Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.mft
File: dMf46RuB_mSHMHxSJusET5I5bOo.mft (raw, json)
Hash identifier: XWYvngKTRHKtChfOCcgin6PLXMWW+rQcGwp2JHGCWo0=
Subject key identifier: 93:7A:3F:5B:43:69:1D:C7:3D:3D:A2:C8:27:53:07:A4:02:1A:81:70
Authority key identifier: 74:C7:F8:E9:1B:81:FE:64:87:30:7C:52:26:EB:04:4F:92:39:6C:EA
Certificate issuer: /CN=74c7f8e91b81fe6487307c5226eb044f92396cea
Certificate serial: 019642FA707F6593FCCDFC3E5EF87DA0B719
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dMf46RuB_mSHMHxSJusET5I5bOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.mft
Manifest number: 1487
Signing time: Thu 17 Apr 2025 09:00:31 +0000
Manifest this update: Thu 17 Apr 2025 09:00:31 +0000
Manifest next update: Fri 18 Apr 2025 09:00:31 +0000
Files and hashes: 1: TveYMpv43ads8kL3tJIaF2Lq5Pc.roa (hash: ejisx3Wb0866dp+ZOEjX4YrYq2/QpbZKuvGuyNEFbcQ=)
2: dMf46RuB_mSHMHxSJusET5I5bOo.crl (hash: 7V4DmGp0Pmu1eBS0sB7Z39P1Ox5YL/gzgG19KRKa9IQ=)
3: i8p3sKDUMyTMnXunF78cOCp8z50.roa (hash: B+LPh5Y0LpN6D/zkvt6qpLxNFEw2L77BjweCvws2PRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dMf46RuB_mSHMHxSJusET5I5bOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:42:fa:70:7f:65:93:fc:cd:fc:3e:5e:f8:7d:a0:b7:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74c7f8e91b81fe6487307c5226eb044f92396cea
Validity
Not Before: Apr 17 09:00:31 2025 GMT
Not After : Apr 18 09:00:31 2025 GMT
Subject: CN=937a3f5b43691dc73d3da2c8275307a4021a8170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ce:91:7d:0b:be:7e:0a:18:d6:50:ca:af:39:
c4:b0:40:d9:32:bb:7f:8e:e1:c1:7a:a9:74:1c:03:
85:af:bf:fc:e3:48:70:e7:d3:e0:57:52:df:9a:9c:
e8:45:31:5b:fb:a0:0e:1c:10:ba:a5:c3:92:b3:98:
6e:c7:9c:3e:2b:4e:2f:7a:a2:cf:6c:0e:6a:2d:0e:
b9:6c:9b:bc:5e:74:a4:fe:6e:2f:b7:44:6a:c3:8c:
44:d2:6d:83:fb:b4:ea:83:f6:6d:e8:48:7b:bd:bd:
f9:1e:61:95:33:3d:a4:c3:60:c2:10:85:32:6b:fb:
d5:75:3f:56:a6:12:21:41:be:0d:77:81:5f:de:0b:
7c:82:61:08:ff:b6:2c:23:7e:4b:54:a3:e4:85:30:
d6:b1:1b:13:a9:2e:69:d3:a7:37:45:d5:64:3e:16:
98:00:76:14:9b:13:54:db:3b:f4:d2:c4:2b:e6:5b:
1c:11:db:63:83:0d:1b:f7:6b:3d:c6:63:c8:75:8f:
ba:ed:78:fc:e7:09:c5:b0:1b:34:50:88:9c:90:16:
fd:c0:63:64:4e:81:ff:c5:47:12:29:77:ab:9a:59:
08:ef:95:f8:83:d8:43:9f:89:be:9a:5f:b8:a0:90:
fc:01:b6:f0:6f:c0:11:95:96:3f:97:57:61:12:9b:
81:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:7A:3F:5B:43:69:1D:C7:3D:3D:A2:C8:27:53:07:A4:02:1A:81:70
X509v3 Authority Key Identifier:
keyid:74:C7:F8:E9:1B:81:FE:64:87:30:7C:52:26:EB:04:4F:92:39:6C:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dMf46RuB_mSHMHxSJusET5I5bOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:b3:41:66:76:2b:89:76:55:f5:67:3f:3f:6b:29:92:08:ff:
29:66:03:70:17:4a:e7:1e:36:cf:37:2e:83:16:64:ff:61:49:
64:47:5f:90:52:6e:3b:a8:47:ba:64:ad:38:19:3d:a5:8a:6c:
94:29:ef:ed:98:5d:b2:54:89:75:98:d8:5e:74:5a:57:1b:fe:
f1:32:8f:1e:e9:f5:a2:2d:8e:fa:32:56:da:d2:b5:b8:40:e2:
0e:40:7e:ab:5c:f4:88:ac:01:47:76:9a:fc:e2:cd:1a:37:91:
46:d0:25:45:fa:3b:5e:f8:87:6b:22:86:cb:05:48:f7:1b:24:
d6:f9:f5:dd:e5:4d:28:6d:db:ba:3e:e0:f5:cc:c0:69:78:67:
5d:a7:4d:87:f0:cd:d4:d5:0d:c5:af:a2:44:b1:5f:bf:07:56:
fb:c8:80:a9:88:89:93:8e:37:58:07:b4:44:46:3a:80:87:84:
15:01:a7:df:85:81:0e:c2:7d:c4:c6:bb:12:ae:09:2e:d9:d0:
39:2e:ba:d8:43:8d:70:5d:95:1f:85:48:6f:58:d7:ce:2c:1b:
83:f0:3b:f2:bb:06:21:f8:f5:f7:7c:44:ac:6d:72:0f:0a:4d:
46:8d:2a:85:a3:9c:03:f3:2e:ed:fd:44:a7:2f:fe:a6:33:b1:
f3:58:eb:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 13:25:38 2025 by rpki-client