Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a997b6-0bb7-4766-8acc-275ac1443318/1/grZNfxWekC6mpa3XoQDcBfoUqe0.mft
File: grZNfxWekC6mpa3XoQDcBfoUqe0.mft (raw, json)
Hash identifier: dN7wgX1IcknP4nmutzaiysQeC0APMImTWt313cBhvuA=
Subject key identifier: FD:E9:1E:78:D6:E0:7A:49:F6:F7:CB:FB:C8:82:9B:7A:6F:5B:6B:F6
Authority key identifier: 82:B6:4D:7F:15:9E:90:2E:A6:A5:AD:D7:A1:00:DC:05:FA:14:A9:ED
Certificate issuer: /CN=82b64d7f159e902ea6a5add7a100dc05fa14a9ed
Certificate serial: 019645C532C46B4041416EDAD8026BF34AEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grZNfxWekC6mpa3XoQDcBfoUqe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/a997b6-0bb7-4766-8acc-275ac1443318/1/grZNfxWekC6mpa3XoQDcBfoUqe0.mft
Manifest number: 0D69
Signing time: Thu 17 Apr 2025 22:01:13 +0000
Manifest this update: Thu 17 Apr 2025 22:01:13 +0000
Manifest next update: Fri 18 Apr 2025 22:01:13 +0000
Files and hashes: 1: emiYyOO-4ZtoPEzkSnQ09tYgxmo.roa (hash: UDg/XKhAxepRkXvvtQYSYSZ++r+CNfh/uFuRVdS04Vg=)
2: grZNfxWekC6mpa3XoQDcBfoUqe0.crl (hash: 2MFZtGZGRou5f5sN5oNdRF9K5Kj8set+VmM7RqiFD7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/a997b6-0bb7-4766-8acc-275ac1443318/1/grZNfxWekC6mpa3XoQDcBfoUqe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/a997b6-0bb7-4766-8acc-275ac1443318/1/grZNfxWekC6mpa3XoQDcBfoUqe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/grZNfxWekC6mpa3XoQDcBfoUqe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:c5:32:c4:6b:40:41:41:6e:da:d8:02:6b:f3:4a:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82b64d7f159e902ea6a5add7a100dc05fa14a9ed
Validity
Not Before: Apr 17 22:01:13 2025 GMT
Not After : Apr 18 22:01:13 2025 GMT
Subject: CN=fde91e78d6e07a49f6f7cbfbc8829b7a6f5b6bf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:27:96:c8:00:3c:f4:05:61:95:9b:b0:47:5a:
a6:da:6e:ca:ee:73:1c:58:03:25:e1:b1:94:34:b7:
ef:d9:62:bc:55:ab:65:dd:2c:ec:7b:a5:ec:7a:f3:
a2:8d:a2:c8:f4:02:4d:29:7d:36:65:55:be:7d:f1:
99:46:eb:ec:6b:92:44:db:3c:de:0d:64:9c:4f:2c:
bd:5a:7c:68:2f:ec:9c:dd:51:03:45:b7:0c:f6:a1:
99:31:f3:14:e4:55:57:01:80:22:0b:2c:a3:15:ce:
c1:9e:12:03:1f:4a:27:d5:59:39:5e:14:2f:7e:b2:
8c:5b:9c:c6:ab:29:9e:26:f9:d9:8e:d5:94:80:c5:
3e:38:54:86:75:e4:bd:d6:c8:30:d5:9f:e8:d5:52:
e5:d5:e9:3d:77:76:cd:4d:cd:c4:06:9c:16:66:ae:
00:4b:19:bb:4c:54:bb:19:11:62:23:f4:58:c3:f3:
09:ee:3b:b0:fb:7c:85:03:e8:6d:88:a6:f7:0d:d8:
96:bf:70:74:94:b5:de:97:91:fd:f0:90:90:bf:ba:
8a:fc:e4:15:76:3e:99:bf:e6:9d:9c:8a:59:90:cd:
fc:46:85:93:5d:68:c4:19:ac:35:1e:ed:48:19:2c:
98:44:3f:f6:0c:91:6c:a5:73:c5:68:66:96:0f:53:
65:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:E9:1E:78:D6:E0:7A:49:F6:F7:CB:FB:C8:82:9B:7A:6F:5B:6B:F6
X509v3 Authority Key Identifier:
keyid:82:B6:4D:7F:15:9E:90:2E:A6:A5:AD:D7:A1:00:DC:05:FA:14:A9:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grZNfxWekC6mpa3XoQDcBfoUqe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a997b6-0bb7-4766-8acc-275ac1443318/1/grZNfxWekC6mpa3XoQDcBfoUqe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a997b6-0bb7-4766-8acc-275ac1443318/1/grZNfxWekC6mpa3XoQDcBfoUqe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:50:7e:7d:cb:4c:59:c8:98:4b:65:8e:f8:6b:27:ff:30:f6:
ae:d2:53:da:89:59:a6:69:90:d4:6b:56:ef:b2:9d:99:69:8d:
ae:17:24:1c:21:b5:b2:56:f9:d4:19:46:b1:12:e4:6c:a4:89:
5f:ee:5c:e2:15:aa:cf:0c:cb:af:72:27:08:93:e5:b9:5a:c9:
fd:9f:7d:bf:50:ba:9b:8d:68:23:68:7c:c0:1e:93:93:56:ca:
36:86:31:f7:64:f8:b9:bc:be:7b:d2:e6:47:b2:9f:3b:5b:6a:
68:95:d3:0d:e5:67:04:2b:5c:1d:99:d5:de:05:1b:82:1c:35:
73:c4:ab:30:02:e6:2a:9e:0a:c2:95:d3:75:40:58:3e:ed:3f:
96:69:54:a8:b0:25:6d:04:c8:ab:bd:27:42:d0:64:da:9a:9f:
28:e4:99:0a:22:b8:20:10:72:2a:3a:74:bb:30:f3:2e:1f:7f:
97:bb:9a:72:6a:e3:89:5a:b2:ed:9e:16:b1:60:ab:22:e2:5b:
aa:88:58:c3:9a:4d:2d:00:5e:49:41:5d:08:10:55:ee:3a:19:
ac:e2:75:0b:0a:e7:0f:aa:6d:10:a4:05:4e:6f:a8:66:d8:36:
8f:6d:26:47:d4:fc:e7:a8:d6:a5:44:74:84:0e:d0:9e:fe:17:
5f:b6:c8:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 02:36:58 2025 by rpki-client