Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
File: hF3ocysQFxOPhwMrcPo7e4d273E.mft (raw, json)
Hash identifier: VnSBHNSX9OlWq8JKVSvxzPRc7ZPmzzUubz1tzSZlTzc=
Subject key identifier: 04:AA:F1:9D:BA:97:1E:A2:87:D3:36:13:06:A2:23:4A:1D:4F:EB:75
Authority key identifier: 84:5D:E8:73:2B:10:17:13:8F:87:03:2B:70:FA:3B:7B:87:76:EF:71
Certificate issuer: /CN=845de8732b1017138f87032b70fa3b7b8776ef71
Certificate serial: 01964FDA52EECB4ABB58CDFB7773DFA100CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hF3ocysQFxOPhwMrcPo7e4d273E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
Manifest number: 0201
Signing time: Sat 19 Apr 2025 21:00:30 +0000
Manifest this update: Sat 19 Apr 2025 21:00:30 +0000
Manifest next update: Sun 20 Apr 2025 21:00:30 +0000
Files and hashes: 1: am3Sy264Yl-JO5WdEXeWKKEs9ps.roa (hash: 9k8mynHVOZTwg4WDO/sfA0hKUXErmcKqWcYze5ZqrNU=)
2: hF3ocysQFxOPhwMrcPo7e4d273E.crl (hash: PTahE7hDUs/y1H9yirEVll+ski4sZYpqZeqxELdmd+0=)
3: sXyVeEgdrOK8h5ebOKwuNo_SSAg.roa (hash: ESBdMDmOcBiwaOXHXdAgFsuBwburzoKdU0lwdUGfYAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
rsync://rpki.ripe.net/repository/DEFAULT/hF3ocysQFxOPhwMrcPo7e4d273E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 21:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:da:52:ee:cb:4a:bb:58:cd:fb:77:73:df:a1:00:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845de8732b1017138f87032b70fa3b7b8776ef71
Validity
Not Before: Apr 19 21:00:30 2025 GMT
Not After : Apr 20 21:00:30 2025 GMT
Subject: CN=04aaf19dba971ea287d3361306a2234a1d4feb75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cc:2b:fa:47:58:35:68:b6:b7:cd:eb:54:9b:
37:9f:2b:04:56:fe:10:b2:b2:0f:f5:b3:e4:a3:8c:
67:58:ab:7a:0d:18:c5:e2:7e:38:14:37:db:07:ca:
40:ab:dd:c2:af:57:cc:e9:5e:f8:0c:47:49:a0:73:
2d:cc:52:0d:ce:92:a7:60:5c:0a:47:fd:94:e6:05:
92:78:23:92:1b:e9:1c:9b:bb:bc:4e:07:a2:81:5a:
25:63:9b:b4:fc:3a:1c:0b:d5:96:c7:98:71:3d:19:
a2:01:e3:2b:e8:5a:00:5d:e8:51:b2:d7:b9:ef:a8:
f2:bd:55:12:2e:96:ea:c0:99:10:41:45:a1:09:ea:
5d:3d:a2:f0:d3:0f:f2:66:f3:eb:84:11:70:87:45:
07:e9:f6:e8:1c:1a:ea:d7:6b:b1:ae:a9:af:02:a1:
d1:ce:47:29:a2:d6:42:65:b0:43:bf:dc:92:5a:39:
12:c7:25:41:d3:40:26:2e:b2:cb:ab:e4:72:e3:09:
0c:df:b7:2e:d0:2f:07:10:37:fb:99:29:ec:c6:46:
21:33:c3:b2:05:5b:7c:5f:98:e2:c0:3c:a9:74:36:
76:0e:52:4b:a7:c4:e9:4b:af:b2:58:55:87:89:28:
41:6e:22:a7:49:e1:3b:3a:41:b2:3b:6b:eb:b1:5a:
30:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:AA:F1:9D:BA:97:1E:A2:87:D3:36:13:06:A2:23:4A:1D:4F:EB:75
X509v3 Authority Key Identifier:
keyid:84:5D:E8:73:2B:10:17:13:8F:87:03:2B:70:FA:3B:7B:87:76:EF:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hF3ocysQFxOPhwMrcPo7e4d273E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:b0:58:9e:25:9f:fc:b5:b2:d9:23:79:a8:66:51:00:07:fc:
ef:8c:fc:09:a1:64:4a:f5:0f:0d:48:06:30:cb:4b:92:0d:dd:
3c:95:3a:26:45:3b:a7:bb:38:0e:98:75:ea:ce:59:8e:7b:44:
4d:ab:d1:28:06:b1:9d:54:b5:f9:98:aa:7e:77:7a:85:9d:90:
fb:d1:81:fc:77:f6:95:63:0c:97:8f:8e:8a:ec:df:58:29:0e:
a1:64:ce:32:db:ec:06:16:44:92:b9:86:e3:ae:cd:01:13:61:
35:ca:73:1d:7e:13:d9:2d:a8:3d:2f:d8:6d:e8:a9:4d:cc:9d:
56:4d:7f:8b:da:fb:e9:80:aa:31:91:36:64:36:eb:4b:25:8d:
bd:44:a4:2c:4d:0b:2e:ba:4f:ae:bf:03:9f:48:d3:93:84:f0:
ad:94:e1:b6:20:81:05:c9:44:f8:3a:50:c4:66:22:65:fc:2c:
e3:65:c3:b7:b5:c0:c9:a3:5a:02:0d:13:91:e6:61:f1:2f:ec:
c4:44:38:55:42:0d:32:cf:e9:54:d1:3f:0c:34:b2:82:01:ce:
53:83:41:95:98:a2:4b:11:24:08:c0:fb:84:61:03:eb:1c:20:
a4:91:1f:05:2f:4b:0f:01:fc:65:43:e6:3c:ce:1e:d8:78:5a:
ed:3d:ed:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:50:09 2025 by rpki-client