Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.mft
File: se1mdqhXWQtjZbdsVYDXD8qNuqY.mft (raw, json)
Hash identifier: XI4nrB52AsWIGeEZZcILyvtLF2liXpg0zLvxwJXGNak=
Subject key identifier: E6:DE:C3:1C:F0:A0:3A:19:82:6A:F1:D9:8E:2B:DC:7E:AA:C6:6E:67
Authority key identifier: B1:ED:66:76:A8:57:59:0B:63:65:B7:6C:55:80:D7:0F:CA:8D:BA:A6
Certificate issuer: /CN=b1ed6676a857590b6365b76c5580d70fca8dbaa6
Certificate serial: 01967FEACCAF34EB1D839A579424A7698331
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/se1mdqhXWQtjZbdsVYDXD8qNuqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.mft
Manifest number: 0A6F
Signing time: Tue 29 Apr 2025 05:00:16 +0000
Manifest this update: Tue 29 Apr 2025 05:00:16 +0000
Manifest next update: Wed 30 Apr 2025 05:00:16 +0000
Files and hashes: 1: BSc7Lfy8S9yDC-G_k8JPIbogXL8.roa (hash: VQaRc62T55aNNoJmxuELOMwkOtgTlKfCtu9D4IVulL4=)
2: se1mdqhXWQtjZbdsVYDXD8qNuqY.crl (hash: w7PY4poLBA7nHaMwthnV7ElBbuvDPs0tm0A9rfZIcnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/se1mdqhXWQtjZbdsVYDXD8qNuqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:ea:cc:af:34:eb:1d:83:9a:57:94:24:a7:69:83:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1ed6676a857590b6365b76c5580d70fca8dbaa6
Validity
Not Before: Apr 29 05:00:16 2025 GMT
Not After : Apr 30 05:00:16 2025 GMT
Subject: CN=e6dec31cf0a03a19826af1d98e2bdc7eaac66e67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:05:51:bf:08:d1:55:73:1c:07:1c:0e:85:1c:
32:bd:4b:b5:88:68:3d:0a:2b:c0:9e:0a:8b:e4:c3:
df:6d:41:d0:2c:f8:6c:dd:24:2e:8c:da:63:3b:cf:
24:a2:0e:b6:85:aa:98:eb:71:e7:ba:d8:17:de:ba:
d7:48:2c:bd:51:be:17:7a:41:b5:c0:d3:45:3b:3c:
03:e8:6b:68:50:a3:a6:40:c4:cb:a0:0f:97:c3:6b:
00:89:60:50:ec:0c:52:71:91:89:9e:a2:49:cd:13:
a4:f2:ac:47:c0:79:4f:0a:81:cd:16:b9:cd:d9:7d:
fb:3d:d9:0f:b1:f9:6f:bc:4a:35:b1:00:1b:a2:85:
2f:22:eb:7c:80:8b:bd:aa:07:b0:f1:fc:a0:58:43:
d8:cc:0c:33:45:86:72:65:94:b4:b8:a0:fd:ed:3b:
34:87:1f:03:19:ba:73:d2:8e:f6:ec:af:e2:90:89:
98:f4:49:b3:7b:02:54:20:4a:82:32:e9:9f:79:6d:
d5:e8:39:02:52:45:cd:6f:09:5f:e6:d1:3b:59:e5:
86:d7:6a:99:a6:35:3c:91:12:64:11:d8:be:a1:5a:
72:a8:08:a9:53:1b:8c:f9:af:6c:f2:dc:1d:02:49:
30:5c:a7:5f:35:12:89:b9:64:8f:10:66:d9:c8:d8:
3b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:DE:C3:1C:F0:A0:3A:19:82:6A:F1:D9:8E:2B:DC:7E:AA:C6:6E:67
X509v3 Authority Key Identifier:
keyid:B1:ED:66:76:A8:57:59:0B:63:65:B7:6C:55:80:D7:0F:CA:8D:BA:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/se1mdqhXWQtjZbdsVYDXD8qNuqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:55:14:9a:17:c8:58:fb:d6:b1:d4:10:26:bc:9d:d1:33:d3:
7b:e9:4c:99:71:91:cb:1d:0f:cb:ec:b9:8f:56:31:be:87:0b:
99:2c:98:74:05:8d:33:ba:44:c7:e1:94:62:6e:ea:9c:23:ee:
ff:38:9a:3d:4b:ac:cd:a6:0b:1f:cb:82:f3:c5:75:86:df:e4:
f9:2c:82:7a:60:7a:3e:0a:1f:e9:30:97:35:b8:93:61:67:a7:
9c:a9:b4:4a:ed:a5:17:e7:9d:bd:60:25:5d:10:fc:51:3e:29:
cd:22:2c:93:6c:98:23:f1:3b:9f:3b:50:38:8f:de:bd:08:42:
af:3f:04:39:1c:dd:d8:7e:f5:77:1a:87:d0:3e:d9:32:5f:98:
36:8c:c4:bd:0b:8e:ab:1c:d1:4d:74:bd:fd:7d:26:b7:ae:49:
56:7b:ca:4b:b3:ff:e6:f7:14:d2:c8:14:25:8a:bf:a6:9b:ed:
c4:f7:43:ab:10:19:3b:3f:ab:5a:12:f7:23:40:20:cb:67:c7:
15:91:1c:15:24:cf:e5:af:d9:1f:3c:51:49:c2:8b:66:43:83:
d9:e1:c9:9e:4c:e6:e9:01:f4:c6:3d:ac:07:07:69:b1:e4:7f:
fd:84:95:57:db:89:e6:3f:47:6e:94:00:cf:d1:b2:e2:e5:9c:
60:ba:29:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:40:28 2025 by rpki-client