:84:18:d8:61:6b:d6:85:87:42:14:0c:
5d:76:d4:76:4c:ce:6d:fb:1c:7a:0e:e8:c7:6d:19:0f:c1:58:
a2:31:23:71:a4:44:8a:20:f0:7d:32:4c:28:74:27:11:c2:67:
77:5d:f5:2b:0f:a3:c8:05:a2:d5:16:60:42:8e:cc:98:8c:6d:
af:9e:04:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:38:26 2025 by rpki-client