Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft
File: d4DNTnTxhajxrUBSG2EbdNUWv3c.mft (raw, json)
Hash identifier: nVWSaNbdn6AKFntZJ8p9YSz2HX7ZHT7dCz3OkJaICc0=
Subject key identifier: 12:7A:0B:ED:DB:FC:83:10:54:67:A0:D1:1A:39:B3:B3:FE:41:9E:7E
Authority key identifier: 77:80:CD:4E:74:F1:85:A8:F1:AD:40:52:1B:61:1B:74:D5:16:BF:77
Certificate issuer: /CN=7780cd4e74f185a8f1ad40521b611b74d516bf77
Certificate serial: 01965011AB0D0922BB5F38ABF668E49DEE46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d4DNTnTxhajxrUBSG2EbdNUWv3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft
Manifest number: 14F9
Signing time: Sat 19 Apr 2025 22:00:57 +0000
Manifest this update: Sat 19 Apr 2025 22:00:57 +0000
Manifest next update: Sun 20 Apr 2025 22:00:57 +0000
Files and hashes: 1: WntKpaBL0rwf0OHtGIxbqp43a48.roa (hash: RD+6zKliyi529qWw5SlqL86NJOiZz+f7ljpnnMAUmvo=)
2: d4DNTnTxhajxrUBSG2EbdNUWv3c.crl (hash: Oms7xq7YugLLU+sUnIZkp8YwrZ0g1ad4Yh3HRCwA1tw=)
3: wGTkAR_0sF92lgaxXY9nSUR4GIc.roa (hash: eDBRIXJLntwza/xwaubebQOnZv9qj50gWoqkIryMxT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/d4DNTnTxhajxrUBSG2EbdNUWv3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:11:ab:0d:09:22:bb:5f:38:ab:f6:68:e4:9d:ee:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7780cd4e74f185a8f1ad40521b611b74d516bf77
Validity
Not Before: Apr 19 22:00:57 2025 GMT
Not After : Apr 20 22:00:57 2025 GMT
Subject: CN=127a0beddbfc83105467a0d11a39b3b3fe419e7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:89:1c:2c:d4:72:1e:4c:38:6d:8c:b6:8b:75:
05:f2:5d:54:de:ba:79:8b:e6:45:6e:e2:78:a2:c5:
21:f3:94:50:19:11:cf:e6:04:ff:c2:c7:46:82:78:
c5:dd:99:77:1e:7a:ae:81:74:d4:a9:9d:c2:3a:ce:
ed:0f:2b:f8:1e:6a:56:cb:80:40:cf:a6:d9:63:9e:
ab:13:c4:4b:e0:74:28:7f:ee:68:9a:d2:81:aa:4d:
3c:42:4d:5e:c4:a6:fa:56:c8:91:29:41:6a:7a:c3:
93:b4:04:46:09:1c:3f:28:07:0f:8d:43:0b:3f:15:
de:2c:47:a7:e8:6f:33:35:e9:36:b5:2b:0a:16:68:
17:4d:4e:a8:7f:35:8e:ed:1b:5b:06:b4:97:f2:be:
42:88:a5:01:69:62:35:14:b7:b8:ea:fd:86:5c:16:
75:2e:a7:43:52:59:25:95:a4:62:71:1d:0e:6d:16:
4c:c3:77:b0:86:16:bd:3b:b0:cf:80:d8:7e:a5:2e:
ae:9d:13:ee:47:2e:80:95:ea:94:5c:70:eb:1b:11:
b9:2d:88:f3:bc:a0:a3:98:77:22:a4:e4:29:1d:03:
b1:83:06:d4:e2:db:57:24:3c:94:c0:34:1f:ed:82:
e4:4e:df:54:89:02:f7:c6:c7:42:0b:65:52:28:7d:
ac:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:7A:0B:ED:DB:FC:83:10:54:67:A0:D1:1A:39:B3:B3:FE:41:9E:7E
X509v3 Authority Key Identifier:
keyid:77:80:CD:4E:74:F1:85:A8:F1:AD:40:52:1B:61:1B:74:D5:16:BF:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4DNTnTxhajxrUBSG2EbdNUWv3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:a4:0d:65:5c:c0:1b:4c:51:79:44:74:aa:27:37:6a:f3:cc:
29:2e:3a:c7:bf:a9:0c:ac:07:81:6a:af:93:1a:36:d5:60:0b:
26:e6:f8:f5:e4:dd:02:0a:14:84:bd:39:df:bd:6c:a8:b5:d9:
69:ce:5e:8e:86:0a:29:4c:f1:00:c2:4a:e8:28:b0:ea:42:8f:
06:a8:d1:49:c1:0e:e6:d9:d7:a8:a6:dd:9a:14:ad:05:5a:b0:
3d:87:6d:3c:19:a5:60:f0:79:17:33:ae:4b:9a:b1:da:6b:be:
cb:30:58:f9:42:e3:ca:7d:61:75:c5:91:a5:3f:f9:8d:1f:d8:
58:9a:35:f5:78:23:f6:7b:b4:05:46:bb:84:bd:23:f7:a5:f5:
c5:23:34:79:4c:96:06:83:77:83:f5:75:bb:9a:63:84:3f:54:
9c:7a:42:76:4d:c1:ac:dc:d0:e0:8f:bc:c0:8a:ce:b1:ff:d2:
37:30:f1:9d:f1:3f:07:48:ae:85:67:d3:ab:27:6b:86:20:7a:
bc:ae:69:6d:24:87:6d:45:64:c9:71:34:5c:1a:b1:3a:81:e3:
b4:8a:8f:66:62:34:29:87:64:7f:18:34:7e:75:28:d3:94:ae:
7a:31:f3:4d:8f:4a:e8:1b:04:8c:06:42:ca:1a:e6:1f:5a:11:
f1:ea:09:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:18:23 2025 by rpki-client