Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.mft
File: DEd6vwon7eiG-8QkE9eonCJrEfo.mft (raw, json)
Hash identifier: WmP+15CUrqxvEut5SxkVM4KwV/LtyWmuB+IVudRk9s0=
Subject key identifier: 25:83:E4:7D:0E:F3:A4:F0:6A:8A:93:71:F2:79:C1:15:1B:5D:2B:BE
Authority key identifier: 0C:47:7A:BF:0A:27:ED:E8:86:FB:C4:24:13:D7:A8:9C:22:6B:11:FA
Certificate issuer: /CN=0c477abf0a27ede886fbc42413d7a89c226b11fa
Certificate serial: 01964EC76FE3FC34E1ABD0EAFE07008657EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DEd6vwon7eiG-8QkE9eonCJrEfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.mft
Manifest number: 1211
Signing time: Sat 19 Apr 2025 16:00:15 +0000
Manifest this update: Sat 19 Apr 2025 16:00:15 +0000
Manifest next update: Sun 20 Apr 2025 16:00:15 +0000
Files and hashes: 1: DEd6vwon7eiG-8QkE9eonCJrEfo.crl (hash: oRoHLALjPpstcpBOc8s1Z+aWhLdWEqjijezM1e9T8pY=)
2: MYyuhG97imzI5Pm1fkTfDLbKlzY.roa (hash: k660F4i2QJei9j4+uwjYRvwDfAYznP8Ua/OgE2wvOJU=)
3: hHJHjw71kMqAy3nNekCDF8-fv6E.roa (hash: fFUGKJTKX7mKwkHmDQYrtXQn9GbWgqgB8AHbXkjZidU=)
4: r4VU_uNqDC_tYxTm1Z-aicTmAoU.roa (hash: GEBOWS5Nmk+ZdCwQMB5B+9yuw+vJ1/5swydSImIPrxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DEd6vwon7eiG-8QkE9eonCJrEfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:c7:6f:e3:fc:34:e1:ab:d0:ea:fe:07:00:86:57:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c477abf0a27ede886fbc42413d7a89c226b11fa
Validity
Not Before: Apr 19 16:00:15 2025 GMT
Not After : Apr 20 16:00:15 2025 GMT
Subject: CN=2583e47d0ef3a4f06a8a9371f279c1151b5d2bbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:17:ce:ab:81:47:c3:45:c7:2c:1a:b1:f2:9a:
61:1f:70:fb:17:63:1e:e3:eb:fa:09:f6:5e:94:e7:
92:84:33:fb:e6:20:fd:ab:e7:0a:e9:4d:a6:ef:90:
7a:fd:18:fd:cb:a8:25:af:af:bb:d7:f4:99:00:d1:
1d:a9:19:2d:6e:bc:b1:3f:b3:16:69:c3:6a:4a:e8:
f7:98:74:a5:93:b7:8e:82:95:61:88:68:6f:1c:f4:
47:89:c8:7c:28:65:b4:d9:ab:65:23:09:e8:b4:1e:
88:f7:6a:35:4e:58:dd:6f:e4:90:a8:6f:5f:a6:22:
c5:d5:62:ae:01:3f:87:3a:d5:8b:d0:25:f7:9b:ea:
ff:e3:cc:7b:2d:49:9f:58:ee:08:27:74:22:32:10:
12:ba:a0:00:95:64:b1:71:3d:32:1e:55:f5:81:5c:
fc:50:2b:1a:b3:7d:c8:ae:ae:b8:6e:87:fb:6f:df:
7d:37:7c:03:32:fa:f3:19:1f:06:da:9f:87:2b:4b:
67:d2:f7:f9:f4:b5:a0:44:6e:3d:a9:3e:f0:c1:36:
c5:94:ec:ea:e9:0f:c0:ad:67:49:f2:2b:a9:94:b1:
2f:0b:b0:f1:1b:bb:d6:ab:4d:1b:80:d0:6c:89:5c:
de:00:54:51:34:d6:bc:7e:9d:66:50:c0:6d:13:ea:
f3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:83:E4:7D:0E:F3:A4:F0:6A:8A:93:71:F2:79:C1:15:1B:5D:2B:BE
X509v3 Authority Key Identifier:
keyid:0C:47:7A:BF:0A:27:ED:E8:86:FB:C4:24:13:D7:A8:9C:22:6B:11:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DEd6vwon7eiG-8QkE9eonCJrEfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:6f:73:88:fc:61:e7:88:41:19:66:64:9f:9b:79:a0:4e:8c:
4e:c4:b7:8a:93:43:ab:12:c0:84:e2:3e:55:68:a7:ac:f5:2c:
eb:df:7c:07:65:a3:c1:58:c4:69:bd:6a:4d:8c:f4:6b:f0:02:
c7:89:b0:c5:b1:b8:13:25:62:3b:ed:a0:cb:ee:9c:7c:1f:6f:
bf:43:ba:29:8b:96:b5:9f:a7:df:e7:d8:79:87:dc:89:23:db:
8a:0c:00:bb:81:2f:1f:f5:b0:46:7f:df:7d:55:48:e2:85:e8:
c5:64:25:46:92:fa:ee:68:29:07:c4:47:92:e7:7d:34:b8:ed:
29:7d:ea:2c:66:80:35:d8:b6:de:31:99:96:80:8a:86:98:f8:
6a:47:6c:2f:b3:ac:45:c2:89:60:b1:c1:bd:95:f8:13:69:78:
64:aa:32:50:d6:df:f0:9a:8a:99:e9:08:c7:fe:d5:e2:33:7e:
35:c4:f5:a1:61:24:8d:19:d0:0a:b0:9d:7e:c8:48:9b:0f:59:
02:cc:5d:60:b4:ce:1d:e2:c1:d4:f9:83:2e:3c:ef:4a:a0:13:
de:db:ce:8b:8f:13:fc:18:38:3c:5e:3e:a0:f6:60:4a:3a:0b:
ab:bb:6b:ff:42:71:99:62:8c:84:b2:cd:b8:32:73:30:96:7b:
9b:44:59:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:44:51 2025 by rpki-client