Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft
File: arQ3nhGecQAczf7r9PKvLPXwego.mft (raw, json)
Hash identifier: emrka098jxzGrtr6kK3IjTEWeHfj0ifyy6A7NdYIOUU=
Subject key identifier: 0B:6C:3F:8E:38:38:1B:19:81:49:1C:58:CA:73:35:79:43:A7:6A:1B
Authority key identifier: 6A:B4:37:9E:11:9E:71:00:1C:CD:FE:EB:F4:F2:AF:2C:F5:F0:7A:0A
Certificate issuer: /CN=6ab4379e119e71001ccdfeebf4f2af2cf5f07a0a
Certificate serial: 019655A6001988524AC9F2E3682F1F76411A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/arQ3nhGecQAczf7r9PKvLPXwego.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft
Manifest number: 036C
Signing time: Mon 21 Apr 2025 00:01:04 +0000
Manifest this update: Mon 21 Apr 2025 00:01:04 +0000
Manifest next update: Tue 22 Apr 2025 00:01:04 +0000
Files and hashes: 1: I6IGWwtvcwjpv5OcYefwbQc8Dac.roa (hash: XsrwhU20IGp39xs49VqrIKTfmkeTvzqhqNOw6J/CaTU=)
2: arQ3nhGecQAczf7r9PKvLPXwego.crl (hash: pS2tmOTknjsJZBZr/YlPV5ezEDSbyHH+VghnS+drztk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft
rsync://rpki.ripe.net/repository/DEFAULT/arQ3nhGecQAczf7r9PKvLPXwego.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a6:00:19:88:52:4a:c9:f2:e3:68:2f:1f:76:41:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ab4379e119e71001ccdfeebf4f2af2cf5f07a0a
Validity
Not Before: Apr 21 00:01:04 2025 GMT
Not After : Apr 22 00:01:04 2025 GMT
Subject: CN=0b6c3f8e38381b1981491c58ca73357943a76a1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:61:e0:87:b8:c4:74:f5:0d:89:23:76:16:14:
bd:b7:6e:bb:60:3c:b7:00:24:d1:46:06:76:89:62:
e4:cd:ad:d1:c4:6b:9e:75:32:f8:53:e4:36:b0:9c:
c2:e9:da:ec:c1:28:ce:16:c7:1a:70:5b:9b:48:5a:
fe:8a:ab:b8:ff:94:65:4b:8a:bb:e2:2a:82:0f:95:
90:6d:01:45:3b:52:de:a0:41:b4:80:e8:d3:b5:62:
c7:87:68:e5:e6:12:40:ee:57:87:79:cd:94:fc:d6:
12:e4:81:ea:3f:56:41:8e:e7:ac:17:c6:40:31:86:
3a:67:8d:a9:a5:40:ae:f4:2d:99:e2:5f:7a:e5:76:
79:95:bf:71:a7:ae:85:b7:0d:7c:96:11:db:2a:a5:
bf:de:a8:cf:5c:8f:8a:01:d9:92:8a:90:0a:51:96:
92:a9:04:de:11:16:3e:f9:e6:21:f1:0d:95:af:f2:
74:64:65:94:e9:03:6b:ac:a5:08:b3:82:43:23:75:
ff:b9:f5:0f:86:d2:2c:e6:94:0d:94:c1:a0:a0:6b:
60:59:1c:46:ba:81:86:49:37:0f:f6:da:fe:f3:a1:
57:60:9b:a0:29:fe:a3:81:0b:73:9e:7a:42:fe:a7:
7f:44:21:4c:d0:b9:49:a5:4d:f6:02:54:7a:24:b5:
23:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:6C:3F:8E:38:38:1B:19:81:49:1C:58:CA:73:35:79:43:A7:6A:1B
X509v3 Authority Key Identifier:
keyid:6A:B4:37:9E:11:9E:71:00:1C:CD:FE:EB:F4:F2:AF:2C:F5:F0:7A:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/arQ3nhGecQAczf7r9PKvLPXwego.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:13:a9:b9:9d:cc:b4:ef:bb:3b:a0:48:c5:8d:d7:12:93:fe:
af:72:65:ad:40:c5:0a:b3:33:92:e5:fa:4d:a4:f7:b4:c5:f9:
b7:df:ad:f5:13:b8:0f:20:fe:64:a5:ba:5a:e0:a0:a0:5f:86:
a0:6c:9b:31:69:62:79:e4:2c:d3:4b:0e:b6:50:c9:42:8f:bb:
e1:97:e1:65:e5:10:26:7b:51:c0:e0:89:f3:47:52:64:9b:f9:
58:72:84:10:e6:e7:52:17:95:5c:1e:51:04:42:b2:e8:ce:1e:
60:8d:7a:4d:54:3b:27:5a:b1:1e:8c:49:62:0a:0e:2e:6e:0b:
cf:a4:e8:3a:a7:1d:27:40:81:b5:84:4c:4d:33:35:85:a9:59:
6f:71:e6:40:8d:ad:53:dd:38:8c:95:f5:2b:a2:d5:8f:69:23:
31:d0:b4:45:b0:e0:22:44:ba:cb:e3:91:59:46:3e:4c:75:37:
97:af:1a:ce:a4:e5:9d:fd:01:dd:c0:7b:76:90:64:6f:96:df:
df:b4:13:9a:f6:3c:a0:f9:a8:91:a7:0e:aa:70:90:c9:d8:68:
d4:81:d8:d7:60:99:36:1e:f5:66:9d:16:3f:38:42:f1:1c:4a:
e9:a7:15:b9:c8:16:4e:fa:3d:15:82:60:b8:bd:4b:d9:91:e2:
0e:4d:a0:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:48:30 2025 by rpki-client