Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.mft
File: 0RIqXLBkP3NsfseWGAmiWThmjw4.mft (raw, json)
Hash identifier: sw9cGf0gq3KMfzgkAJxC0VbLyBJ2YCn+dn6ybL4Ez+8=
Subject key identifier: 49:0D:D0:D4:ED:B5:BB:68:91:42:54:3F:B9:C9:F9:7F:2E:94:4F:E9
Authority key identifier: D1:12:2A:5C:B0:64:3F:73:6C:7E:C7:96:18:09:A2:59:38:66:8F:0E
Certificate issuer: /CN=d1122a5cb0643f736c7ec7961809a25938668f0e
Certificate serial: 019677FB23D88D794959B45F9D0EBAFDDFD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0RIqXLBkP3NsfseWGAmiWThmjw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.mft
Manifest number: 1510
Signing time: Sun 27 Apr 2025 16:01:09 +0000
Manifest this update: Sun 27 Apr 2025 16:01:09 +0000
Manifest next update: Mon 28 Apr 2025 16:01:09 +0000
Files and hashes: 1: 0RIqXLBkP3NsfseWGAmiWThmjw4.crl (hash: MrGFN+16atWso7BlusBmRWytsm+y13sV3DYf9iX3gSo=)
2: zKQIfOeURvANDMREU7yI_nE_KFw.roa (hash: rsODojes6psnJwHqpB6iZWFEwYShL6Rps2nkmwoPbsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0RIqXLBkP3NsfseWGAmiWThmjw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fb:23:d8:8d:79:49:59:b4:5f:9d:0e:ba:fd:df:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1122a5cb0643f736c7ec7961809a25938668f0e
Validity
Not Before: Apr 27 16:01:09 2025 GMT
Not After : Apr 28 16:01:09 2025 GMT
Subject: CN=490dd0d4edb5bb689142543fb9c9f97f2e944fe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e5:74:71:75:fa:b4:20:c3:ef:5c:65:d2:e7:
ab:46:fa:0c:30:ad:d4:85:29:e1:a9:9a:2e:c0:b5:
f7:6b:48:33:03:df:c6:27:27:28:f0:1a:88:7f:90:
78:e5:2f:0c:1b:24:06:ef:2d:85:b3:80:54:40:85:
71:fd:e9:d9:40:58:e4:7f:bb:51:c5:81:25:88:ae:
6c:43:8c:4f:8d:45:86:ca:e5:e4:86:f5:f0:b1:31:
f2:d0:82:71:84:a6:8f:f5:39:72:e7:b8:1b:25:4d:
5d:c8:9a:9f:fb:b0:21:d9:c7:40:15:ca:71:af:b6:
b7:3e:6e:35:6a:98:14:10:f8:d3:ab:9a:29:67:c8:
37:47:11:2f:f4:ba:84:15:39:8e:6b:fd:71:f5:fd:
b1:fd:41:c0:f4:12:47:6b:6b:9f:2a:f2:b9:7c:a8:
09:86:30:72:51:27:dd:fb:8a:5f:8c:73:77:42:78:
2f:b0:45:8e:e0:b7:50:36:bf:fc:ad:bf:d9:7f:e4:
0b:50:9a:b6:28:25:1f:a8:c0:35:fc:c3:0a:14:af:
7b:2f:19:3c:5e:79:aa:41:72:67:da:ba:76:98:a3:
58:3e:da:39:74:9c:d7:99:14:e4:5e:ac:b7:03:3f:
57:c5:03:53:af:9a:f6:13:ff:3f:ea:7b:ae:b2:ed:
13:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:0D:D0:D4:ED:B5:BB:68:91:42:54:3F:B9:C9:F9:7F:2E:94:4F:E9
X509v3 Authority Key Identifier:
keyid:D1:12:2A:5C:B0:64:3F:73:6C:7E:C7:96:18:09:A2:59:38:66:8F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0RIqXLBkP3NsfseWGAmiWThmjw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:bf:46:41:04:33:1b:d1:97:9b:5f:bf:4d:16:cc:b1:4b:ae:
3f:9b:c8:8d:41:a1:0a:03:a5:fe:a8:c0:77:21:04:ac:9e:2f:
d6:01:36:2b:e7:bf:72:15:a5:8e:f8:71:15:24:09:ef:49:d9:
c2:f0:34:4c:d0:33:2d:8e:2c:13:fc:24:25:ff:c0:69:55:e4:
3e:06:ed:00:23:b6:53:ec:92:42:fc:db:88:a3:c4:6f:89:6e:
f3:b4:0c:f2:5c:d4:af:af:61:5a:ec:24:a5:b4:f6:0f:bd:67:
71:40:37:a8:84:8c:a7:7d:ca:94:ef:79:2e:15:56:d1:73:3d:
a0:f2:1f:64:e7:7d:84:e4:43:bc:16:57:47:b8:47:a3:a2:7d:
9f:8b:cf:cd:09:a9:cf:30:03:c5:67:87:c9:f2:ca:98:ba:fe:
7d:19:b3:11:97:ea:09:0e:5f:cc:a4:a3:77:1b:89:5a:dc:f6:
6a:51:97:a6:63:b3:fa:15:24:c0:ab:f4:7f:76:f5:e7:a0:03:
b0:3e:87:87:fe:b7:e8:a8:13:60:29:1c:fc:86:44:b2:82:ff:
0d:37:b1:f5:27:23:76:ac:39:92:f9:e5:c0:d1:41:9c:dc:87:
6e:96:be:fd:c0:ce:9c:32:c6:bd:ad:1c:65:7a:8b:74:fe:61:
d4:72:58:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:56:11 2025 by rpki-client