Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.mft
File: 458aboTAJ378tW2UKw615FZHESk.mft (raw, json)
Hash identifier: z/WD00188Dtj1plknhA6Jf4GEk1yyK4BaiB0HGBo3kk=
Subject key identifier: E9:0D:EB:36:FA:B5:C3:03:B5:58:12:8C:F9:CD:4D:72:36:39:38:2A
Authority key identifier: E3:9F:1A:6E:84:C0:27:7E:FC:B5:6D:94:2B:0E:B5:E4:56:47:11:29
Certificate issuer: /CN=e39f1a6e84c0277efcb56d942b0eb5e456471129
Certificate serial: 019683FF55FC018CB7F5BD861DA22DAE4AA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.mft
Manifest number: 151D
Signing time: Wed 30 Apr 2025 00:01:11 +0000
Manifest this update: Wed 30 Apr 2025 00:01:11 +0000
Manifest next update: Thu 01 May 2025 00:01:11 +0000
Files and hashes: 1: 00-pDRnkJ28HOY9PiW3UHtRlnaA.roa (hash: ajRA1r/wZbCFV5DRURYHBboFEqfVmi4nUu+o5RsVv7I=)
2: 458aboTAJ378tW2UKw615FZHESk.crl (hash: TOvKBCkPMmp/kdNCc1IeUuY9AwBqnjuAoYSpmjyBUyo=)
3: h0icjzgutWd6lA-1BOIfw-Gwjqg.roa (hash: S1MAwDWcpRVxYAC6r+etNs1goxhniGxwWQ8E6EEXeo8=)
4: w1G2WgRwg5TMv1o-ctrHxpnkGg8.roa (hash: agU6Qqy0fnivl3H4SG64+Hxp9Tp7KmPmlQXRx4PQep0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.mft
rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:ff:55:fc:01:8c:b7:f5:bd:86:1d:a2:2d:ae:4a:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e39f1a6e84c0277efcb56d942b0eb5e456471129
Validity
Not Before: Apr 30 00:01:11 2025 GMT
Not After : May 1 00:01:11 2025 GMT
Subject: CN=e90deb36fab5c303b558128cf9cd4d723639382a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:00:2c:41:51:6c:87:22:fe:9b:c7:2c:aa:f3:
12:70:89:f0:c4:e6:b1:08:2a:6c:9b:84:3f:5e:60:
bb:53:92:c7:d6:e1:cd:6b:02:5f:69:3f:07:22:98:
b6:66:e3:80:66:17:2d:a9:e7:97:56:41:25:c5:66:
e1:2f:62:3d:9c:a2:50:02:57:ed:7a:65:af:3c:fd:
04:a9:c5:42:0d:f3:38:5e:c8:f8:6a:96:58:5c:6c:
c7:bb:e3:c8:d6:8d:fe:0a:f9:13:8e:8e:d0:e7:6a:
a7:06:0e:e5:45:20:ad:03:ec:60:b9:3c:62:21:98:
e6:20:2c:d9:d9:6a:09:71:eb:48:8c:7e:f5:9e:41:
6f:3d:63:18:05:da:15:f7:2c:84:0e:55:80:1e:2c:
7a:c9:e7:c2:2b:d6:b6:60:ff:4e:e5:19:d9:f6:73:
c2:ad:af:7a:b3:cc:22:22:ae:84:71:a2:d8:15:f6:
0d:95:2e:b3:c1:1c:c7:4e:b5:09:40:c4:7b:4f:d2:
93:9e:d0:ef:f1:c0:2c:ab:d8:7f:93:88:e4:6a:35:
1d:0b:91:d8:d5:5d:cb:e3:a3:08:93:5e:e3:61:f8:
9b:79:49:fd:a2:9b:de:1d:42:04:ac:36:17:91:5f:
85:2e:80:b2:2e:de:35:62:ab:c5:29:3f:e8:be:bd:
a9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:0D:EB:36:FA:B5:C3:03:B5:58:12:8C:F9:CD:4D:72:36:39:38:2A
X509v3 Authority Key Identifier:
keyid:E3:9F:1A:6E:84:C0:27:7E:FC:B5:6D:94:2B:0E:B5:E4:56:47:11:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:c5:c2:fc:43:78:ee:d2:71:c8:66:5b:9e:7b:e2:d3:96:a6:
1e:12:2c:39:7e:5b:4e:5f:8a:30:4c:2a:b3:6e:c2:6f:bf:c3:
40:af:4e:a5:57:36:62:1b:e1:ff:7e:d3:dd:71:89:5d:85:2f:
cb:56:28:93:c5:72:32:f4:38:30:c2:59:52:c9:2c:2c:5b:19:
1a:2c:b1:af:05:4b:2c:05:42:24:7f:c3:9e:64:06:e7:e0:81:
1c:58:a4:bb:ee:32:06:e3:9e:57:d9:51:7f:84:df:86:e5:e9:
ab:32:34:13:ec:6a:fe:1b:d7:df:47:10:4e:35:35:b0:81:4f:
2c:40:9e:b0:f5:d1:d8:e9:3d:39:ee:46:0e:4e:4c:64:1f:96:
4c:cb:ab:ab:e3:cf:ce:6e:7c:21:70:8b:3a:25:27:a1:78:eb:
f6:c2:2c:41:93:39:01:8b:b1:7c:c6:b5:56:d4:b4:00:bd:f8:
d7:db:85:d6:82:12:88:e4:25:a1:85:f4:c1:2c:ba:42:e3:d4:
8b:8d:cc:8d:18:6e:7c:1f:5e:f5:f6:43:34:cd:6f:be:4a:a6:
59:b6:0a:93:f4:e1:fb:04:61:ce:ba:ca:81:2d:75:61:4c:db:
de:19:84:3b:f7:b7:34:a1:2d:61:1a:60:62:61:55:80:a5:a4:
2a:6e:16:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:23:36 2025 by rpki-client