Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.mft
File: 5ARKnRChnmsaztrJ_3eNT0CQaMs.mft (raw, json)
Hash identifier: 10qdmqxAguM77q3RyS0qDNEEF/jk9mWVbEJI13mmMts=
Subject key identifier: E2:F4:1A:A9:22:B0:79:55:32:6A:48:3F:50:5C:A4:87:11:EE:A0:99
Authority key identifier: E4:04:4A:9D:10:A1:9E:6B:1A:CE:DA:C9:FF:77:8D:4F:40:90:68:CB
Certificate issuer: /CN=e4044a9d10a19e6b1acedac9ff778d4f409068cb
Certificate serial: 01968322F9D764B97351A68AEB9D381A6004
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ARKnRChnmsaztrJ_3eNT0CQaMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.mft
Manifest number: 0A68
Signing time: Tue 29 Apr 2025 20:00:29 +0000
Manifest this update: Tue 29 Apr 2025 20:00:29 +0000
Manifest next update: Wed 30 Apr 2025 20:00:29 +0000
Files and hashes: 1: 5ARKnRChnmsaztrJ_3eNT0CQaMs.crl (hash: yaX2UHSYmu/p9BAB1hl/MvU3gDexfkeV16Jv1pemo9U=)
2: ZEltVn27Wr_tDWWUDsnoIPSexys.roa (hash: nTpT1tYnBssg4bHieTQOF2MWxJ4AkBKr1Y7xxrvK7kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5ARKnRChnmsaztrJ_3eNT0CQaMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 20:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:22:f9:d7:64:b9:73:51:a6:8a:eb:9d:38:1a:60:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4044a9d10a19e6b1acedac9ff778d4f409068cb
Validity
Not Before: Apr 29 20:00:29 2025 GMT
Not After : Apr 30 20:00:29 2025 GMT
Subject: CN=e2f41aa922b07955326a483f505ca48711eea099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:3c:89:61:32:36:3f:49:a9:7b:ae:00:76:d5:
14:5a:9e:42:04:41:d9:3b:b6:86:dc:c8:e8:08:bf:
05:b4:45:ae:5a:96:5a:db:86:2e:41:6d:9f:f6:99:
f7:87:60:c9:63:72:87:ea:3a:e5:d9:30:9b:e9:38:
ec:e9:6d:8f:86:39:88:3f:50:b8:c4:43:f4:4c:3d:
3f:e5:3f:e0:5e:20:c5:67:bc:3d:f7:23:ae:26:0f:
9c:dd:0d:7c:4d:06:14:7b:88:80:1a:6a:2c:91:17:
c2:37:2a:85:bd:80:52:01:ca:da:42:ce:83:5f:95:
d2:72:bf:95:b8:de:91:b5:e2:e6:3d:61:cd:79:a6:
b3:86:21:6d:88:57:6b:f5:0b:5d:be:b7:00:f4:8c:
07:61:6e:9e:51:85:67:7a:86:6f:a2:d4:7e:ff:f8:
c8:b4:b6:f0:66:af:57:3f:7d:62:7d:5d:8f:36:67:
e6:97:17:e9:ab:5b:2e:81:63:1c:ea:83:6f:ae:7b:
ee:81:ab:10:e7:ae:6b:cd:e5:e9:4e:e5:0b:17:fe:
30:8e:37:28:9f:0d:86:48:30:8d:62:0c:c7:69:6f:
10:39:d1:8e:ee:ad:6f:43:f4:84:03:63:09:fa:1c:
cb:a4:3a:60:e5:81:d1:27:70:0b:bd:3d:64:1b:a1:
54:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:F4:1A:A9:22:B0:79:55:32:6A:48:3F:50:5C:A4:87:11:EE:A0:99
X509v3 Authority Key Identifier:
keyid:E4:04:4A:9D:10:A1:9E:6B:1A:CE:DA:C9:FF:77:8D:4F:40:90:68:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ARKnRChnmsaztrJ_3eNT0CQaMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:8b:df:65:ea:1c:ad:2a:10:76:61:98:a2:04:bc:ad:7c:ec:
98:d9:60:54:ac:bc:25:ec:f1:7d:8d:a5:ba:19:04:53:0a:36:
1c:d3:0c:e9:e4:77:d5:5e:c4:03:f6:38:cc:ff:d5:5c:11:da:
fa:87:f1:a7:60:61:c9:86:7d:34:a9:33:f1:dd:5b:a0:ec:35:
5e:ca:c2:58:3f:4b:7e:f9:2c:3c:ae:65:19:e3:95:53:4e:98:
a6:e8:d8:b3:97:38:91:31:c7:7a:7d:3b:6a:2a:25:76:b7:0b:
9e:b1:7a:7f:f0:9d:fa:04:1b:e8:71:36:d4:41:3b:1e:cb:6c:
4c:11:7f:24:a2:4a:d5:61:f9:76:35:b8:cd:4c:ae:80:27:9f:
e3:d0:ed:d6:07:75:bf:15:4e:98:74:56:50:4f:f6:85:7b:46:
6a:40:60:c1:b3:1a:87:3e:41:3f:c8:74:2f:6d:13:35:ea:7e:
e0:e0:d5:13:68:4b:ed:8f:21:80:0e:91:20:e3:35:18:14:26:
b7:31:58:52:e7:42:b9:65:73:54:2e:2a:e1:87:5b:52:fc:5a:
a5:dc:e9:3c:76:59:6c:e4:3b:11:85:62:80:8a:13:ef:d3:a6:
c8:a7:30:37:f3:85:6a:d8:ba:0a:d3:fe:69:a6:40:9b:91:51:
d0:73:91:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:31:03 2025 by rpki-client