Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.mft
File: rpPMjMqB-gDcU-e4B46RtcEbou8.mft (raw, json)
Hash identifier: l4/Yo1lqSjmsq7Z1oNEBseISBJC9hdlBkvsUEl363wE=
Subject key identifier: 2A:6A:88:99:DF:E9:53:FB:73:D7:45:09:83:28:6A:A8:5C:F7:1A:2C
Authority key identifier: AE:93:CC:8C:CA:81:FA:00:DC:53:E7:B8:07:8E:91:B5:C1:1B:A2:EF
Certificate issuer: /CN=ae93cc8cca81fa00dc53e7b8078e91b5c11ba2ef
Certificate serial: 01967868AB04038AE8DF8DACEF25766F8DC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rpPMjMqB-gDcU-e4B46RtcEbou8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.mft
Manifest number: 1019
Signing time: Sun 27 Apr 2025 18:00:47 +0000
Manifest this update: Sun 27 Apr 2025 18:00:47 +0000
Manifest next update: Mon 28 Apr 2025 18:00:47 +0000
Files and hashes: 1: crHez21ajs4tpxPy7D0FO2U5bxU.roa (hash: gCTLggUH/wf+1HoWxwo5Fpy8idWpj7d4gVSkhA0S2qM=)
2: rpPMjMqB-gDcU-e4B46RtcEbou8.crl (hash: WThgNsMam+Kobtcc3vEmFA46f1gcmzGe1vZ6nwsJCBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rpPMjMqB-gDcU-e4B46RtcEbou8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 18:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:68:ab:04:03:8a:e8:df:8d:ac:ef:25:76:6f:8d:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae93cc8cca81fa00dc53e7b8078e91b5c11ba2ef
Validity
Not Before: Apr 27 18:00:47 2025 GMT
Not After : Apr 28 18:00:47 2025 GMT
Subject: CN=2a6a8899dfe953fb73d7450983286aa85cf71a2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:48:28:ba:f7:d2:58:91:74:05:34:2e:f7:63:
26:45:70:f5:4a:b2:11:99:ee:ab:15:b5:a2:17:51:
9e:4c:be:31:b3:d6:a8:20:52:b0:bc:c0:dd:98:db:
e9:f5:86:64:e6:ca:c3:c4:05:13:d9:e3:80:24:fd:
09:c8:8a:f8:01:9a:b8:e5:cf:e2:5c:d1:39:45:0a:
ab:0c:46:69:de:17:73:5f:02:fe:19:cb:4b:eb:6a:
ee:44:72:1a:1c:92:69:f8:73:75:e1:3b:19:2b:8e:
57:37:c1:ab:91:b0:0f:71:3c:81:a1:c4:2d:c2:1b:
f1:45:97:ed:07:5f:95:ad:6d:97:7b:5f:f1:6b:e1:
a0:5b:95:48:6d:4a:81:77:82:ff:3c:e6:ff:77:ce:
80:0e:fa:e7:3e:20:f0:5f:93:61:b5:d4:df:02:5e:
fa:76:17:b8:7f:95:cb:ca:b6:0c:7f:0f:de:d5:a0:
ae:07:e3:9a:b0:d3:94:b9:2f:c1:10:23:28:9b:be:
8e:84:12:da:69:87:8d:f5:45:39:b8:20:d0:bf:ec:
a6:25:5a:8a:80:cc:3c:50:e5:e9:c1:4e:b3:9d:6a:
26:c7:59:28:57:dd:9f:13:9e:5c:f5:35:22:0e:59:
b6:e8:61:50:d6:d8:19:5b:fa:9f:51:82:dc:ae:d3:
16:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:6A:88:99:DF:E9:53:FB:73:D7:45:09:83:28:6A:A8:5C:F7:1A:2C
X509v3 Authority Key Identifier:
keyid:AE:93:CC:8C:CA:81:FA:00:DC:53:E7:B8:07:8E:91:B5:C1:1B:A2:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rpPMjMqB-gDcU-e4B46RtcEbou8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:6f:af:cf:7e:dd:7d:79:7a:41:6f:16:f1:d4:47:9e:fc:c7:
cf:56:14:95:d5:c1:fc:6f:fb:c3:b2:c7:a6:fe:d4:b8:e6:68:
91:5f:89:99:c9:f2:88:4d:e9:69:09:23:4f:4c:45:d0:46:1d:
9c:c6:37:e8:b9:33:33:d1:3b:33:fe:1b:51:6d:77:5e:10:aa:
79:8a:52:19:2f:a5:76:e4:d6:c0:e9:60:5c:57:a6:f3:30:4c:
c0:7b:74:30:7c:67:55:2f:14:ce:1a:7f:97:f2:e7:58:78:ca:
69:0e:67:85:51:80:e6:96:da:c7:29:e4:2c:1c:e3:cb:1c:fb:
56:bc:39:5e:6b:18:d5:a2:23:71:c9:88:5e:10:0c:2c:0c:99:
7c:48:65:75:a5:b3:17:52:e5:01:a8:97:38:93:dc:6f:6c:e3:
48:58:c3:44:23:75:ec:22:7b:94:97:77:93:f2:4c:81:2b:9b:
c5:cb:ed:af:b4:8f:8e:e3:0e:e7:56:25:d0:a0:18:9a:95:37:
96:5d:ce:2e:2e:c5:57:ee:af:76:f8:71:da:ca:56:fd:7a:ce:
cf:d4:47:94:98:89:b8:05:6e:9b:00:b6:cf:a0:3d:97:64:53:
06:5e:2b:3a:3b:07:88:cf:eb:ff:80:88:7d:cb:20:cf:aa:68:
0d:46:63:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 03:25:54 2025 by rpki-client