Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/exExjUvdPsWUM4bnAdfQK9aDAK0.mft
File: exExjUvdPsWUM4bnAdfQK9aDAK0.mft (raw, json)
Hash identifier: 5zZSix4mdBRE4cO5MhxS4uvDdusznJ2EFlp78KMrRQ4=
Subject key identifier: 13:F0:C1:38:73:01:BE:F9:7D:B0:C9:5A:3E:58:C2:3F:27:47:8E:CC
Authority key identifier: 7B:11:31:8D:4B:DD:3E:C5:94:33:86:E7:01:D7:D0:2B:D6:83:00:AD
Certificate issuer: /CN=7b11318d4bdd3ec5943386e701d7d02bd68300ad
Certificate serial: 01964E2355EBC74F60D9538F8742AE6AA6E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/exExjUvdPsWUM4bnAdfQK9aDAK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/exExjUvdPsWUM4bnAdfQK9aDAK0.mft
Manifest number: 02A7
Signing time: Sat 19 Apr 2025 13:01:00 +0000
Manifest this update: Sat 19 Apr 2025 13:01:00 +0000
Manifest next update: Sun 20 Apr 2025 13:01:00 +0000
Files and hashes: 1: exExjUvdPsWUM4bnAdfQK9aDAK0.crl (hash: fSnfg5L3uEYsb5RSuk91NcfH6ri1G0uFx3uM33Zu2tk=)
2: ldyV_EpqT2oKvf1QJeErhcsDNrU.roa (hash: 5odg+3w026oemslVSdfJUXV6ifzJkymRShy49z+o09k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/exExjUvdPsWUM4bnAdfQK9aDAK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/exExjUvdPsWUM4bnAdfQK9aDAK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/exExjUvdPsWUM4bnAdfQK9aDAK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:23:55:eb:c7:4f:60:d9:53:8f:87:42:ae:6a:a6:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b11318d4bdd3ec5943386e701d7d02bd68300ad
Validity
Not Before: Apr 19 13:01:00 2025 GMT
Not After : Apr 20 13:01:00 2025 GMT
Subject: CN=13f0c1387301bef97db0c95a3e58c23f27478ecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:0e:4a:fe:39:e0:33:d0:9b:2a:ea:6c:28:12:
a2:c6:12:87:80:96:84:d3:42:a1:26:66:23:6d:f7:
04:f9:22:93:5c:01:f6:9a:06:5a:c9:96:73:64:a7:
e1:bf:6e:f8:78:b0:79:05:b3:90:d0:52:79:d2:22:
40:36:a6:19:de:80:fa:70:bc:c1:56:a5:09:38:92:
e8:c3:cb:49:5b:6c:e5:45:1f:8d:69:35:61:ea:39:
8e:89:92:6c:ba:ad:5b:89:29:a4:3d:a6:e4:06:ee:
41:83:46:b3:5b:08:c2:04:54:5f:a0:86:ad:31:58:
8f:4e:f6:69:76:cf:f3:cd:c1:2b:36:0b:4d:99:42:
28:35:a5:d5:3f:7a:f6:19:f4:4e:b8:b4:b7:44:92:
12:b0:89:42:45:6a:33:27:45:4d:38:02:3b:10:d5:
20:b7:68:0d:2f:81:d6:39:9c:09:9c:9d:bc:a6:9c:
5b:64:fa:19:ce:50:c8:78:b6:57:f8:5c:d7:56:64:
b9:2a:08:04:d2:e4:51:fb:d6:f8:35:46:18:ba:9e:
b0:18:f9:06:1f:79:20:71:98:27:2d:f8:56:0d:4a:
6e:71:6b:53:9d:dc:75:16:ec:d1:98:7f:61:30:84:
0e:82:0b:41:6b:22:90:48:f3:46:ec:d4:57:91:ec:
09:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:F0:C1:38:73:01:BE:F9:7D:B0:C9:5A:3E:58:C2:3F:27:47:8E:CC
X509v3 Authority Key Identifier:
keyid:7B:11:31:8D:4B:DD:3E:C5:94:33:86:E7:01:D7:D0:2B:D6:83:00:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/exExjUvdPsWUM4bnAdfQK9aDAK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/exExjUvdPsWUM4bnAdfQK9aDAK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/exExjUvdPsWUM4bnAdfQK9aDAK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:ca:36:95:36:14:1b:5f:2b:b4:13:69:11:e4:53:a9:be:0a:
c2:e2:e9:47:93:22:2b:64:6d:f8:a2:5f:ba:db:19:1a:6a:ec:
88:93:d0:5b:ab:bb:25:1b:d6:3b:b6:db:72:9e:83:0c:d0:85:
08:96:98:2d:fb:40:8b:7f:4e:f9:34:24:54:09:50:ca:b1:22:
1a:15:24:59:b2:f9:13:ca:dc:61:94:37:85:69:f8:53:96:6c:
56:51:0a:5d:09:33:e2:6a:1b:13:92:cc:10:ea:bc:0d:d1:e0:
b7:07:a5:19:a2:2c:4e:0f:ba:f8:ed:cb:20:39:69:3b:39:cd:
e6:39:51:21:ad:2f:48:29:e0:68:6c:af:31:a4:74:d9:c9:08:
47:bf:9a:e2:d0:19:a0:0c:59:cd:2f:09:fc:0f:98:ac:3e:e2:
ee:64:a0:33:ed:9a:3c:4f:df:c5:ab:ae:e6:4c:71:e3:c0:2c:
29:0e:8c:cd:8a:9c:3a:90:77:69:05:08:35:90:13:7a:05:94:
15:f5:bf:c9:8d:51:e9:0b:3b:2f:f4:70:65:88:5b:5d:2f:10:
26:17:f4:4d:0f:17:59:77:8d:28:99:da:15:15:25:21:2b:80:
04:0c:12:33:6f:ba:65:2b:16:f6:88:6b:90:c3:45:8e:d6:c8:
4c:00:06:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:49:31 2025 by rpki-client