Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.mft
File: t5OlR78L4t7tfIT-kC4zZld6IxQ.mft (raw, json)
Hash identifier: uE2r0EzAyaYkTONenhd8K8zuuabFQwKT8lyF7kvyI+8=
Subject key identifier: 68:43:37:C1:AE:BD:C5:E8:A7:F3:75:82:3E:FA:24:30:D4:12:19:4D
Authority key identifier: B7:93:A5:47:BF:0B:E2:DE:ED:7C:84:FE:90:2E:33:66:57:7A:23:14
Certificate issuer: /CN=b793a547bf0be2deed7c84fe902e3366577a2314
Certificate serial: 019655DCCFFAFD059BF247AB83FCA37677ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t5OlR78L4t7tfIT-kC4zZld6IxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.mft
Manifest number: 0D82
Signing time: Mon 21 Apr 2025 01:00:56 +0000
Manifest this update: Mon 21 Apr 2025 01:00:56 +0000
Manifest next update: Tue 22 Apr 2025 01:00:56 +0000
Files and hashes: 1: Fu8V7L-KmE4RQ0KgwQ-l9VyTFvE.roa (hash: G5JYSxAwHyem4a69edN/KGJ90OxsVksEMhgNs6pZaOw=)
2: fuJdLqdlLbSFzR5wICuESp5-Mhc.roa (hash: cagQfCDycKKd/UTpNij0HKDwbg7i0kvIBBf3pZu1p7Q=)
3: t5OlR78L4t7tfIT-kC4zZld6IxQ.crl (hash: TeTmesGQnN1LjOTrhLeVDJfJNrNUjCfkOzlINS4aRX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/t5OlR78L4t7tfIT-kC4zZld6IxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dc:cf:fa:fd:05:9b:f2:47:ab:83:fc:a3:76:77:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b793a547bf0be2deed7c84fe902e3366577a2314
Validity
Not Before: Apr 21 01:00:56 2025 GMT
Not After : Apr 22 01:00:56 2025 GMT
Subject: CN=684337c1aebdc5e8a7f375823efa2430d412194d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:86:1e:92:70:32:20:8a:72:b2:b5:33:30:48:
e5:73:85:62:19:8c:00:00:0d:94:8e:ba:f1:91:15:
26:4c:b0:0e:ae:52:51:86:bc:c7:26:e9:63:00:bc:
2a:37:0e:64:e0:c1:04:fb:1e:4b:e9:e5:14:f3:eb:
cc:09:ca:d3:34:6a:4a:29:f9:28:14:4a:89:36:6b:
64:e7:46:92:d4:a5:20:c7:5d:ac:44:e9:dd:1f:63:
24:35:4f:78:f2:4c:4d:d5:be:4d:ce:7d:78:d3:a9:
f4:d4:e1:71:da:bd:a3:1f:86:1d:c9:fc:d3:be:55:
64:49:6d:77:65:bc:46:19:ed:2c:97:c0:9d:45:fd:
d5:36:46:45:1c:29:d9:fa:63:40:d0:51:3f:4c:08:
e4:1a:e5:59:db:72:f6:b3:e6:8c:ae:30:3f:2a:bc:
76:c0:2e:f4:74:8a:7f:69:fc:d4:b9:95:f7:5f:60:
2c:a3:d7:53:e6:f8:f1:62:d8:aa:74:ac:73:e2:c3:
ff:86:01:fd:b9:84:da:55:5d:33:0f:a3:22:06:79:
cc:83:bf:43:5d:5f:a2:da:3b:f9:35:90:85:e5:e9:
01:a7:3f:6d:90:f3:3a:6d:8f:ba:e4:ff:b9:87:c3:
a8:1c:87:cc:34:a8:ad:ac:9f:ba:93:38:c9:5c:fe:
8e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:43:37:C1:AE:BD:C5:E8:A7:F3:75:82:3E:FA:24:30:D4:12:19:4D
X509v3 Authority Key Identifier:
keyid:B7:93:A5:47:BF:0B:E2:DE:ED:7C:84:FE:90:2E:33:66:57:7A:23:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5OlR78L4t7tfIT-kC4zZld6IxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:19:95:2b:5c:7f:40:48:b0:4b:c3:79:3a:7c:b7:fa:96:83:
1b:f2:ff:bd:3c:69:a4:ff:84:39:7b:9a:b0:ff:50:b5:dd:6d:
8b:fb:5b:8d:c5:d7:98:cb:b4:b3:32:00:d0:6e:a2:93:1c:88:
a2:65:e4:74:8c:60:bb:ce:30:60:eb:f0:9f:30:c2:30:b2:ba:
63:1d:fc:3f:dd:b9:90:c6:f0:a0:ca:47:b8:b6:de:03:37:e9:
b8:91:a6:47:96:31:45:e8:cd:4e:76:7e:ee:ba:79:cc:80:8f:
d2:bd:2a:dd:76:25:3d:65:4b:a9:9a:33:1f:11:1e:2a:15:8d:
f3:e1:41:9b:5a:3b:e9:b9:20:15:d7:0e:82:b4:c4:64:39:d0:
07:dc:66:c9:d3:ce:c3:13:37:1b:2d:4b:0b:3d:b0:3a:b5:ad:
9c:25:33:67:96:0a:c4:67:85:53:61:ce:29:7a:82:d4:c6:ca:
9b:af:78:ad:b2:80:1e:74:18:b9:14:ac:51:da:53:c5:2f:0f:
c3:01:ba:9d:f8:92:17:7f:01:cb:20:67:db:f8:7b:5b:92:f2:
d1:ee:76:9e:bf:13:01:88:ef:cb:0e:bc:71:a1:f9:64:39:2e:
f4:79:6b:0e:94:20:81:c5:91:79:7d:7e:b6:f4:93:58:45:eb:
9d:3e:37:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:27:51 2025 by rpki-client