Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.mft
File: rh7z1ianVOQ9B8cA0FE8EUtmDvU.mft (raw, json)
Hash identifier: pVn/QTHk33H5kcXWeOtwHJg9S2AmtruXWXAr6WqA5qE=
Subject key identifier: BD:DA:56:0F:FB:0F:C2:EB:08:21:76:74:E5:C3:62:88:C9:E1:40:E5
Authority key identifier: AE:1E:F3:D6:26:A7:54:E4:3D:07:C7:00:D0:51:3C:11:4B:66:0E:F5
Certificate issuer: /CN=ae1ef3d626a754e43d07c700d0513c114b660ef5
Certificate serial: 019645C58F6F1E71A6BB718EC66D996C4CDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rh7z1ianVOQ9B8cA0FE8EUtmDvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.mft
Manifest number: 14F5
Signing time: Thu 17 Apr 2025 22:01:37 +0000
Manifest this update: Thu 17 Apr 2025 22:01:37 +0000
Manifest next update: Fri 18 Apr 2025 22:01:37 +0000
Files and hashes: 1: 4Z6xjw98hxZ8bvYUhmvQisZFvOM.roa (hash: j5d+sT1h6lzMh+Fw7CHOI9NqQUP8la0OU484/Ch6a44=)
2: rh7z1ianVOQ9B8cA0FE8EUtmDvU.crl (hash: cLbhBHHDQKCRU+MvPMOshj5CHLbs4XbOWt75RaSglDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rh7z1ianVOQ9B8cA0FE8EUtmDvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:c5:8f:6f:1e:71:a6:bb:71:8e:c6:6d:99:6c:4c:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae1ef3d626a754e43d07c700d0513c114b660ef5
Validity
Not Before: Apr 17 22:01:37 2025 GMT
Not After : Apr 18 22:01:37 2025 GMT
Subject: CN=bdda560ffb0fc2eb08217674e5c36288c9e140e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:54:e0:71:49:9b:02:6a:14:ce:5e:91:b9:d3:
0a:9c:b2:d6:2a:62:2d:bd:06:f9:1e:05:2c:c1:d0:
c9:c6:2c:d1:10:63:c4:e4:88:ef:cb:1a:ff:87:97:
9e:0b:81:cb:48:99:a6:c7:42:34:25:b7:2a:9b:3a:
21:1d:1c:90:65:e8:12:59:cc:5f:4a:b5:e7:e7:4f:
90:68:b6:92:85:a8:82:65:04:c4:b5:87:22:76:53:
a0:bd:a7:9f:39:81:7b:39:43:5e:4f:f1:70:7f:a8:
80:d9:6f:75:d0:90:83:d8:91:fe:07:01:8a:27:0d:
a3:c5:06:b8:af:63:e3:26:c3:ec:2f:96:19:2c:d1:
ac:dd:28:4e:45:33:d2:cd:6f:4c:0d:65:74:a5:39:
22:f0:59:68:03:6b:69:7a:29:92:3a:3d:d7:3a:3c:
5d:c3:74:72:32:41:fa:0e:da:9d:4c:75:1c:bd:ad:
56:26:10:6b:2b:3e:da:42:06:53:4d:67:b9:87:e5:
c0:da:9c:78:33:4d:33:76:4c:29:57:5e:b4:4c:06:
5f:d5:e4:2e:cb:bd:e0:3d:33:9e:c0:64:ab:39:83:
af:67:ce:ca:01:eb:06:9a:cb:fa:72:ec:0e:60:f9:
42:02:e7:e1:53:a2:b3:ba:3c:84:23:b7:46:c9:ab:
69:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:DA:56:0F:FB:0F:C2:EB:08:21:76:74:E5:C3:62:88:C9:E1:40:E5
X509v3 Authority Key Identifier:
keyid:AE:1E:F3:D6:26:A7:54:E4:3D:07:C7:00:D0:51:3C:11:4B:66:0E:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh7z1ianVOQ9B8cA0FE8EUtmDvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:5f:a6:05:28:ec:1b:f3:d8:0d:a1:b1:9d:ed:bc:45:c8:fa:
31:af:20:9b:91:83:9b:50:a3:18:a3:f1:ec:2a:77:43:df:6e:
41:ec:f0:a8:96:d2:0a:78:9c:fa:4a:a9:56:65:ce:4f:a3:16:
57:72:99:4f:4f:a5:15:f1:71:96:27:9a:8e:72:da:94:07:6f:
2c:4f:29:b5:e6:78:99:4a:c4:00:7b:ba:53:eb:af:d8:07:f0:
88:36:ed:b8:fc:ac:1e:b9:6a:00:24:ad:b5:90:8b:20:0b:2b:
ba:42:77:5e:09:89:88:7f:6f:81:32:47:14:0d:6f:b0:fc:49:
e0:6e:11:8c:32:13:6d:b3:f2:e0:12:87:89:9c:c2:59:a9:b7:
0f:eb:f2:ad:98:8e:4a:da:f9:6f:e4:fa:e3:1b:d2:45:ab:79:
8b:52:0a:3b:08:10:11:f9:cf:44:60:4d:36:00:ac:07:c8:e4:
37:41:dc:e8:43:ef:22:3c:69:f0:52:06:59:e1:93:f9:60:23:
29:49:ed:fb:9e:a7:55:cc:31:62:e2:d3:8c:e3:f9:eb:cd:ac:
77:9c:c4:c3:30:1e:65:87:f9:e3:0f:81:4d:81:e5:c5:81:a2:
8e:ff:d0:97:ac:85:33:05:b4:0c:8e:05:69:a0:f4:fd:04:f0:
9e:c9:65:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 01:25:53 2025 by rpki-client