Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft
File: rCGhE9G6AdEH_feRMIwKUfPQbdo.mft (raw, json)
Hash identifier: qLz/xj62j+YILA7kR9+z+uAEo/aMiOdjS+UIvOg2UO8=
Subject key identifier: 59:3B:8E:BA:60:16:95:36:01:EE:EC:59:83:96:22:A7:54:A5:7B:84
Authority key identifier: AC:21:A1:13:D1:BA:01:D1:07:FD:F7:91:30:8C:0A:51:F3:D0:6D:DA
Certificate issuer: /CN=ac21a113d1ba01d107fdf791308c0a51f3d06dda
Certificate serial: 01969597016AEB23FAFA3AB2F67F4392A066
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rCGhE9G6AdEH_feRMIwKUfPQbdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft
Manifest number: 0408
Signing time: Sat 03 May 2025 10:00:23 +0000
Manifest this update: Sat 03 May 2025 10:00:23 +0000
Manifest next update: Sun 04 May 2025 10:00:23 +0000
Files and hashes: 1: 0Yi_JnLw94TXhrC5nYi7nz8aE9Q.roa (hash: PcfAm6zv9EFMWgISV3l4XmKFXD7W1Vvh/DKcICx2Ck4=)
2: rCGhE9G6AdEH_feRMIwKUfPQbdo.crl (hash: UGfhUXIGo/Xcqj8kfQxl4xeWkoQ/ei3bhLAoLhVdGtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rCGhE9G6AdEH_feRMIwKUfPQbdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:95:97:01:6a:eb:23:fa:fa:3a:b2:f6:7f:43:92:a0:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac21a113d1ba01d107fdf791308c0a51f3d06dda
Validity
Not Before: May 3 10:00:23 2025 GMT
Not After : May 4 10:00:23 2025 GMT
Subject: CN=593b8eba6016953601eeec59839622a754a57b84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:99:60:ab:98:c6:c3:da:a9:18:96:73:98:f8:
02:d0:ed:59:b5:a0:58:ba:1a:d0:d9:e2:0a:47:0b:
ba:c1:6e:3f:2d:56:a0:fa:b1:29:d9:d9:69:aa:97:
f2:5f:88:1d:0b:45:3c:68:71:3d:8a:09:5c:3e:dd:
fc:96:27:bf:ac:90:b8:72:c0:7a:47:ce:99:4b:40:
af:50:11:ff:94:68:e3:b8:b1:cd:48:30:98:e1:48:
33:7e:02:4a:0b:0d:90:ee:8e:31:81:d2:f5:1a:81:
31:0b:73:ca:2b:fe:c7:4f:9f:86:77:4c:c7:4c:03:
84:74:80:bf:a0:aa:64:53:76:39:5c:8a:98:0b:75:
d5:f2:34:27:68:1c:05:db:d6:b9:13:7b:f7:3b:41:
9e:a4:5d:4c:58:8d:6a:1b:c7:20:a1:14:da:02:c4:
9e:50:2b:8c:9f:c2:b1:cd:b8:2c:c0:f5:34:71:83:
28:7d:dc:3b:47:b4:38:18:87:0c:d7:5c:74:c9:39:
74:3b:19:9b:52:78:14:0e:ca:7d:6f:1b:d9:f3:67:
60:a0:95:6d:f5:e5:f1:10:5c:de:84:50:0e:e9:9e:
92:2a:a7:92:74:e5:91:c6:30:86:5c:d1:75:4b:80:
88:81:bd:be:68:72:66:1d:c5:21:e2:2c:37:c8:0c:
66:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:3B:8E:BA:60:16:95:36:01:EE:EC:59:83:96:22:A7:54:A5:7B:84
X509v3 Authority Key Identifier:
keyid:AC:21:A1:13:D1:BA:01:D1:07:FD:F7:91:30:8C:0A:51:F3:D0:6D:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rCGhE9G6AdEH_feRMIwKUfPQbdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:20:12:39:a3:15:b0:f9:93:1a:36:0b:1d:c7:f3:2e:7e:c3:
ea:e7:4f:85:96:54:7a:1d:47:f6:e5:1b:fa:79:e3:75:c5:bf:
70:9a:ee:b4:75:e0:c9:29:16:98:70:ac:90:8b:73:8f:6e:9a:
34:f8:e3:eb:ad:b5:e6:0c:fa:99:4c:5f:f5:ab:2f:4c:6c:74:
ba:78:5e:0d:8b:d1:bd:8f:35:c7:3a:e4:86:18:e1:1b:c2:4b:
b3:25:3e:eb:23:33:ef:60:61:54:39:37:7f:e7:9d:db:08:04:
eb:44:6c:9e:db:c9:4c:39:93:cc:d6:b7:d1:ef:87:bc:8d:e8:
a7:bb:ac:b2:24:59:f9:db:8e:73:86:88:dc:ee:75:26:9e:79:
16:42:32:b3:7a:ac:dd:3e:33:05:87:92:cc:e8:f3:a0:6c:d2:
97:be:39:7f:46:71:53:93:7a:c7:df:e6:f7:32:a0:c5:c6:ae:
65:9b:53:3a:cb:6c:c2:a2:4c:9d:58:17:74:ad:2a:86:89:58:
e6:f9:7e:b2:98:ee:d8:30:24:2f:36:fe:b3:9b:5c:4f:27:3c:
85:f6:99:68:a1:a3:97:ff:61:cc:5d:f0:47:37:e8:df:48:68:
31:5e:01:8c:82:fe:76:f7:72:46:52:20:7e:c9:18:21:da:69:
6e:2b:6b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 12:35:42 2025 by rpki-client