Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/bMdYWreoPsgLVauVe_N7eR52UBY.mft
File: bMdYWreoPsgLVauVe_N7eR52UBY.mft (raw, json)
Hash identifier: XnRQ+dDaJGhAZavq4pzTXk4S1WOU1n4Jl07sYI6RHWg=
Subject key identifier: CF:D1:02:5D:34:E6:6C:1B:87:1E:98:EA:FC:37:15:8D:17:B1:C1:DA
Authority key identifier: 6C:C7:58:5A:B7:A8:3E:C8:0B:55:AB:95:7B:F3:7B:79:1E:76:50:16
Certificate issuer: /CN=6cc7585ab7a83ec80b55ab957bf37b791e765016
Certificate serial: 019679B237D8BB84C8F1C99A1D16971A5F7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMdYWreoPsgLVauVe_N7eR52UBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/bMdYWreoPsgLVauVe_N7eR52UBY.mft
Manifest number: 127C
Signing time: Mon 28 Apr 2025 00:00:44 +0000
Manifest this update: Mon 28 Apr 2025 00:00:44 +0000
Manifest next update: Tue 29 Apr 2025 00:00:44 +0000
Files and hashes: 1: JJLEui4261ZXJVAJCMhhZuF8jH8.roa (hash: /ixKOls/TcJQuO85TTUBz1567wbeYHBB+Wz+IfsDjR8=)
2: bMdYWreoPsgLVauVe_N7eR52UBY.crl (hash: aKUIly3rSGduY4KsHaF6Uni3GDDSnV386B1Ai41kPbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/bMdYWreoPsgLVauVe_N7eR52UBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/bMdYWreoPsgLVauVe_N7eR52UBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bMdYWreoPsgLVauVe_N7eR52UBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:b2:37:d8:bb:84:c8:f1:c9:9a:1d:16:97:1a:5f:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cc7585ab7a83ec80b55ab957bf37b791e765016
Validity
Not Before: Apr 28 00:00:44 2025 GMT
Not After : Apr 29 00:00:44 2025 GMT
Subject: CN=cfd1025d34e66c1b871e98eafc37158d17b1c1da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d7:c7:c0:32:83:8f:c6:cd:5b:7c:45:cd:b1:
dc:db:4e:06:36:45:24:48:77:53:4a:4a:e9:59:e1:
53:5b:9d:9f:28:5a:be:7c:58:65:b5:aa:10:88:1d:
7a:83:31:7d:91:5f:65:2d:1b:cb:5a:57:81:5e:32:
20:4b:62:e7:66:5a:4b:15:f8:c2:92:8c:d7:36:56:
2b:f4:8f:aa:e0:49:34:f6:c2:55:38:eb:c6:df:b3:
08:fb:41:90:5b:9c:22:1e:54:8a:bf:c1:a3:73:80:
03:be:f4:ae:cd:24:b3:04:3b:c0:8b:aa:47:fe:7c:
5d:56:80:2c:12:38:67:c0:32:94:b6:45:81:b7:61:
96:fd:b8:63:80:f2:e6:e5:ed:c8:88:75:03:68:1c:
81:f8:a4:b4:3f:81:cb:0f:e2:af:2f:1a:0b:bf:6e:
e4:ab:98:67:c9:c5:e9:1d:bd:65:e7:17:1e:1e:d6:
10:64:c1:23:5e:4d:d8:10:49:52:42:0c:7f:9d:d7:
67:54:5b:2e:ca:15:49:bf:c2:a3:4e:39:67:57:63:
3f:52:c0:4f:b7:1e:8a:10:f0:6c:45:74:49:02:59:
da:39:31:65:12:ed:32:95:8e:9e:89:4a:f9:e9:01:
b2:f1:6b:7d:62:80:60:5d:f9:2e:8c:2d:7f:89:4a:
a8:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:D1:02:5D:34:E6:6C:1B:87:1E:98:EA:FC:37:15:8D:17:B1:C1:DA
X509v3 Authority Key Identifier:
keyid:6C:C7:58:5A:B7:A8:3E:C8:0B:55:AB:95:7B:F3:7B:79:1E:76:50:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMdYWreoPsgLVauVe_N7eR52UBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/bMdYWreoPsgLVauVe_N7eR52UBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/bMdYWreoPsgLVauVe_N7eR52UBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:3c:32:f2:e3:33:b3:85:96:fe:e7:88:48:95:31:cd:c2:c0:
f1:a7:83:d6:ea:b7:8a:eb:1e:1d:d2:29:cb:d8:4a:40:cf:dc:
76:09:0e:88:67:80:5a:cc:9b:1f:fb:96:3e:ea:89:ba:82:f1:
a0:8d:63:fb:42:c9:a0:50:9b:b2:d6:28:8c:b1:01:c0:da:15:
73:1d:65:b0:fb:3f:6b:12:8d:cd:84:e5:74:b4:78:28:30:40:
16:3e:aa:61:8e:4f:8f:66:33:08:23:26:73:79:a2:79:87:ac:
0c:28:72:b3:c9:73:00:d2:4b:de:de:bd:7a:2a:53:f8:b5:4d:
b0:1a:66:24:f1:cc:21:db:d1:81:2c:27:ef:86:01:b2:1e:54:
b7:45:06:41:af:a5:af:3f:52:09:60:f2:d0:dc:56:34:76:06:
d3:af:9f:f0:d9:03:16:6a:38:a4:cb:dc:6d:f1:6f:fc:63:25:
1a:09:c0:54:27:f3:f5:b1:cb:54:f0:b1:c7:77:e7:a2:21:e0:
4a:ec:f4:b4:02:34:bf:4d:0d:b0:f7:45:3b:a3:df:e7:0f:dc:
81:f6:cb:0e:fa:61:eb:3f:ac:37:bd:40:e9:32:60:46:97:49:
ee:3a:b5:45:8a:c7:8a:0c:66:ff:f1:f6:ba:53:17:77:49:5d:
b8:0b:d6:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 04:24:00 2025 by rpki-client