Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/b4CWRAfF2qRAiKz-leZIi4APreU.mft
File: b4CWRAfF2qRAiKz-leZIi4APreU.mft (raw, json)
Hash identifier: 1isvIK1/3d7n+IUVEXo7TTfW3YZhyMMnL9rqXO6o+Ko=
Subject key identifier: F5:2A:FB:39:29:C5:DA:E9:45:E7:F1:62:E0:46:74:28:7A:33:C5:95
Authority key identifier: 6F:80:96:44:07:C5:DA:A4:40:88:AC:FE:95:E6:48:8B:80:0F:AD:E5
Certificate issuer: /CN=6f80964407c5daa44088acfe95e6488b800fade5
Certificate serial: 01967FEB1C825274F917951EC661600A4CE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4CWRAfF2qRAiKz-leZIi4APreU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/b4CWRAfF2qRAiKz-leZIi4APreU.mft
Manifest number: 0D10
Signing time: Tue 29 Apr 2025 05:00:36 +0000
Manifest this update: Tue 29 Apr 2025 05:00:36 +0000
Manifest next update: Wed 30 Apr 2025 05:00:36 +0000
Files and hashes: 1: F1clSCHfCrBchpNItB3_ECdQ4G0.roa (hash: UEaaY9HoQsqjcDAMUvi86kguZEF+pqvnu6gxjIkAd84=)
2: UvaL6VYsICABr4f2mztYJpGnmok.roa (hash: sDs2WTxe4PeqzEe78b/roJLSHAUp5tH9OZKXA5ved2I=)
3: b4CWRAfF2qRAiKz-leZIi4APreU.crl (hash: qvRdyYxhfNNz/CP5syvJQ/B3VPgvcpdyQ7gYl43OTt8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/b4CWRAfF2qRAiKz-leZIi4APreU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/b4CWRAfF2qRAiKz-leZIi4APreU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4CWRAfF2qRAiKz-leZIi4APreU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:eb:1c:82:52:74:f9:17:95:1e:c6:61:60:0a:4c:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f80964407c5daa44088acfe95e6488b800fade5
Validity
Not Before: Apr 29 05:00:36 2025 GMT
Not After : Apr 30 05:00:36 2025 GMT
Subject: CN=f52afb3929c5dae945e7f162e04674287a33c595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7c:5f:87:e0:46:2f:1b:f3:b7:fe:4f:b3:db:
39:44:90:bf:55:5f:fc:20:e0:2e:49:0b:d1:a0:41:
c5:ed:da:65:43:28:a4:90:fb:92:3f:ba:c2:55:6a:
c9:88:25:57:bf:aa:ca:d8:70:f0:88:65:ef:da:5f:
2a:27:26:16:02:71:56:c0:72:00:b8:6f:94:cd:bf:
2f:e4:2c:8c:22:94:04:a2:2c:7f:9b:d2:c1:2c:ee:
dd:15:86:ad:4a:fc:af:56:96:8b:e6:24:09:58:b6:
96:d7:fc:f4:d9:19:fe:84:b3:1c:5b:2f:8a:e5:03:
34:11:0d:7b:2d:67:c6:51:ca:85:f0:c0:83:a2:47:
65:e6:ba:79:69:ac:cf:7f:ca:5c:e1:2e:0d:d1:c9:
de:b9:b1:fb:96:2d:1c:0c:ec:6b:88:7b:d6:79:1f:
37:4b:4c:a3:f7:5f:27:ac:d7:d1:c1:a5:68:dd:cb:
8f:c3:9c:10:2e:1a:57:ec:59:f8:77:d8:1d:1e:34:
a6:a1:45:eb:a8:1a:c7:b8:ae:d5:af:d8:b6:d9:6e:
91:b4:53:ce:4c:50:95:f4:df:63:94:6a:37:d9:9e:
c6:0a:cc:d7:9d:9c:c0:98:ce:01:0e:85:65:b9:2e:
05:54:b9:3d:1d:94:7a:f4:29:d3:8c:42:55:1d:0f:
8a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:2A:FB:39:29:C5:DA:E9:45:E7:F1:62:E0:46:74:28:7A:33:C5:95
X509v3 Authority Key Identifier:
keyid:6F:80:96:44:07:C5:DA:A4:40:88:AC:FE:95:E6:48:8B:80:0F:AD:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4CWRAfF2qRAiKz-leZIi4APreU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/b4CWRAfF2qRAiKz-leZIi4APreU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/b4CWRAfF2qRAiKz-leZIi4APreU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:b4:0d:bf:3b:f9:45:70:5c:c3:33:3c:97:0e:d8:48:22:8a:
ca:ca:1b:ac:be:2f:eb:91:28:3f:a3:a6:9a:90:0e:18:29:52:
33:b6:3f:4a:13:aa:8a:05:70:05:f5:36:ea:a8:7f:91:8a:71:
13:42:bb:35:63:f7:76:b9:5b:df:5e:ce:86:55:5b:a9:f0:3a:
37:86:7a:b5:70:28:32:95:68:e4:e4:58:bf:9d:a3:56:3c:1d:
b3:57:51:96:c6:62:0a:4c:b0:b2:59:58:70:b5:58:28:61:f3:
94:32:a0:fc:06:e5:90:01:04:1a:49:61:08:7e:9c:c6:ce:10:
b0:79:12:77:aa:2d:0f:5e:30:8d:cf:59:41:5a:44:3a:fa:fe:
d4:c8:c7:97:ae:aa:87:d3:1e:df:6e:de:f6:fe:4d:e0:dd:23:
80:7a:ae:0c:80:45:2e:4e:ce:6c:21:5a:ee:03:4e:25:06:6d:
c9:6e:8b:86:2c:97:30:27:e5:41:3a:c0:33:66:54:da:a8:8e:
81:ce:48:72:f9:cf:5e:4a:e7:6c:85:f4:7b:53:08:03:d9:1f:
0b:8a:41:00:88:0c:3e:5e:49:71:0e:8d:5c:77:62:d2:16:28:
c5:b6:3e:09:15:78:e4:a6:3c:33:3a:5f:77:d9:07:20:31:b5:
20:42:8c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 08:52:03 2025 by rpki-client