Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.mft
File: _32KebrU-YPQxJiVr1DqigPrxw0.mft (raw, json)
Hash identifier: pkv7NGOj+hJDdBuhzNzHRx4/QDSH9xS+V37W4HcYNig=
Subject key identifier: 19:47:93:7A:C8:EC:56:A4:54:65:12:A5:9F:BE:2E:2E:96:4E:FB:A8
Authority key identifier: FF:7D:8A:79:BA:D4:F9:83:D0:C4:98:95:AF:50:EA:8A:03:EB:C7:0D
Certificate issuer: /CN=ff7d8a79bad4f983d0c49895af50ea8a03ebc70d
Certificate serial: 0196748B88D90794A5421E40B246886C5935
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_32KebrU-YPQxJiVr1DqigPrxw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.mft
Manifest number: 0BB7
Signing time: Sun 27 Apr 2025 00:00:23 +0000
Manifest this update: Sun 27 Apr 2025 00:00:23 +0000
Manifest next update: Mon 28 Apr 2025 00:00:23 +0000
Files and hashes: 1: 5XQsn3P_G3JsGnxxDNwlCAnpKoA.roa (hash: Fe5zRDY7jD+WRSzJ0H39dtDk1v9N5Zf6dRgDXos+lRE=)
2: 8LrCpJVZw00cB6v7Jxmu5danMVM.roa (hash: LkYRg4fRX+WYVMtQ+HSrUSifp72hGXmKbB4Mx1yLYEo=)
3: IDEflvuhIV83KNodcAdWAptJFNk.roa (hash: zpiVwHp2RqR56XaB25fCyR/sdSQ8zP/Sy5LNAYg81lo=)
4: _32KebrU-YPQxJiVr1DqigPrxw0.crl (hash: UhEstnuOE9aVbEHOqrFgFx84coS3mrcJkgii4EoY3Y4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_32KebrU-YPQxJiVr1DqigPrxw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8b:88:d9:07:94:a5:42:1e:40:b2:46:88:6c:59:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff7d8a79bad4f983d0c49895af50ea8a03ebc70d
Validity
Not Before: Apr 27 00:00:23 2025 GMT
Not After : Apr 28 00:00:23 2025 GMT
Subject: CN=1947937ac8ec56a4546512a59fbe2e2e964efba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fd:7e:c0:7b:eb:9c:c8:c7:e7:38:e2:39:86:
e4:ac:82:ef:9d:7e:a0:b4:34:86:a2:4d:db:ab:5d:
16:48:fe:f5:75:33:b4:00:19:f4:f3:93:04:b0:87:
6d:21:e9:6a:0b:f1:eb:00:51:dc:05:64:09:23:4d:
0e:30:39:6f:62:b1:0d:39:ac:b4:57:0b:f8:5f:a0:
5b:c9:74:eb:b3:96:59:92:0c:ca:e2:08:03:bb:1b:
8f:9d:63:88:78:84:56:29:5e:c3:05:5d:79:94:5c:
cd:13:74:25:50:65:84:f8:49:93:62:53:98:11:a6:
25:39:ff:b5:69:41:88:3e:6e:f3:6d:86:10:6c:4b:
b0:aa:3a:30:db:52:a5:c6:2a:b7:04:a9:6a:d6:e5:
b9:74:d8:34:4e:f8:e8:fc:f9:93:e9:3f:12:49:0d:
6f:bd:2b:52:d7:c1:56:ab:f1:b4:2d:8e:0e:88:e1:
7c:77:70:06:3c:8f:9e:94:c9:51:1e:36:ad:cc:25:
c6:a8:c2:f8:13:0c:9c:39:f2:3a:7f:87:e5:2e:95:
d7:7f:3f:86:e7:73:6a:60:b8:71:93:f7:c1:c0:0d:
18:e2:af:5a:60:f4:e6:8d:e2:0f:8e:b1:1c:a0:a8:
1f:92:9f:ec:9a:75:c8:09:c2:58:8c:d7:61:df:e3:
1e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:47:93:7A:C8:EC:56:A4:54:65:12:A5:9F:BE:2E:2E:96:4E:FB:A8
X509v3 Authority Key Identifier:
keyid:FF:7D:8A:79:BA:D4:F9:83:D0:C4:98:95:AF:50:EA:8A:03:EB:C7:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_32KebrU-YPQxJiVr1DqigPrxw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:94:d3:9f:9a:43:46:f7:ec:5d:75:4e:90:60:70:20:ed:fd:
21:09:a3:77:ee:54:8f:67:d2:62:0b:fd:45:06:22:31:a6:65:
16:69:64:8b:38:69:6a:d7:ee:e2:20:e5:fb:91:2a:f2:12:cc:
fd:89:2b:b8:5d:7c:96:14:c1:4d:ad:2f:79:cc:b4:0d:cc:4d:
eb:4c:63:ec:b4:d3:4d:1c:dc:c7:d1:b5:b3:a6:10:fa:8b:9d:
7a:b9:42:75:37:a1:62:1f:9d:70:b7:33:a1:98:ac:1c:76:61:
c0:a2:a6:ea:18:ed:fb:4d:43:6e:92:62:55:96:d9:3d:e5:e0:
c4:5b:2b:1a:7c:c8:6e:48:2b:8c:58:72:af:e7:a9:9a:d4:ce:
09:1f:f9:07:46:65:68:59:3a:a7:eb:c5:eb:84:49:99:fc:2c:
1a:d1:d6:5d:16:59:6c:ab:d7:32:7e:c0:10:a0:f2:0b:33:02:
14:8e:8b:3e:59:ce:39:70:64:46:7f:a3:cb:2d:fc:76:3d:d6:
67:b7:ed:ca:0e:96:44:50:7c:5b:26:0a:c9:20:89:33:4f:77:
64:9d:55:fc:a3:f3:67:a7:4a:e6:a5:90:32:14:1a:2d:a1:ae:
c3:d2:98:9b:d0:ae:df:6b:65:ff:4a:f6:36:10:7e:33:c4:0d:
18:6b:a1:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:51:44 2025 by rpki-client