Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
File: RaqI3Gdc5dw1V0v_YpDirojOCCs.mft (raw, json)
Hash identifier: p72s9DSRDPaskEbGhrcsix+TJPO0+pCk4JLD6/63LkQ=
Subject key identifier: 56:67:1E:03:CB:99:CD:3E:CB:1F:0E:34:ED:20:41:E5:2B:48:7C:C0
Authority key identifier: 45:AA:88:DC:67:5C:E5:DC:35:57:4B:FF:62:90:E2:AE:88:CE:08:2B
Certificate issuer: /CN=45aa88dc675ce5dc35574bff6290e2ae88ce082b
Certificate serial: 019673AFE2FDF7D08375052642A28B87C45D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
Manifest number: 11C0
Signing time: Sat 26 Apr 2025 20:00:28 +0000
Manifest this update: Sat 26 Apr 2025 20:00:28 +0000
Manifest next update: Sun 27 Apr 2025 20:00:28 +0000
Files and hashes: 1: DujgrKmrgV8xwj_6lcbB9bHCo5o.roa (hash: a4pJAHSdUiicdCyM8IfHoN84JiEF8R3+OD1p+YBz9fA=)
2: RaqI3Gdc5dw1V0v_YpDirojOCCs.crl (hash: 3TEe73dnBy7PyBHqocn3fZMUwKgnjnxr1saRVK17NwQ=)
3: xppN97XlpzM-dgpRtsN2V_p7lZQ.roa (hash: L5C0DF41lLv5y5vXorCy3jzo9T18wVqDFOb9OQ+U5+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:af:e2:fd:f7:d0:83:75:05:26:42:a2:8b:87:c4:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45aa88dc675ce5dc35574bff6290e2ae88ce082b
Validity
Not Before: Apr 26 20:00:28 2025 GMT
Not After : Apr 27 20:00:28 2025 GMT
Subject: CN=56671e03cb99cd3ecb1f0e34ed2041e52b487cc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2c:9d:a1:34:e9:64:6f:b3:1a:8a:b0:ee:a2:
e0:c2:56:2d:88:5e:9c:c5:0b:d6:ea:89:ff:cf:f9:
f6:d3:76:de:ea:d6:2d:de:5c:66:78:fa:fb:e8:4d:
52:b3:f3:bb:78:16:3c:16:de:af:d5:03:f4:39:eb:
3f:3a:3f:f5:3d:ef:31:f0:7d:9c:af:82:c4:32:9a:
f5:de:c1:92:cb:b6:1e:52:b6:ac:c1:68:96:9f:58:
8e:8e:8d:1e:07:ce:40:39:fa:13:f7:ee:f3:63:5e:
c2:18:2f:83:07:f7:54:c8:ca:03:26:21:d3:9e:e1:
9c:6d:ef:31:7e:65:6e:86:c4:ba:3f:7a:c1:d6:0b:
ad:0e:31:6a:68:d7:4f:60:6e:7c:60:d2:37:f7:e4:
5f:ba:a4:48:c8:91:29:1d:71:b2:d1:9c:45:f2:ed:
b6:48:9e:da:92:14:2f:ac:7e:f8:66:cd:0b:cd:ac:
39:25:94:59:a6:8a:48:fb:4c:85:ea:0d:4d:45:35:
14:d0:91:00:38:2b:7b:22:52:bb:77:32:fe:e0:cd:
b4:19:dc:03:b8:bc:42:45:66:88:fe:88:5b:6a:3d:
22:14:1d:eb:d0:81:d8:5e:1a:4a:ed:e8:61:0a:06:
c1:ba:c6:1d:ea:c7:32:26:aa:bb:53:1c:22:d4:02:
d5:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:67:1E:03:CB:99:CD:3E:CB:1F:0E:34:ED:20:41:E5:2B:48:7C:C0
X509v3 Authority Key Identifier:
keyid:45:AA:88:DC:67:5C:E5:DC:35:57:4B:FF:62:90:E2:AE:88:CE:08:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:08:8a:0a:5b:8a:6d:69:97:5a:1a:7f:bd:25:1c:ba:bf:c5:
81:6a:76:8e:44:e0:1e:ed:16:eb:5f:7f:dd:e2:fe:27:d1:63:
ec:c8:e6:2b:19:c8:9f:68:01:1d:70:bc:cb:a6:78:ec:80:f3:
5d:c2:c4:0a:f1:0d:a2:b3:38:59:5b:50:0b:ee:6b:f7:48:71:
05:2d:75:2c:a6:af:15:d1:14:15:fc:b2:54:85:9a:f9:80:ec:
68:48:75:ae:e8:f0:06:52:38:56:12:d3:f2:c5:e6:bb:dd:4d:
ca:a0:1d:ae:3d:03:90:26:88:15:76:d5:a1:4d:f4:fd:4c:81:
e3:c1:e8:bf:62:b9:5e:45:84:cf:9a:a6:e9:44:9e:cb:a5:06:
80:d2:bc:a1:b9:f5:7f:4a:1a:c7:e5:c5:08:03:8e:6e:42:e0:
ae:2d:44:7a:3f:df:2f:4f:4c:f5:62:b0:71:91:6e:b8:7c:c2:
36:d1:90:0e:71:f1:4f:35:62:55:1b:b7:00:79:ad:d8:04:8a:
d4:28:94:2a:ea:dd:9d:97:dd:be:06:6b:84:77:ab:76:6e:0c:
04:e6:00:89:59:42:16:b1:95:69:bf:3b:31:60:53:1a:d0:38:
78:e4:76:66:ca:18:83:15:20:be:5e:0c:f5:a5:5f:64:1d:35:
88:7b:a0:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:49:54 2025 by rpki-client