Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft
File: arRJwZjLlmN7rBpbbVHLMfJYuyw.mft (raw, json)
Hash identifier: fvZQIprAHq4Vin+76RkGmG5RnwaoYi0bM60xFUcHWBU=
Subject key identifier: 7A:6C:6E:71:F3:E9:21:BC:2C:37:60:0D:A0:B0:94:37:4C:C3:C1:3E
Authority key identifier: 6A:B4:49:C1:98:CB:96:63:7B:AC:1A:5B:6D:51:CB:31:F2:58:BB:2C
Certificate issuer: /CN=6ab449c198cb96637bac1a5b6d51cb31f258bb2c
Certificate serial: 019694BB9C6CAB96C0FBCC305C0EAFC4FA64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/arRJwZjLlmN7rBpbbVHLMfJYuyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft
Manifest number: 1520
Signing time: Sat 03 May 2025 06:00:45 +0000
Manifest this update: Sat 03 May 2025 06:00:45 +0000
Manifest next update: Sun 04 May 2025 06:00:45 +0000
Files and hashes: 1: Pj_t5CT2l74I7u9IIPT57QIpwtI.roa (hash: injYF0uAAm68pNeJanI0YLVJHbntDpb8a8fhql09/Qo=)
2: Tu-eLvS4BjY6sLbjKclCuHMNcyE.roa (hash: EMlouII+tVGp47ymDY78sfeCzz5ozn1bYR3C76/DHNQ=)
3: arRJwZjLlmN7rBpbbVHLMfJYuyw.crl (hash: FKAI/pPtp6Cb84XXioV6CTinmnajaAVlmHTVcWtLUcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/arRJwZjLlmN7rBpbbVHLMfJYuyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:94:bb:9c:6c:ab:96:c0:fb:cc:30:5c:0e:af:c4:fa:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ab449c198cb96637bac1a5b6d51cb31f258bb2c
Validity
Not Before: May 3 06:00:45 2025 GMT
Not After : May 4 06:00:45 2025 GMT
Subject: CN=7a6c6e71f3e921bc2c37600da0b094374cc3c13e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fb:9f:dc:a2:8a:de:e6:55:39:f0:39:aa:73:
84:13:11:50:3c:50:12:ee:29:b1:f6:15:f5:00:f8:
13:74:97:93:a9:41:bc:56:10:7b:c1:3d:44:b0:41:
6d:5c:e7:69:a5:54:ed:cb:cd:99:df:43:eb:5f:66:
c9:f9:82:5d:32:26:ae:4c:3c:50:6b:2c:50:73:73:
ce:bf:be:72:4c:57:63:23:1b:e3:27:8f:b2:a6:4f:
37:30:d9:49:4b:2f:ce:1e:63:61:b1:c7:c3:e8:9d:
0c:86:c8:ef:17:8e:37:26:9f:06:44:e1:d6:9e:fa:
2e:5b:d0:99:0d:be:d4:09:88:fa:2d:42:a8:0d:62:
c0:1a:57:0e:f4:54:20:63:9e:61:e3:ec:fc:6c:55:
0d:1a:a9:c5:b2:66:74:85:dd:dc:42:08:4e:87:2c:
e2:d3:2c:d4:a3:34:f2:b4:98:22:b2:5d:d1:15:79:
e3:6f:1c:fc:e7:f2:49:23:9c:bc:87:2b:b2:0f:10:
4e:e0:13:b7:53:c3:15:8d:96:cb:27:f1:75:3d:5a:
27:b4:15:39:11:bc:f4:68:60:8d:73:18:e3:26:3e:
5f:e2:5c:bb:39:c7:75:0d:10:e3:7f:21:fe:61:39:
22:84:cb:bf:1f:eb:cd:47:fa:34:03:62:c3:fb:e8:
97:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:6C:6E:71:F3:E9:21:BC:2C:37:60:0D:A0:B0:94:37:4C:C3:C1:3E
X509v3 Authority Key Identifier:
keyid:6A:B4:49:C1:98:CB:96:63:7B:AC:1A:5B:6D:51:CB:31:F2:58:BB:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/arRJwZjLlmN7rBpbbVHLMfJYuyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:6b:b7:55:8c:bf:c2:8b:93:c1:ff:c6:53:3c:64:ac:0b:82:
7a:23:2d:3c:53:7c:45:e6:44:41:d0:15:d8:35:6d:cd:47:4e:
34:ea:da:81:32:cc:c3:98:b1:41:5a:63:f3:42:de:b1:23:d8:
b8:87:cd:ad:06:3a:a1:54:75:88:00:7c:a2:1c:82:21:64:53:
e8:aa:97:e4:27:cf:98:52:dc:06:de:31:09:76:60:f1:dc:17:
ec:f3:1f:e7:a9:94:ed:4f:55:0e:a6:cc:c3:a6:99:f3:4d:a7:
d3:f0:c6:d2:de:91:cf:53:f6:6f:2c:70:4c:dd:13:64:1b:7c:
da:8c:27:e5:58:48:61:e5:0c:57:fa:3c:60:83:bc:bf:ce:08:
84:84:c3:e2:23:86:fb:d4:4e:79:b7:03:d3:3c:8e:35:2b:a7:
90:a6:3e:e5:41:7b:7b:e8:bd:41:9d:05:ff:2d:a4:a0:a5:a8:
71:b2:4d:4b:8f:ba:85:4a:52:e0:33:8a:a2:a1:9f:e5:70:03:
fb:eb:96:e2:ae:4e:d4:64:56:f1:62:47:c8:93:c6:e9:93:ee:
1c:d6:7f:b4:ec:00:3c:fd:78:eb:dc:27:47:86:25:c2:df:69:
3c:9d:9e:ba:60:f9:2c:7f:cb:f3:d0:e0:1b:08:0f:a7:43:e4:
cf:7f:9a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 12:34:59 2025 by rpki-client