Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft
File: d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft (raw, json)
Hash identifier: Vf3elUY79Y9Awe6fsP+uSgmUmLgpJM5NnG1542JVPfE=
Subject key identifier: 60:EB:E1:09:7C:66:EF:C8:66:D5:C6:2E:20:38:19:C7:A6:0A:1C:F9
Authority key identifier: 77:9F:BA:AA:C6:54:1A:B3:18:52:9E:B0:25:61:3C:65:20:E4:76:46
Certificate issuer: /CN=779fbaaac6541ab318529eb025613c6520e47646
Certificate serial: 019679E9C6667C5C0241A12CED726AF520B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft
Manifest number: 03C3
Signing time: Mon 28 Apr 2025 01:01:25 +0000
Manifest this update: Mon 28 Apr 2025 01:01:25 +0000
Manifest next update: Tue 29 Apr 2025 01:01:25 +0000
Files and hashes: 1: bKhEoTi8VyX_Q5KODWRSQwgQwKY.roa (hash: xvVp0HHxMjOmKvNmsan4is7a0Z8jz8EK1PXrOk2MzSo=)
2: d5-6qsZUGrMYUp6wJWE8ZSDkdkY.crl (hash: lHKKdG8vOsZ9LPycjap9L46CPavjhNyUg5HVXB2Sxmc=)
3: k3MkBKIkrmXV8hBuw2gGPp_sASw.roa (hash: kkGwe02sJUGG5OVjC1fC3C/lnFwMVxsODhInEGGgNMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:e9:c6:66:7c:5c:02:41:a1:2c:ed:72:6a:f5:20:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=779fbaaac6541ab318529eb025613c6520e47646
Validity
Not Before: Apr 28 01:01:25 2025 GMT
Not After : Apr 29 01:01:25 2025 GMT
Subject: CN=60ebe1097c66efc866d5c62e203819c7a60a1cf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:61:98:26:e0:1a:8c:08:af:67:57:87:d6:3a:
1f:12:6f:8c:66:5d:e7:55:b4:82:88:e9:85:8d:43:
5e:f1:68:c3:e4:6e:19:f5:42:24:2a:e1:e2:ea:24:
28:5e:4d:8b:27:39:9d:24:fe:81:76:eb:31:ff:29:
5b:63:68:ca:3f:44:a6:17:ce:91:40:c1:a9:29:5e:
de:9b:a7:00:9e:dd:20:ba:1f:13:79:26:98:f3:e5:
68:47:f9:c7:e6:e2:65:d2:04:2d:29:fd:1e:99:9c:
32:5b:8c:d4:1e:2f:b2:b5:fc:d1:01:aa:f4:cf:3e:
a8:36:6e:c6:5e:16:44:cb:0d:30:a1:db:6c:36:e5:
86:bc:7c:38:58:a6:9f:a5:62:f3:9a:2c:2c:d8:5b:
77:e3:34:2e:9c:73:30:ba:f7:86:60:36:71:6b:9d:
39:85:ae:fe:78:f5:8b:69:be:97:8e:3e:a3:8b:7b:
27:b7:47:e4:59:7a:60:c5:d8:91:c3:3f:6c:d0:20:
ea:e6:3a:30:73:90:6e:68:fe:5e:04:96:4d:4b:71:
a3:43:00:8e:fd:b5:26:87:ab:9f:26:26:55:1b:14:
08:00:97:7f:16:55:53:b6:33:15:90:19:43:0c:b2:
d5:f0:04:21:f3:d8:3d:ec:2d:7f:b2:30:48:82:94:
a2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:EB:E1:09:7C:66:EF:C8:66:D5:C6:2E:20:38:19:C7:A6:0A:1C:F9
X509v3 Authority Key Identifier:
keyid:77:9F:BA:AA:C6:54:1A:B3:18:52:9E:B0:25:61:3C:65:20:E4:76:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:69:78:83:a2:52:33:2b:cd:43:ce:30:00:87:0a:f1:d4:21:
e0:c1:57:34:ad:98:aa:26:26:42:ec:ce:1b:45:6b:b9:bd:02:
97:69:90:61:43:74:d2:1c:75:ae:14:8f:6a:89:2f:45:8c:41:
8e:69:d6:10:bb:ad:9e:c9:ca:39:7f:6a:3e:d9:e3:08:7e:62:
1b:a0:20:63:ec:b0:ee:b0:c8:c6:37:aa:3f:56:b7:b4:11:bf:
55:e4:5e:b0:29:4c:bc:a8:21:c7:8c:e9:7d:db:a4:e3:98:0f:
5b:3c:e8:6a:ba:dc:e9:e2:c5:af:83:5d:d1:69:57:95:78:fc:
5b:1a:e7:98:7a:b3:67:3d:2f:36:7a:b4:04:63:a0:dc:ef:d9:
a9:23:a6:ff:f9:69:2d:b1:ad:41:44:b6:0f:4d:4d:2a:f3:06:
14:2c:1e:bd:75:83:04:c3:d1:6e:14:16:f6:8b:d4:3f:13:38:
0e:27:d5:03:51:d2:47:c0:86:5c:c2:39:4e:c2:8e:11:3c:cd:
74:38:f7:a3:e0:73:6f:ed:92:e3:4a:fb:0b:54:bc:39:43:c6:
41:c5:ff:47:0e:46:07:07:67:b2:2b:b0:c3:37:42:59:80:20:
51:02:af:8b:61:b0:11:04:82:5f:38:44:a4:43:4a:56:87:1b:
c7:07:57:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 04:43:25 2025 by rpki-client