Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.mft
File: Sp0WbGSEc4ly6bM5OBZfRImlFow.mft (raw, json)
Hash identifier: /Hlwwcz/mmbVNunCgX+W6ebSOkFSVLGYTSVjW3ua25w=
Subject key identifier: C2:77:75:F0:A4:B2:CD:DF:C0:69:7C:B3:63:49:E2:1F:F0:8D:A3:DE
Authority key identifier: 4A:9D:16:6C:64:84:73:89:72:E9:B3:39:38:16:5F:44:89:A5:16:8C
Certificate issuer: /CN=4a9d166c6484738972e9b33938165f4489a5168c
Certificate serial: 01964C6C05EA9466BC2B504B70B0FC37546D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sp0WbGSEc4ly6bM5OBZfRImlFow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.mft
Manifest number: 0870
Signing time: Sat 19 Apr 2025 05:01:09 +0000
Manifest this update: Sat 19 Apr 2025 05:01:09 +0000
Manifest next update: Sun 20 Apr 2025 05:01:09 +0000
Files and hashes: 1: 2Akoy2U5XTKN_WZkzZk8pbH_WvU.roa (hash: z7wlSbeXCPnKRT5F6st24jvggmZT5WHmth3yDlecnKg=)
2: Sp0WbGSEc4ly6bM5OBZfRImlFow.crl (hash: BdP/SCLIGEjNBQvSjtUEfmZKoidQw3KxTYpG9kcLx3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sp0WbGSEc4ly6bM5OBZfRImlFow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 05:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:6c:05:ea:94:66:bc:2b:50:4b:70:b0:fc:37:54:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a9d166c6484738972e9b33938165f4489a5168c
Validity
Not Before: Apr 19 05:01:09 2025 GMT
Not After : Apr 20 05:01:09 2025 GMT
Subject: CN=c27775f0a4b2cddfc0697cb36349e21ff08da3de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:5b:c5:e3:8d:62:3c:1e:90:9f:fc:d1:62:f4:
53:0e:1a:9e:d7:ab:13:04:97:49:d0:2e:60:13:71:
e8:2f:99:f9:d2:25:bd:9a:52:36:d5:43:ed:e7:2e:
74:5e:60:79:b1:31:2d:98:6c:43:67:d6:c3:2b:47:
3a:78:da:81:41:a3:ae:a6:bd:85:a1:be:94:02:50:
fd:b3:2c:ed:4f:47:1d:25:7c:62:5b:a1:9d:d6:78:
c9:68:00:67:6d:85:8c:43:b1:ea:c5:7f:00:8c:66:
1b:e6:ed:0d:69:b4:7f:36:55:dd:c8:5a:39:69:19:
c7:f1:3f:eb:ec:e8:cf:d5:b0:53:0e:ff:28:95:ec:
b9:61:19:db:b5:73:4f:e3:4d:20:aa:64:ac:40:66:
03:fc:90:c9:1d:91:cb:21:aa:01:b7:f0:3e:6b:61:
ba:f9:5c:90:2d:5a:f6:62:f3:13:91:64:21:65:17:
47:69:09:03:14:16:d5:61:47:5b:45:d0:fe:07:d0:
71:3b:9d:46:00:8e:56:52:5b:b0:93:45:a6:31:cb:
f0:8d:52:bc:93:17:fd:4e:d7:08:3d:16:a8:f5:3a:
c1:27:40:58:ea:1d:b9:af:ab:48:9c:2f:de:c6:bd:
45:e2:51:78:35:ec:b3:10:23:a0:78:f8:c5:12:0c:
7a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:77:75:F0:A4:B2:CD:DF:C0:69:7C:B3:63:49:E2:1F:F0:8D:A3:DE
X509v3 Authority Key Identifier:
keyid:4A:9D:16:6C:64:84:73:89:72:E9:B3:39:38:16:5F:44:89:A5:16:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sp0WbGSEc4ly6bM5OBZfRImlFow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:75:30:c4:c8:35:fb:83:a7:0d:1b:af:6b:39:d2:28:e8:6d:
84:28:96:8a:7b:8e:73:62:f5:49:6a:76:a2:8b:ad:7b:08:0a:
26:1e:3a:1c:22:b1:da:82:f1:3c:97:4f:ab:d2:f3:ee:fc:91:
09:b9:af:71:1a:db:70:62:44:20:23:c6:10:de:d9:ed:ba:31:
ed:19:93:c7:af:1d:9c:e3:54:4e:36:f9:12:d2:10:62:84:f0:
43:af:20:e0:59:86:35:05:2a:56:1e:cb:a2:9a:d6:26:1b:a8:
13:0e:73:ac:e4:60:65:c1:3c:a8:f7:d3:e8:2a:32:13:3e:7e:
96:b2:10:c0:93:91:83:c6:6b:31:ff:99:7d:f2:38:5f:b5:e4:
cc:33:a2:3d:65:4a:29:ac:49:11:71:31:b6:3b:f6:f3:30:e3:
fe:e3:d1:1e:ae:f5:ea:3a:9c:e0:e5:79:47:8f:1d:51:6b:3e:
f4:93:c9:ad:a5:fa:12:3b:20:b4:e0:1e:88:08:ec:d4:d4:7d:
ab:ce:b2:ec:08:50:a8:2a:bf:29:23:01:a1:bd:c3:29:ce:7e:
34:e5:83:4c:1a:cb:69:90:2b:de:49:75:84:2b:ba:5c:b3:3a:
e9:38:07:a9:3a:59:1c:34:ac:d6:15:00:ad:51:43:26:cf:70:
5f:3c:3c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:24:25 2025 by rpki-client