Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.mft
File: ReKp-3dwEClvm44hXuDbRGcXTS0.mft (raw, json)
Hash identifier: UDQm38fkCnqlT3jKdCeOY6hGsL/Dk9cuAjx4HrwNiuU=
Subject key identifier: 06:51:2D:5C:AC:C9:D2:7B:A3:4D:F4:7E:1E:2D:81:A2:41:21:2C:B0
Authority key identifier: 45:E2:A9:FB:77:70:10:29:6F:9B:8E:21:5E:E0:DB:44:67:17:4D:2D
Certificate issuer: /CN=45e2a9fb777010296f9b8e215ee0db4467174d2d
Certificate serial: 01967D20B667A7DD722A4B914E45207824A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ReKp-3dwEClvm44hXuDbRGcXTS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.mft
Manifest number: 1514
Signing time: Mon 28 Apr 2025 16:00:17 +0000
Manifest this update: Mon 28 Apr 2025 16:00:17 +0000
Manifest next update: Tue 29 Apr 2025 16:00:17 +0000
Files and hashes: 1: Da5ukIODRFZkZgl7acW52LzBL34.roa (hash: 2S0h0c/tsGIJ57Pr+A8pwZxQY2/WXek+xC9ZKTvhbzU=)
2: ReKp-3dwEClvm44hXuDbRGcXTS0.crl (hash: NdRTuHCHp19m+sURcVm0VIx02bYLobmStPX0HJ0suKg=)
3: Z45rQavEcQTf3vGUVM_AgWAXCn4.roa (hash: q7JvLSO411WbeIPtlyaZvnsbtnUZIYteyAyCawxKvzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ReKp-3dwEClvm44hXuDbRGcXTS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:20:b6:67:a7:dd:72:2a:4b:91:4e:45:20:78:24:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e2a9fb777010296f9b8e215ee0db4467174d2d
Validity
Not Before: Apr 28 16:00:17 2025 GMT
Not After : Apr 29 16:00:17 2025 GMT
Subject: CN=06512d5cacc9d27ba34df47e1e2d81a241212cb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3a:74:18:d5:3e:d2:db:5f:68:a3:d2:93:39:
f3:65:00:1d:c2:e7:bb:65:f2:03:40:ff:38:3f:80:
fa:94:28:19:86:c9:58:85:7e:14:d7:d8:30:92:23:
e1:93:d3:0a:a8:96:e9:bb:71:75:2d:42:a6:fa:45:
e9:a2:aa:cf:bb:b0:93:31:94:aa:3e:39:e6:45:7e:
32:1d:a7:53:e9:10:4e:03:76:94:04:ae:6e:16:48:
08:1b:cc:bb:1b:6b:c9:3c:b6:b3:07:c3:52:70:b7:
e5:da:59:77:97:76:20:72:6a:4e:bd:6a:20:2e:17:
c8:aa:48:60:16:2a:95:ea:b1:a8:0b:1f:e3:6c:bd:
b3:60:22:7c:fc:8a:c3:d6:a6:c1:7d:59:d1:f0:c5:
38:90:76:78:ea:56:6f:18:f8:eb:66:c0:7b:e0:42:
a5:ff:b4:bf:e1:6c:6d:dc:88:0b:91:0b:08:70:09:
33:cd:f6:78:07:91:e6:96:31:2f:8f:2a:f0:65:01:
d8:76:9b:ed:b5:b1:8d:1b:00:ba:98:4c:5a:b8:2d:
51:bd:92:6c:27:8f:e6:00:5f:85:b8:73:92:e7:52:
ca:77:b2:6d:c2:ea:aa:cd:bf:2f:6f:e4:2b:3e:31:
3e:4f:3e:a6:79:73:50:e4:ab:49:ab:17:36:da:22:
d2:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:51:2D:5C:AC:C9:D2:7B:A3:4D:F4:7E:1E:2D:81:A2:41:21:2C:B0
X509v3 Authority Key Identifier:
keyid:45:E2:A9:FB:77:70:10:29:6F:9B:8E:21:5E:E0:DB:44:67:17:4D:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ReKp-3dwEClvm44hXuDbRGcXTS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:b1:9a:6d:94:17:83:16:56:08:a1:d3:de:87:82:97:0a:d9:
96:04:86:51:5d:82:29:2f:c2:31:44:27:0c:de:a9:a6:06:f3:
60:33:b7:28:17:c7:6c:31:f5:bb:62:59:59:1c:e8:ec:29:71:
01:da:ca:f5:51:89:c1:5d:8a:8c:6a:39:4a:f6:13:de:57:a4:
0b:7d:26:5e:57:74:04:95:7f:51:d2:f3:1d:51:7d:f6:c1:d7:
86:34:c6:19:5c:07:59:7a:b6:7e:8b:ab:8f:fe:56:5e:de:d1:
86:4e:a6:11:2e:f8:e0:a6:ab:5e:ad:a8:51:0d:41:b6:ea:3c:
0a:b4:54:c0:0c:71:6c:6b:a1:a1:c4:93:3d:ba:2c:69:3c:88:
2e:8b:a9:58:03:1d:b6:6d:e2:b5:a1:a4:1e:55:32:04:5a:c9:
cb:89:f1:2f:3a:d6:c9:da:5d:67:36:0c:de:3a:59:db:d9:a1:
ad:17:e0:b2:72:81:fd:c5:0e:00:5d:bc:3c:f2:a4:63:1b:0a:
d1:86:0d:9b:01:83:8d:4e:4e:63:39:92:0d:dd:3c:0b:3f:9d:
ee:9c:3c:c7:b0:74:52:90:38:42:d3:42:51:14:18:74:5e:38:
6d:0e:68:d3:2c:7b:16:9f:13:2c:29:f7:7c:c4:16:e8:d4:a9:
76:ce:bb:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 02:11:00 2025 by rpki-client