Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.mft
File: paVuvwHgA0n2cwGRgFYMmjGuqHE.mft (raw, json)
Hash identifier: +eLq6lpxVpO4ucuwmDKwLRkY9J3MHGSEphkzDOFe/kw=
Subject key identifier: 79:D8:37:71:C9:68:35:F0:78:2F:1D:0A:19:84:C9:98:BA:72:F0:91
Authority key identifier: A5:A5:6E:BF:01:E0:03:49:F6:73:01:91:80:56:0C:9A:31:AE:A8:71
Certificate issuer: /CN=a5a56ebf01e00349f673019180560c9a31aea871
Certificate serial: 01961A3614AF935E606502AC19C7E54C9062
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paVuvwHgA0n2cwGRgFYMmjGuqHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.mft
Manifest number: 0BE1
Signing time: Wed 09 Apr 2025 11:01:13 +0000
Manifest this update: Wed 09 Apr 2025 11:01:13 +0000
Manifest next update: Thu 10 Apr 2025 11:01:13 +0000
Files and hashes: 1: Iwa2WjVDIZS6E4vl286hIpDRTL8.roa (hash: Ml9mAf4D4cdmyuWDVRKJcbVlY2mEksJYokJMfWOm/SM=)
2: cRrQhRl21akyISJAcESzBw3cqNc.roa (hash: ZVnhoZeTO3PrLcaDJF9qovHR+RzyE1BQFr1o16SkPy8=)
3: kxpX1lCQQ8yOBbstUeCdv_zpUVM.roa (hash: oJhD38+sw8OGBYsN0ao2Z9Co7xQKNJ8DNYl0qpddiRA=)
4: paVuvwHgA0n2cwGRgFYMmjGuqHE.crl (hash: Ka7068LI9RwvaEiQUn9NK3VyCFINOM78R2PpMFo2kdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/paVuvwHgA0n2cwGRgFYMmjGuqHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 11:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1a:36:14:af:93:5e:60:65:02:ac:19:c7:e5:4c:90:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5a56ebf01e00349f673019180560c9a31aea871
Validity
Not Before: Apr 9 11:01:13 2025 GMT
Not After : Apr 10 11:01:13 2025 GMT
Subject: CN=79d83771c96835f0782f1d0a1984c998ba72f091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c2:e2:23:5d:f4:31:88:a2:8c:ad:c7:f3:43:
b6:d6:b3:db:00:d7:d9:e7:73:21:17:75:9f:70:ae:
12:2e:92:fa:24:17:31:9f:2e:08:20:be:7d:75:f3:
02:93:5a:16:5f:a4:29:39:56:ca:3f:30:a1:f4:33:
e4:96:56:a1:fb:92:3f:96:d5:87:86:0d:3c:e1:05:
58:0a:86:53:f0:59:7b:78:60:1a:12:7c:57:ff:29:
f9:46:de:64:c3:d1:01:ac:9d:22:4d:31:68:75:97:
e1:da:eb:a6:28:8f:6e:1d:c3:e4:6d:34:12:d2:a0:
41:0c:6e:f4:be:a8:73:b7:d1:1d:a3:78:f9:b2:9c:
92:b1:ab:7f:db:e8:7f:df:a2:de:a3:34:e3:a8:33:
26:8f:ed:30:8e:61:c3:40:ea:52:f2:34:77:f3:fb:
d1:91:39:cb:72:f0:77:e7:1f:31:31:99:1f:9a:7a:
59:cc:90:eb:d3:d7:1c:51:24:16:6d:38:56:1a:48:
ce:62:72:e0:11:7b:19:3f:18:6b:d3:24:45:f1:fc:
9b:91:d5:b7:89:99:a0:9f:41:de:d9:d4:3f:29:2d:
35:79:dc:aa:df:9f:70:de:7e:8a:97:0d:ad:88:37:
bb:1c:02:8a:ed:5b:69:fa:e0:bc:67:07:8a:90:24:
53:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:D8:37:71:C9:68:35:F0:78:2F:1D:0A:19:84:C9:98:BA:72:F0:91
X509v3 Authority Key Identifier:
keyid:A5:A5:6E:BF:01:E0:03:49:F6:73:01:91:80:56:0C:9A:31:AE:A8:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paVuvwHgA0n2cwGRgFYMmjGuqHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:f1:50:b2:4e:c7:b5:7e:9d:0d:cc:02:1c:63:48:68:9b:b6:
54:94:8b:c8:33:69:5d:a4:3b:08:42:be:a3:a8:23:a5:bf:8c:
50:b9:ad:1a:d2:7f:41:b9:92:8a:e2:9e:5a:7a:0f:c6:24:d9:
e6:73:24:98:74:79:3d:77:9f:e9:dc:21:ce:e8:b9:ae:7a:b6:
90:22:c3:f8:7e:f7:3f:3d:42:8c:56:cc:63:51:b4:5a:98:0a:
d4:d5:c6:bb:28:e6:fb:26:94:53:03:51:32:2a:e8:50:65:2e:
f2:27:90:70:d0:0d:d0:ac:73:4f:c6:26:4b:78:0c:3a:db:14:
42:3f:08:5f:b1:38:b8:3f:10:0a:cf:1e:f8:a8:75:d2:88:01:
64:4c:68:ba:cb:5f:37:93:c7:ba:93:dc:a5:29:81:70:d4:51:
f8:a4:1e:df:47:a7:dd:ff:36:76:8e:28:22:2d:87:3e:fc:07:
1b:f8:b2:c6:ae:c3:69:68:a4:cb:1f:0f:e7:75:d7:55:37:90:
47:84:2a:d1:b7:cc:c5:cd:d0:89:9f:a1:1e:6b:29:3d:20:16:
14:ea:f5:a7:61:34:b4:54:fe:c7:39:9e:ea:50:bc:96:44:f5:
77:85:e2:a6:d6:5a:8a:67:ed:d4:ea:a9:c3:42:65:b3:0d:d1:
bd:a9:95:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 19:11:07 2025 by rpki-client