Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
File: r070qO03Ebas1owPSPYhgx_Vqq4.mft (raw, json)
Hash identifier: sIBMqYT9ia+H12gKJVbcovLT2qPltiXaIyQAyUuAXp4=
Subject key identifier: 51:EC:42:4A:3C:12:CB:3B:55:7C:6A:02:66:41:5A:C8:1C:6B:A3:72
Authority key identifier: AF:4E:F4:A8:ED:37:11:B6:AC:D6:8C:0F:48:F6:21:83:1F:D5:AA:AE
Certificate issuer: /CN=af4ef4a8ed3711b6acd68c0f48f621831fd5aaae
Certificate serial: 019674F9D4E660AEAECF269434334545BA6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
Manifest number: 1511
Signing time: Sun 27 Apr 2025 02:00:52 +0000
Manifest this update: Sun 27 Apr 2025 02:00:52 +0000
Manifest next update: Mon 28 Apr 2025 02:00:52 +0000
Files and hashes: 1: Lddee0yGLa96EV9cff9j1b8lisk.roa (hash: 4wmS8bLLBI0yCHZS6lNJzngX25UoSHi3CPRXK8eiy+g=)
2: oFHxOR-gmoi2f8hzooiT2H5qGbs.roa (hash: v7L5BEVhrfX9YxGEPwkVKzRUyMYIDLUuZIRykF3hjrE=)
3: r070qO03Ebas1owPSPYhgx_Vqq4.crl (hash: zWWFkDaFJ/enQJaKLGeBLVLdZQdZM1MoOZakq+mizfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:f9:d4:e6:60:ae:ae:cf:26:94:34:33:45:45:ba:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af4ef4a8ed3711b6acd68c0f48f621831fd5aaae
Validity
Not Before: Apr 27 02:00:52 2025 GMT
Not After : Apr 28 02:00:52 2025 GMT
Subject: CN=51ec424a3c12cb3b557c6a0266415ac81c6ba372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:2e:b0:f8:75:ef:23:02:44:95:c3:d9:fd:13:
1e:0e:58:9d:d0:65:c8:bc:52:96:98:a5:c9:a0:5b:
dd:b5:ad:6d:60:dc:33:3c:1c:99:5f:fc:67:b0:8d:
4e:fa:46:c8:6e:95:a6:e1:26:6b:83:28:f2:6a:a1:
96:03:16:f7:e9:d1:24:b7:a4:97:82:89:eb:06:8d:
2b:30:c8:7f:55:1d:75:33:3b:42:65:51:87:a9:e0:
f8:ce:64:a8:33:ea:fd:cc:5e:db:32:aa:50:6a:c6:
05:9f:3b:69:50:94:9e:e0:92:47:cb:d0:01:bd:b3:
70:62:76:c9:b1:c5:e4:43:86:90:60:fe:2f:ba:e9:
74:7f:69:81:e2:c2:32:b9:f4:a8:f7:2d:92:01:a7:
f8:2f:b3:db:5f:f3:50:b6:f6:a2:a0:f9:88:65:67:
f7:6a:40:78:1e:44:f7:5e:d8:b6:88:a8:38:49:66:
af:24:98:f3:ce:6a:91:6c:5a:24:39:84:8f:26:bb:
f6:f4:6b:94:d3:a4:fa:af:1b:2b:30:bf:6a:b3:c7:
fb:65:df:fd:f1:88:a5:95:d2:78:d3:de:9f:cf:81:
e7:77:e5:a5:a8:0b:f2:80:97:72:10:c8:f1:c3:57:
0f:53:e2:bc:15:02:d7:99:8b:0c:b4:56:04:56:0b:
17:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:EC:42:4A:3C:12:CB:3B:55:7C:6A:02:66:41:5A:C8:1C:6B:A3:72
X509v3 Authority Key Identifier:
keyid:AF:4E:F4:A8:ED:37:11:B6:AC:D6:8C:0F:48:F6:21:83:1F:D5:AA:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:0a:3d:c0:81:6c:79:5e:ad:5e:a5:70:6d:d4:04:a8:27:c7:
2b:8f:2a:44:ad:af:fb:2d:44:4f:38:47:5b:26:11:c1:f4:a8:
92:3a:28:a3:85:a0:68:8c:b0:a2:03:08:c8:b4:14:3d:a4:a5:
87:38:85:8b:5a:b2:70:b4:43:7f:ba:2a:ed:96:a9:9c:2d:0b:
03:18:25:6e:2c:e1:60:37:db:0d:ba:85:a5:b5:48:3a:5f:41:
0a:f3:ed:da:3f:34:e1:d1:f5:1b:3d:71:ae:bd:dd:b8:ea:b6:
aa:b6:5a:fc:a1:a7:c4:d8:77:e7:73:8f:6c:20:27:30:65:1d:
6f:75:80:bb:0f:a0:52:fc:ce:1d:aa:a0:79:d8:cc:6b:47:36:
cf:37:96:a4:5e:83:6f:79:3e:d1:9f:04:21:be:af:25:16:5b:
44:89:a7:f5:e3:2d:7f:af:16:b4:0b:1b:35:aa:f0:c9:7b:f3:
af:21:43:11:e8:41:46:26:dc:82:86:f5:d2:3f:e7:70:70:91:
5f:1a:68:17:05:cb:1c:43:24:b6:67:1c:15:65:4a:c6:75:40:
4d:47:d9:51:c7:ae:1d:97:af:7c:8c:1e:dd:6d:97:01:75:67:
6f:ba:3c:9a:0b:2d:25:bc:67:ab:18:01:22:72:ef:8b:42:e7:
c1:a9:50:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:48:18 2025 by rpki-client