Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/byDBquA8J08ClCjuoKRCQgjU8-0.mft
File: byDBquA8J08ClCjuoKRCQgjU8-0.mft (raw, json)
Hash identifier: zYniQQFuk2/RZ5+rBLfhze2Rru4lBPKxecbGPoBW2Tc=
Subject key identifier: 61:0F:9E:73:08:28:30:C8:32:A2:0B:41:11:B0:5C:DA:D7:14:B4:9D
Authority key identifier: 6F:20:C1:AA:E0:3C:27:4F:02:94:28:EE:A0:A4:42:42:08:D4:F3:ED
Certificate issuer: /CN=6f20c1aae03c274f029428eea0a4424208d4f3ed
Certificate serial: 01967B69CC8323025D41A52A3BFFF93E1DDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/byDBquA8J08ClCjuoKRCQgjU8-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/byDBquA8J08ClCjuoKRCQgjU8-0.mft
Manifest number: 1513
Signing time: Mon 28 Apr 2025 08:00:53 +0000
Manifest this update: Mon 28 Apr 2025 08:00:53 +0000
Manifest next update: Tue 29 Apr 2025 08:00:53 +0000
Files and hashes: 1: QR-XfIkw00mD51XnwCvsG-9T89w.roa (hash: a0XDBbD/tQURYMLpVooHaNMf9NXfcD/rGt0gapo+gwA=)
2: byDBquA8J08ClCjuoKRCQgjU8-0.crl (hash: dPm50sA7Akx1FqpZRy/S/ih0HhHMTahf5/SwZcgfHzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/byDBquA8J08ClCjuoKRCQgjU8-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/byDBquA8J08ClCjuoKRCQgjU8-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/byDBquA8J08ClCjuoKRCQgjU8-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:69:cc:83:23:02:5d:41:a5:2a:3b:ff:f9:3e:1d:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f20c1aae03c274f029428eea0a4424208d4f3ed
Validity
Not Before: Apr 28 08:00:53 2025 GMT
Not After : Apr 29 08:00:53 2025 GMT
Subject: CN=610f9e73082830c832a20b4111b05cdad714b49d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:eb:01:f1:e1:e5:d2:ab:9e:4c:eb:a9:a1:46:
b1:61:08:7f:77:28:cf:3e:21:e6:e5:82:28:bb:42:
46:1c:98:e4:36:90:8f:23:8f:67:1a:43:ba:61:ea:
2d:9e:10:53:5e:89:19:73:45:c6:64:42:d2:93:c2:
82:fc:96:16:61:7b:00:a1:16:a0:24:1c:3a:db:ea:
3f:8e:d7:5e:ad:7b:ae:90:3d:24:56:da:99:2b:cb:
1d:dd:cc:7e:f3:a6:1f:7e:7c:7c:e8:59:a1:ab:76:
e3:7f:2c:bf:a8:b6:c4:13:75:64:c8:ec:50:6c:2c:
ba:86:d2:c6:0f:45:fd:83:7b:17:0a:56:65:4c:1b:
39:48:3f:a9:5a:2a:20:7c:23:90:19:e3:ef:f0:4f:
73:dc:a7:91:cb:72:50:f5:15:1d:a6:33:74:69:ba:
fe:09:a6:11:6d:4b:71:7f:01:09:57:c0:7e:f4:5d:
08:7d:21:fd:08:89:86:08:3e:41:90:48:e2:d9:31:
a6:01:88:f3:e2:8d:0f:10:be:f8:c9:0a:c0:3c:05:
4e:6a:20:14:4e:56:0f:8d:7c:4a:25:5a:1d:0c:bd:
79:cd:57:14:3f:03:67:a9:ff:cb:4b:6f:76:b0:ed:
56:b3:68:33:81:a3:3d:91:c5:2f:d6:e4:e8:71:4f:
19:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:0F:9E:73:08:28:30:C8:32:A2:0B:41:11:B0:5C:DA:D7:14:B4:9D
X509v3 Authority Key Identifier:
keyid:6F:20:C1:AA:E0:3C:27:4F:02:94:28:EE:A0:A4:42:42:08:D4:F3:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/byDBquA8J08ClCjuoKRCQgjU8-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/byDBquA8J08ClCjuoKRCQgjU8-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/byDBquA8J08ClCjuoKRCQgjU8-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:f8:24:89:60:3f:d3:ef:67:d9:af:a8:ae:5c:77:9b:ba:89:
47:ab:f1:9e:a2:2a:f8:11:11:16:3a:ad:38:5d:2c:2a:43:bd:
83:13:92:12:99:f0:8e:59:1c:ee:f9:10:7f:a0:f1:0f:56:53:
d6:44:f7:28:9a:28:49:34:6e:15:3f:50:64:4b:20:5f:0c:70:
d7:94:cc:f2:fd:64:df:77:2f:2c:65:87:4a:85:50:7a:6d:75:
cb:63:ce:d3:6f:6b:9e:ab:13:a3:9f:a7:37:c3:94:f4:b2:6f:
1c:98:f1:5a:f7:44:98:4a:78:8f:ce:99:d8:2a:88:2f:bc:fa:
82:a4:e6:c4:47:c7:af:78:a7:f9:1d:dd:b4:fb:fd:d0:29:c1:
6d:73:9f:1d:83:99:e2:a2:65:75:3b:e6:ac:ac:3e:5c:aa:a9:
de:4c:e5:ce:5a:3c:82:47:de:a2:ac:27:c5:6d:02:4e:21:42:
d4:14:a4:c0:35:23:ae:41:d7:55:a9:ac:1e:35:a9:8c:a1:43:
8b:c5:f0:de:5a:2a:85:de:79:19:28:7c:b7:71:96:17:ae:63:
3b:4b:1c:a0:6f:45:02:da:0d:5f:da:e5:1c:1d:7a:d9:74:e9:
f2:71:22:ba:30:ef:5a:09:ac:21:e4:f6:d9:45:5e:c0:96:73:
36:4c:b3:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:36:23 2025 by rpki-client