Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.mft
File: spIJTWkd9KfDjxa3VVfpwm1KxpI.mft (raw, json)
Hash identifier: /xNXSsUOQfKS6FDRl4nU5lNpW3dPhyBDbK3k1n5zd1I=
Subject key identifier: 2C:9F:DA:56:4A:48:8C:FC:CF:B6:32:5E:6E:8B:4F:1D:9A:C7:D6:58
Authority key identifier: B2:92:09:4D:69:1D:F4:A7:C3:8F:16:B7:55:57:E9:C2:6D:4A:C6:92
Certificate issuer: /CN=b292094d691df4a7c38f16b75557e9c26d4ac692
Certificate serial: 01967DC5E193D24EE6645D11D21A3131B754
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/spIJTWkd9KfDjxa3VVfpwm1KxpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.mft
Manifest number: 1418
Signing time: Mon 28 Apr 2025 19:00:42 +0000
Manifest this update: Mon 28 Apr 2025 19:00:42 +0000
Manifest next update: Tue 29 Apr 2025 19:00:42 +0000
Files and hashes: 1: OmeM_n0y_6-zOQ1ggpf3SAaIYGM.roa (hash: nPLGIcarXsWhg9mWE06KhP99Y61Hg7uEiGrRbDzptwU=)
2: spIJTWkd9KfDjxa3VVfpwm1KxpI.crl (hash: XmvUYWTjdseVXhTTx/K8NKWYQk7Riy+5ZPPIFfYydl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/spIJTWkd9KfDjxa3VVfpwm1KxpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:c5:e1:93:d2:4e:e6:64:5d:11:d2:1a:31:31:b7:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b292094d691df4a7c38f16b75557e9c26d4ac692
Validity
Not Before: Apr 28 19:00:42 2025 GMT
Not After : Apr 29 19:00:42 2025 GMT
Subject: CN=2c9fda564a488cfccfb6325e6e8b4f1d9ac7d658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:45:79:a2:a5:f3:19:2c:a4:0d:99:7d:87:61:
20:2a:d4:84:47:65:ba:77:f6:b2:cd:12:d2:cb:ad:
c8:6c:88:c9:63:53:a8:1b:83:d5:23:e6:cf:08:ee:
d6:5f:98:97:0f:4d:ca:c3:19:76:01:8c:bb:81:62:
10:5d:d5:51:8a:f0:28:0c:f4:21:16:dd:3d:d9:32:
4a:03:ef:fb:e9:e4:d1:b2:6c:3a:0d:b6:1f:a3:45:
49:9a:2b:4a:32:d7:17:13:fb:e3:12:bd:00:0d:d7:
a8:d4:07:f4:a6:b5:e7:d8:8b:d7:36:5c:de:d4:9f:
44:68:00:f7:ed:c0:ea:be:13:79:44:1f:ca:33:48:
53:9a:26:74:6b:aa:97:c1:a3:2c:96:f2:37:19:39:
28:8e:b6:4e:7f:1b:3a:58:4d:78:8e:c0:71:06:6f:
dd:ac:96:01:d5:1d:f8:73:93:d5:22:df:1f:67:40:
c8:7f:6f:66:22:e8:d2:77:54:5c:53:7a:93:9f:bf:
27:2e:26:b6:c4:64:df:49:6a:3b:5e:57:9c:bf:d4:
5c:2d:44:9c:8c:d3:37:e9:91:cb:24:58:98:18:ad:
e8:b9:43:0b:30:31:cc:44:bd:56:1d:6a:4b:66:41:
d3:e5:4e:d7:bc:b3:23:28:71:c9:29:20:41:9e:d0:
3d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:9F:DA:56:4A:48:8C:FC:CF:B6:32:5E:6E:8B:4F:1D:9A:C7:D6:58
X509v3 Authority Key Identifier:
keyid:B2:92:09:4D:69:1D:F4:A7:C3:8F:16:B7:55:57:E9:C2:6D:4A:C6:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/spIJTWkd9KfDjxa3VVfpwm1KxpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:14:ee:7d:77:9d:a6:dd:0e:87:44:3b:07:26:f7:60:6f:a4:
4e:19:05:a0:55:1b:6b:6a:fe:7d:21:dd:87:cf:0d:ef:f2:5b:
2d:be:12:d3:9c:f8:5e:06:84:dc:a9:4b:23:3d:0a:61:0d:a4:
cd:d7:75:f3:25:03:16:eb:08:b1:46:44:e3:3a:0a:c4:91:4c:
b1:d7:b3:f0:1d:a5:dd:75:d6:bf:1a:6e:10:9b:c1:b3:20:18:
7a:89:76:8c:d0:45:c1:0a:68:eb:e9:e7:35:d7:7a:f8:02:53:
70:22:b2:bb:5b:0e:27:2f:c7:ed:21:d5:e0:a1:3a:c3:02:8a:
ea:ef:73:f5:ec:2e:c6:42:9e:3a:2f:e2:5d:4b:f3:6f:e7:23:
5b:be:25:3c:12:ac:81:1d:8c:45:6d:25:88:9a:75:e5:ff:ca:
39:d1:29:16:7d:0c:c5:9b:27:b6:c2:24:90:5c:8b:9e:83:2b:
aa:24:53:27:64:b6:2d:e8:73:1c:4c:f8:bd:1b:8e:67:1e:67:
09:49:9a:78:57:e2:18:bf:27:b0:04:fb:d7:f8:49:8f:7e:96:
56:ef:83:de:01:1e:02:78:20:7e:80:ef:90:98:bb:2a:c8:bf:
eb:d0:a3:05:65:bc:90:a3:37:04:35:b9:0b:57:32:2b:35:25:
16:a9:11:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:42 2025 by rpki-client