Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/70AaUuP95plIbplnjb9Ih1Mpwz0.mft
File: 70AaUuP95plIbplnjb9Ih1Mpwz0.mft (raw, json)
Hash identifier: b0phAR+aYLxKO+aHVY9brt+bVzrDGoCr6KXJPf6/V38=
Subject key identifier: 5C:74:19:B7:13:80:2E:E5:59:A4:20:70:91:19:81:2E:29:3D:48:02
Authority key identifier: EF:40:1A:52:E3:FD:E6:99:48:6E:99:67:8D:BF:48:87:53:29:C3:3D
Certificate issuer: /CN=ef401a52e3fde699486e99678dbf48875329c33d
Certificate serial: 019681A372431F96DFC00B674A7686A6151C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70AaUuP95plIbplnjb9Ih1Mpwz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/70AaUuP95plIbplnjb9Ih1Mpwz0.mft
Manifest number: 0C80
Signing time: Tue 29 Apr 2025 13:01:34 +0000
Manifest this update: Tue 29 Apr 2025 13:01:34 +0000
Manifest next update: Wed 30 Apr 2025 13:01:34 +0000
Files and hashes: 1: 70AaUuP95plIbplnjb9Ih1Mpwz0.crl (hash: AQX/BGKLkEQ5pZSa5d0eI0JXHtkxVg3YgAkfQoDXaG8=)
2: S4KhO_-8xzMvt1B6k_-GK_XNTGs.roa (hash: 298ot3rN9ux+k96S6A3kz+LkCwnTR/d/qtOX4jSeeqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/70AaUuP95plIbplnjb9Ih1Mpwz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/70AaUuP95plIbplnjb9Ih1Mpwz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/70AaUuP95plIbplnjb9Ih1Mpwz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 13:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:a3:72:43:1f:96:df:c0:0b:67:4a:76:86:a6:15:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef401a52e3fde699486e99678dbf48875329c33d
Validity
Not Before: Apr 29 13:01:34 2025 GMT
Not After : Apr 30 13:01:34 2025 GMT
Subject: CN=5c7419b713802ee559a420709119812e293d4802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:e7:a9:88:e4:40:bc:0e:b2:a9:ca:f7:56:ac:
bb:1d:0a:86:4b:d3:08:54:39:db:fb:d1:2e:dd:8e:
44:8a:b7:30:96:0d:de:f5:d7:9d:15:7a:d6:4b:5d:
41:98:8e:a6:0c:f5:dd:d5:6e:66:f3:c3:8d:53:c8:
77:ee:64:e7:13:f9:0e:c1:dd:b2:d9:f9:00:33:a0:
69:03:b8:f3:12:28:3a:db:30:4b:83:7b:1f:17:29:
19:d8:46:2c:f8:a1:6b:27:e0:ed:42:16:4c:be:b9:
53:91:76:cf:57:21:ab:9a:bb:e1:49:f2:fe:27:56:
ae:24:37:9c:ce:de:54:bc:ea:94:cb:cb:c9:1e:a9:
03:7d:54:82:8b:46:ce:98:e0:c2:4e:24:b7:47:ed:
68:11:1a:89:f1:47:c6:cd:e5:b6:f3:7e:0c:96:58:
29:b3:eb:3e:69:7f:3a:3e:fc:1f:c8:24:68:52:5d:
a6:cc:51:0e:da:0d:97:34:9b:83:96:7d:1f:e2:53:
09:87:5f:fd:2b:83:6f:c2:32:fd:ce:6d:46:8e:6d:
6f:c2:0b:83:3d:6e:47:ed:99:48:af:4c:93:e2:e8:
8f:0f:6c:8b:00:2e:16:1e:07:5f:bf:6b:b9:87:31:
0d:86:24:fc:d5:63:9b:6d:36:14:6b:12:ee:ad:f0:
6c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:74:19:B7:13:80:2E:E5:59:A4:20:70:91:19:81:2E:29:3D:48:02
X509v3 Authority Key Identifier:
keyid:EF:40:1A:52:E3:FD:E6:99:48:6E:99:67:8D:BF:48:87:53:29:C3:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70AaUuP95plIbplnjb9Ih1Mpwz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/70AaUuP95plIbplnjb9Ih1Mpwz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/70AaUuP95plIbplnjb9Ih1Mpwz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:38:6c:a0:ea:75:4d:fe:a7:4d:be:f3:37:c8:0e:41:e5:f7:
02:01:85:17:c1:5e:bc:74:ba:d1:54:e1:76:c4:b8:29:52:79:
c8:48:0d:f5:9e:14:0a:38:78:72:ab:5c:90:78:94:60:98:bb:
83:a6:96:b7:44:2b:34:fc:ec:72:de:79:0c:3d:f5:f8:07:f2:
c8:40:4c:c4:00:71:ce:69:04:bd:63:bb:b8:6d:f6:5f:70:59:
64:98:28:9c:68:0a:4f:12:85:3c:c0:51:ce:8a:7f:b2:86:1f:
fc:8a:23:09:8d:45:42:ac:61:5b:0c:49:91:43:9e:e2:c1:fe:
26:4f:8f:ab:06:80:40:4a:25:8c:75:b8:e5:0d:1e:6b:0a:ed:
9b:11:1a:68:2c:b2:ae:f0:24:1d:3a:6e:99:4f:e8:e0:5b:b3:
ac:67:d8:fe:9c:f5:4d:7b:f1:ee:d6:c6:3e:06:e1:54:1a:22:
88:bc:fd:65:06:29:b0:74:10:40:e3:4c:a8:1b:c1:7d:f1:77:
6c:c8:bf:1b:85:4e:70:39:38:b4:cb:7f:a7:95:2f:19:f5:88:
cc:22:88:ab:9b:02:c0:32:5f:a6:50:8f:ce:ba:d1:62:89:ce:
e2:aa:b4:87:d0:2b:05:c7:7b:32:7d:cf:d3:df:4e:be:8a:9e:
58:44:bb:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:29:25 2025 by rpki-client