Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.mft
File: rZr63kGDroAEjWuEgY7sRvaA-iY.mft (raw, json)
Hash identifier: w6uQixOlflgTWMv3roulXd0bDHMiYb31aim5PNL6KRc=
Subject key identifier: 48:DA:C5:DE:FD:97:CC:CD:BA:76:4F:E4:11:96:CE:79:34:F1:B0:D8
Authority key identifier: AD:9A:FA:DE:41:83:AE:80:04:8D:6B:84:81:8E:EC:46:F6:80:FA:26
Certificate issuer: /CN=ad9afade4183ae80048d6b84818eec46f680fa26
Certificate serial: 01967FEB1AC3CBF91DAC1CEC097FBCD1B08D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rZr63kGDroAEjWuEgY7sRvaA-iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.mft
Manifest number: 1347
Signing time: Tue 29 Apr 2025 05:00:36 +0000
Manifest this update: Tue 29 Apr 2025 05:00:36 +0000
Manifest next update: Wed 30 Apr 2025 05:00:36 +0000
Files and hashes: 1: dHcu1Xe1bMDTNim9SJl30JSk4hI.roa (hash: qRzLbHq22DmrTaMRCm+OCQCo4sWL5SJUeqY8R0TqngI=)
2: g1AtdX4-A4stQRdXTWV50haWr_U.roa (hash: SfjbeTWsFCpHADmiaD0ANERB3vzQ++Aj8Swnoj6lsUI=)
3: rZr63kGDroAEjWuEgY7sRvaA-iY.crl (hash: 7x0kp1nt4GKaQA2+ksA1/D05AmGx5QDdN+6dUFifCtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rZr63kGDroAEjWuEgY7sRvaA-iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:eb:1a:c3:cb:f9:1d:ac:1c:ec:09:7f:bc:d1:b0:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad9afade4183ae80048d6b84818eec46f680fa26
Validity
Not Before: Apr 29 05:00:36 2025 GMT
Not After : Apr 30 05:00:36 2025 GMT
Subject: CN=48dac5defd97cccdba764fe41196ce7934f1b0d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1a:06:88:18:29:b4:81:78:f4:f0:28:75:1d:
0e:10:5c:b1:84:4c:ec:2a:cc:ad:e1:b3:fe:52:03:
f4:84:9a:f7:61:ec:3d:f8:10:2e:e0:80:c7:c3:e0:
3f:15:e8:ba:5c:dd:17:e9:41:43:96:a8:b5:22:86:
8e:60:ef:da:3e:d0:7a:a8:c5:1f:c7:21:9d:6f:68:
29:12:93:50:0f:95:7f:a4:87:ef:28:da:6e:68:3f:
61:69:9c:85:ab:00:5b:a1:7e:d4:b4:49:e7:00:50:
1f:35:d6:85:3d:63:b3:b7:92:6b:b6:4b:e9:bc:cf:
ff:00:90:d9:dc:b3:64:c2:33:5f:51:53:9b:46:bc:
34:08:c6:d8:73:a7:6e:3e:d9:29:8c:7a:11:4d:7d:
de:b9:e1:c4:62:25:3f:8c:e0:b7:7d:22:5e:3f:15:
c5:50:95:89:e3:1c:7f:aa:14:ea:bb:99:5d:7c:51:
e8:8a:87:a9:ad:2d:40:2c:85:93:56:a4:f6:46:eb:
4d:7d:06:73:5c:45:f2:87:6b:69:d4:b6:8c:b6:b9:
db:fa:59:cf:2f:e3:bd:12:c0:98:6e:6b:f7:e2:9e:
df:40:ca:d3:f0:c1:07:18:d5:94:83:aa:35:af:f2:
c2:ff:d5:b9:7f:07:cd:c5:c9:67:b0:70:80:a9:84:
f9:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:DA:C5:DE:FD:97:CC:CD:BA:76:4F:E4:11:96:CE:79:34:F1:B0:D8
X509v3 Authority Key Identifier:
keyid:AD:9A:FA:DE:41:83:AE:80:04:8D:6B:84:81:8E:EC:46:F6:80:FA:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZr63kGDroAEjWuEgY7sRvaA-iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:d3:e2:e2:79:3d:65:79:44:78:8d:02:f5:19:cf:4e:be:6a:
9a:2c:d3:13:70:f0:64:10:66:67:f7:ec:56:55:a3:6d:c1:cb:
d0:8d:21:e4:16:66:0f:8d:f7:ba:81:5d:03:63:2f:3a:35:4d:
36:3f:8a:48:6b:6c:c2:d5:da:6d:f1:bc:1f:f7:41:1b:e3:77:
69:ae:e2:8b:60:be:ed:90:4f:20:4a:b3:fa:8b:55:00:b3:c2:
65:1d:9e:09:e7:51:e3:5b:96:4d:7e:86:33:73:11:70:94:5e:
25:12:1d:22:30:01:fb:c1:3c:f3:bc:4d:00:ba:29:f1:c8:57:
80:0c:58:11:62:0e:3b:57:de:74:1a:24:26:78:4f:35:0d:4c:
d5:02:cf:ec:e3:58:63:a8:7f:76:23:f9:53:04:46:88:3d:9f:
16:36:7b:b4:1b:5d:a4:fd:df:4c:be:0b:a9:79:4b:95:13:96:
74:7e:cc:d5:1e:75:e6:49:ae:e4:5b:35:fd:e3:c8:45:d6:56:
bf:b7:85:93:eb:9b:53:52:f6:9e:93:19:5c:b6:3c:b7:2e:8b:
64:4f:d7:9c:8a:9c:79:51:00:f6:2d:1a:ca:02:6b:a1:c7:e7:
aa:b5:7e:b0:a8:9b:a7:8b:43:c6:03:a1:20:36:3e:dc:5e:40:
e1:0c:9c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:09:26 2025 by rpki-client