Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/218197-7ec1-43a8-a591-73675f18113a/1/mNZvua2ttqkFe_YKqj_1LGZUBBg.mft
File: mNZvua2ttqkFe_YKqj_1LGZUBBg.mft (raw, json)
Hash identifier: h6AMTKlEY1jx6gGJQF5fSUC+KVrJz4R9+PRCg5588Wk=
Subject key identifier: 7E:46:2F:2F:4A:9C:1D:D8:32:6D:F7:8E:9C:ED:5C:DE:91:87:01:CC
Authority key identifier: 98:D6:6F:B9:AD:AD:B6:A9:05:7B:F6:0A:AA:3F:F5:2C:66:54:04:18
Certificate issuer: /CN=98d66fb9adadb6a9057bf60aaa3ff52c66540418
Certificate serial: 019651919FDEF5A5E9CF9378964A8EB3FB15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mNZvua2ttqkFe_YKqj_1LGZUBBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/218197-7ec1-43a8-a591-73675f18113a/1/mNZvua2ttqkFe_YKqj_1LGZUBBg.mft
Manifest number: 0A54
Signing time: Sun 20 Apr 2025 05:00:20 +0000
Manifest this update: Sun 20 Apr 2025 05:00:20 +0000
Manifest next update: Mon 21 Apr 2025 05:00:20 +0000
Files and hashes: 1: 7j9uxnJfVl55LcxAf_fr4i2drjY.roa (hash: 7whaNaNl7Pm7UlaWsp36rTim4yAY8fmMQU6Aiv7KQCs=)
2: mNZvua2ttqkFe_YKqj_1LGZUBBg.crl (hash: Nu7kZ7cAiRyMTunCdnDSpEQCzs+6LX3YBQ1Z8BXhgnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/218197-7ec1-43a8-a591-73675f18113a/1/mNZvua2ttqkFe_YKqj_1LGZUBBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/218197-7ec1-43a8-a591-73675f18113a/1/mNZvua2ttqkFe_YKqj_1LGZUBBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mNZvua2ttqkFe_YKqj_1LGZUBBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 05:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:91:9f:de:f5:a5:e9:cf:93:78:96:4a:8e:b3:fb:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98d66fb9adadb6a9057bf60aaa3ff52c66540418
Validity
Not Before: Apr 20 05:00:20 2025 GMT
Not After : Apr 21 05:00:20 2025 GMT
Subject: CN=7e462f2f4a9c1dd8326df78e9ced5cde918701cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:80:1c:98:ad:2b:bb:39:ad:7d:39:1b:3b:9b:
6d:ac:3b:d7:67:12:81:1f:91:74:fa:09:a9:7a:2c:
f4:8d:6b:b4:4e:00:ff:b2:1e:60:af:da:b1:18:0f:
df:80:fc:72:d3:2c:23:2e:35:f2:04:a9:8b:f5:ef:
ee:0a:3c:56:ec:1e:d9:a1:29:dd:0f:50:0c:90:a9:
b2:ed:28:a3:3f:cf:ae:59:c0:31:12:1c:63:d1:4a:
80:c3:5b:c7:b6:6d:75:b3:fe:8a:c0:8a:86:fb:be:
d3:c2:0e:c7:c4:d8:55:d6:b7:62:ea:06:fb:b5:14:
0e:6e:cc:0d:d6:01:5e:d1:fc:2d:74:a0:81:03:e3:
d6:07:b1:92:be:6e:81:e3:dd:87:24:26:5c:27:1f:
fa:eb:9d:6f:de:dc:b0:9c:1d:d0:6c:4e:f0:30:a2:
b9:51:f3:d4:85:8f:19:4c:8e:ed:97:a0:fa:08:5d:
36:e9:32:33:15:31:96:9f:72:19:80:64:4e:b6:81:
b1:f9:70:28:be:46:79:f8:85:f5:02:86:b0:7c:9e:
63:d6:34:c3:94:31:76:3c:ab:c5:f3:3d:6b:22:3f:
00:47:fd:dc:3e:27:68:14:24:f2:65:5d:d5:5d:50:
4a:95:7e:39:49:9c:1f:31:ee:d2:18:64:2e:c0:94:
79:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:46:2F:2F:4A:9C:1D:D8:32:6D:F7:8E:9C:ED:5C:DE:91:87:01:CC
X509v3 Authority Key Identifier:
keyid:98:D6:6F:B9:AD:AD:B6:A9:05:7B:F6:0A:AA:3F:F5:2C:66:54:04:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mNZvua2ttqkFe_YKqj_1LGZUBBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/218197-7ec1-43a8-a591-73675f18113a/1/mNZvua2ttqkFe_YKqj_1LGZUBBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/218197-7ec1-43a8-a591-73675f18113a/1/mNZvua2ttqkFe_YKqj_1LGZUBBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:b8:de:fe:09:57:7e:b5:91:2f:c0:48:c8:09:e7:e5:8a:0f:
65:41:b0:ea:ff:6a:b9:20:cb:0b:36:0f:ef:dd:fd:b9:d5:fd:
28:3f:7b:19:77:c0:82:05:03:a0:34:73:b7:da:0e:a5:70:f8:
ea:e2:c3:6f:08:58:ca:18:42:48:5a:be:a5:c2:f5:68:14:e5:
f8:03:e1:42:ef:0b:81:ec:e0:a3:6f:71:d7:04:63:7c:f6:4a:
d7:92:96:b7:6c:bf:60:79:34:96:c3:a2:25:34:aa:22:14:d5:
86:38:0f:20:b0:24:48:c2:40:bd:a7:11:4b:c4:c2:b2:27:09:
79:63:d1:f0:6d:1f:e0:74:3d:68:a5:37:7c:19:5f:2d:5c:86:
67:39:9e:43:c1:63:54:b7:8d:65:4c:f7:06:0f:7b:0b:11:74:
3c:ed:92:a9:91:d1:78:dd:dc:4e:31:ec:ee:cc:36:c0:c0:06:
be:00:79:18:cd:50:89:de:10:c8:5b:08:66:9b:53:5e:26:fc:
55:43:26:f7:11:e3:fc:b9:95:cf:43:87:b4:a2:a4:3e:03:5f:
0b:82:47:92:b5:82:b6:83:24:54:fe:b8:29:50:24:08:8c:9d:
f3:bb:b4:d5:c1:f0:6d:98:4b:06:17:e7:d3:c5:f0:35:43:d5:
cb:5e:1a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 14:25:15 2025 by rpki-client