Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.mft
File: pOuetVR8f18ar8CtoUCAVBlhhyY.mft (raw, json)
Hash identifier: s/6C4ZmJxwifPH7Gkp4O288ka3u2LBPu7sbrSfYTnrU=
Subject key identifier: 60:EA:4C:E3:00:4A:99:FF:E8:8D:9C:C6:DC:EA:C5:55:E9:E9:24:84
Authority key identifier: A4:EB:9E:B5:54:7C:7F:5F:1A:AF:C0:AD:A1:40:80:54:19:61:87:26
Certificate issuer: /CN=a4eb9eb5547c7f5f1aafc0ada140805419618726
Certificate serial: 01964AB3D9EEB6B12567C623EAA3C7123594
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOuetVR8f18ar8CtoUCAVBlhhyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.mft
Manifest number: 08E9
Signing time: Fri 18 Apr 2025 21:00:22 +0000
Manifest this update: Fri 18 Apr 2025 21:00:22 +0000
Manifest next update: Sat 19 Apr 2025 21:00:22 +0000
Files and hashes: 1: J_w-klg8Fz7usxtg6f6kBplmW2Q.roa (hash: wSUiP/GQT3afkhYb4zAVk2weNrXx80BBBUvY2crSbB8=)
2: pOuetVR8f18ar8CtoUCAVBlhhyY.crl (hash: /efb9kdWHa1MN21g3hNl9m+Mmf8T3btyUc8ezOJFrOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pOuetVR8f18ar8CtoUCAVBlhhyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 14:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:b3:d9:ee:b6:b1:25:67:c6:23:ea:a3:c7:12:35:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4eb9eb5547c7f5f1aafc0ada140805419618726
Validity
Not Before: Apr 18 21:00:22 2025 GMT
Not After : Apr 19 21:00:22 2025 GMT
Subject: CN=60ea4ce3004a99ffe88d9cc6dceac555e9e92484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e4:1a:63:e5:21:97:3b:2d:ae:72:c8:ce:47:
ce:8e:a5:c9:58:47:4b:35:ef:83:00:30:b3:c4:19:
3f:c4:a8:eb:d4:33:67:67:73:63:80:05:66:3e:73:
87:c1:d0:9c:c8:9e:9d:57:29:29:ef:52:66:ad:f3:
d3:11:26:37:e4:29:e4:9c:18:cf:ec:f7:0c:44:f7:
98:67:48:67:93:0e:2b:a9:7c:ff:c8:59:4a:b2:2f:
b7:ec:8a:b7:7d:2a:2a:7a:01:92:50:a8:42:f2:ed:
f0:95:e5:b9:d8:97:65:98:3d:03:c0:5e:27:7a:ee:
7c:60:95:9e:58:bc:14:a5:93:a4:4d:b1:2b:73:06:
49:28:de:77:7d:e7:e1:8b:46:27:24:16:d0:fb:ca:
79:98:3c:be:c2:3f:88:7c:f5:e6:a6:78:a6:76:c3:
c6:5f:79:45:84:29:1a:75:1a:e8:ea:1f:92:b5:79:
51:e3:52:fc:ec:41:ef:0e:8d:0d:f2:96:11:b3:f7:
85:86:e3:4e:7b:cb:66:82:4d:03:1a:47:18:07:91:
8a:44:a8:8f:1a:a8:c3:30:58:6c:9d:6c:8e:c2:5d:
f6:c9:39:5e:cb:84:6b:a0:07:fc:c6:dd:5a:9f:6a:
82:d6:10:56:9e:5c:95:3b:d7:76:cf:a1:97:c6:19:
cf:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:EA:4C:E3:00:4A:99:FF:E8:8D:9C:C6:DC:EA:C5:55:E9:E9:24:84
X509v3 Authority Key Identifier:
keyid:A4:EB:9E:B5:54:7C:7F:5F:1A:AF:C0:AD:A1:40:80:54:19:61:87:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOuetVR8f18ar8CtoUCAVBlhhyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:bb:9d:01:b6:4c:cb:03:0c:5c:49:36:57:72:dd:1e:54:3f:
ac:db:0e:f0:0d:1f:21:f8:cf:73:9e:94:80:bd:a5:6c:3d:2e:
fa:48:d1:9f:90:40:f1:4b:57:eb:56:b9:10:33:f2:65:cc:23:
10:6d:4e:ff:8a:96:c4:71:35:15:cd:66:8e:44:ba:02:be:13:
52:c6:c6:db:cf:f0:b1:a6:2b:77:5f:ac:f1:a9:d8:95:83:db:
47:60:6d:c2:a0:da:5c:cf:44:43:06:cd:71:48:9b:dc:8a:be:
5d:ab:82:ef:ec:68:ad:19:d9:57:00:94:a8:ea:fa:c7:df:0c:
72:ec:01:70:10:76:f8:d9:96:f6:0d:b3:51:37:47:a9:03:65:
53:a1:96:6a:df:59:17:ff:fc:b6:e3:38:8f:ec:7c:5a:91:90:
ba:e7:82:ad:ee:5b:2c:38:1d:c2:b3:4f:55:14:e8:4f:4c:0c:
83:dc:20:e2:89:5c:5a:7a:3a:d2:31:cb:13:95:87:fa:5e:cb:
f3:68:c5:dd:de:5e:82:0f:f5:17:f9:32:e2:41:6d:6b:c2:79:
f2:10:9a:1a:0c:17:e9:05:71:84:39:47:45:93:7c:d9:88:78:
04:7b:84:e5:90:b7:3e:73:fc:0f:b6:75:c1:00:8d:8a:1e:a5:
55:34:29:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:44:46 2025 by rpki-client