Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft
File: 67AW9G3i21zDEWWZ7occdsLINMY.mft (raw, json)
Hash identifier: FDQ3NSXWv9smS0Nrk6FBD6xp6iQ4BkygQtkx3x/MUvc=
Subject key identifier: C2:BE:FA:0D:F3:98:71:E7:98:57:20:5C:20:A5:87:F9:5C:09:7D:F4
Authority key identifier: EB:B0:16:F4:6D:E2:DB:5C:C3:11:65:99:EE:87:1C:76:C2:C8:34:C6
Certificate issuer: /CN=ebb016f46de2db5cc3116599ee871c76c2c834c6
Certificate serial: 01964CA2953B3FCB67D6CEB11D17865C36A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67AW9G3i21zDEWWZ7occdsLINMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft
Manifest number: 14FA
Signing time: Sat 19 Apr 2025 06:00:45 +0000
Manifest this update: Sat 19 Apr 2025 06:00:45 +0000
Manifest next update: Sun 20 Apr 2025 06:00:45 +0000
Files and hashes: 1: 0SO2bdDSFS2jl_PJgU_l_j97XeY.roa (hash: b5x4PF/4pc6ecIpAqqWDUvsSnbLqRaDPB8YvR8rbRKg=)
2: 67AW9G3i21zDEWWZ7occdsLINMY.crl (hash: s6aYS/evsoePZsAMI5jOUmN5E8qEroBRpvg2MZv69yY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/67AW9G3i21zDEWWZ7occdsLINMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 06:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:a2:95:3b:3f:cb:67:d6:ce:b1:1d:17:86:5c:36:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebb016f46de2db5cc3116599ee871c76c2c834c6
Validity
Not Before: Apr 19 06:00:45 2025 GMT
Not After : Apr 20 06:00:45 2025 GMT
Subject: CN=c2befa0df39871e79857205c20a587f95c097df4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e3:d6:eb:77:a9:a6:f5:3d:52:af:cd:e2:d8:
75:90:76:92:7e:5b:d4:a1:09:6b:fe:c7:84:f0:f6:
3b:7a:ef:f4:eb:db:05:68:1e:d5:da:7d:85:77:14:
01:3a:37:a4:75:f6:09:1b:60:2a:b3:6f:66:e4:b3:
8c:ee:73:72:22:85:bc:ca:12:7b:a8:a7:bb:8e:4f:
23:57:24:d6:a9:3e:65:41:f8:f7:43:5c:45:b8:6c:
b3:7e:a6:00:2d:18:9f:54:9b:e4:b9:4c:61:b9:a6:
82:b2:15:bf:fa:b7:5b:67:24:9f:b2:d8:e8:0e:2f:
04:9b:62:16:67:d8:cf:67:59:1c:a8:27:93:25:5b:
55:82:93:8a:66:a2:df:b3:bc:1a:d0:18:6e:5d:12:
92:84:da:e6:55:72:38:de:b3:bc:71:d0:f0:e8:07:
e6:d8:23:4a:12:77:aa:32:2d:46:30:e1:b2:84:26:
99:47:b5:00:3c:3c:32:4d:9f:83:f9:39:0a:c7:88:
e6:2f:61:98:ff:15:f1:83:69:9e:9b:fb:c3:fd:3e:
8b:95:4c:07:34:72:f5:9a:2b:c9:77:98:f7:7d:73:
40:0f:99:ae:bc:dc:97:4f:2a:71:14:c6:0c:65:a3:
d7:5f:60:a1:ad:2e:8c:38:c0:cd:e2:0e:d6:8a:2c:
38:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:BE:FA:0D:F3:98:71:E7:98:57:20:5C:20:A5:87:F9:5C:09:7D:F4
X509v3 Authority Key Identifier:
keyid:EB:B0:16:F4:6D:E2:DB:5C:C3:11:65:99:EE:87:1C:76:C2:C8:34:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67AW9G3i21zDEWWZ7occdsLINMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:5c:ec:a7:cd:18:ae:5c:a7:74:c3:92:9f:77:3b:06:2d:ec:
de:97:e8:62:3a:03:8d:f8:7d:ab:d4:30:95:f1:5d:7e:8f:ab:
20:9a:0d:45:e6:f6:fb:68:73:21:df:d1:d4:93:e0:fa:e2:ce:
20:00:46:c2:42:33:ec:56:2e:f3:93:39:ad:6c:5e:f0:4f:d3:
e1:0d:a8:8e:1d:ad:3a:88:de:81:8c:d8:eb:9a:f7:d7:62:d9:
80:76:ee:05:93:4b:79:55:4f:70:f3:3c:a9:2a:d3:9c:24:9a:
7f:36:3e:a4:b1:ce:9c:71:e4:5a:14:e1:0a:03:9d:84:5a:47:
9b:dd:97:ae:40:83:68:b9:f6:fd:d7:cc:0c:e5:75:3e:b5:28:
70:3a:da:10:eb:23:e0:60:0c:6b:4f:b6:73:2c:46:7c:15:03:
5f:a0:c5:09:b0:c4:6d:e8:cb:1d:da:a7:6e:9d:ce:f8:7a:0f:
30:9c:b1:bf:66:6f:3b:f0:5a:69:3b:90:ad:17:9b:91:c1:42:
37:a4:9f:b4:0b:dd:77:33:e6:b9:34:d7:d4:05:be:23:49:6d:
3f:33:33:8a:df:ac:99:82:b0:20:b9:74:a9:35:ce:45:83:33:
7b:c5:72:13:d2:2a:cf:3b:d8:b7:bc:0a:ab:97:e8:35:7a:de:
6b:68:61:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:17:08 2025 by rpki-client