Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.mft
File: 4kB6dpbweYQUMFTUEePKXxg27NQ.mft (raw, json)
Hash identifier: PgYkst093P6xRYd96K30CD2i+dx5mmx0IeUsHsdF8Uk=
Subject key identifier: 27:C6:5A:48:42:9B:5C:E7:12:72:0D:D2:18:71:72:DB:3E:60:CB:36
Authority key identifier: E2:40:7A:76:96:F0:79:84:14:30:54:D4:11:E3:CA:5F:18:36:EC:D4
Certificate issuer: /CN=e2407a7696f07984143054d411e3ca5f1836ecd4
Certificate serial: 01967AFB5D98B08BC2E9E71BB3C1C3C6AD0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kB6dpbweYQUMFTUEePKXxg27NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.mft
Manifest number: 09DB
Signing time: Mon 28 Apr 2025 06:00:15 +0000
Manifest this update: Mon 28 Apr 2025 06:00:15 +0000
Manifest next update: Tue 29 Apr 2025 06:00:15 +0000
Files and hashes: 1: 4kB6dpbweYQUMFTUEePKXxg27NQ.crl (hash: n5X0nBbzLXSupWjNjTyG1PE+TCP7E9ffpi5rplG3wjo=)
2: irEgHQgJ1lYPjA_1iuUSjvMFJ1E.roa (hash: AIND5vmwFooA+85IH/ZlbRJQlN9azqJPo9GktTW2krE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kB6dpbweYQUMFTUEePKXxg27NQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 06:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:fb:5d:98:b0:8b:c2:e9:e7:1b:b3:c1:c3:c6:ad:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2407a7696f07984143054d411e3ca5f1836ecd4
Validity
Not Before: Apr 28 06:00:15 2025 GMT
Not After : Apr 29 06:00:15 2025 GMT
Subject: CN=27c65a48429b5ce712720dd2187172db3e60cb36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:bc:ef:4f:66:f9:d6:d8:53:6d:8a:f6:1a:c2:
12:39:38:fa:aa:da:4b:cd:57:07:b5:ac:03:08:f7:
a3:aa:d1:87:8b:04:90:91:49:f7:f5:fc:6f:29:37:
2e:c0:bf:bd:83:ba:20:0b:1c:07:1e:94:36:26:d2:
83:af:63:a8:4a:76:89:80:63:35:c2:e0:61:94:06:
7f:bc:a2:1a:76:68:e4:9f:ab:35:45:3d:5f:8d:cb:
11:7f:bc:2b:4a:fc:0e:c2:16:17:2a:70:26:22:79:
5b:c0:f7:09:cd:db:ad:e1:88:79:d0:b1:ae:7c:7f:
9f:ab:8e:17:65:6f:f1:d6:7e:3e:cd:c4:4e:bb:7c:
cb:f1:65:51:46:8f:86:e7:bb:45:fe:c3:8e:81:9b:
4a:fa:9d:b0:eb:d6:35:a4:2d:b0:19:ba:53:5a:2a:
f2:7a:37:f2:e6:fb:47:50:16:50:24:72:00:5b:24:
f4:0a:92:ee:55:d8:32:72:6b:bd:d7:38:b2:f4:78:
b0:15:35:05:71:f3:ff:91:fb:4b:a7:13:73:02:1f:
01:62:f0:5b:85:dc:cb:c1:d6:49:98:4e:cf:43:bd:
b7:c1:48:46:db:0a:b3:63:ae:84:1c:d2:d7:b0:5a:
10:20:fc:4b:60:e7:85:e8:ac:20:5d:58:bb:4e:52:
df:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C6:5A:48:42:9B:5C:E7:12:72:0D:D2:18:71:72:DB:3E:60:CB:36
X509v3 Authority Key Identifier:
keyid:E2:40:7A:76:96:F0:79:84:14:30:54:D4:11:E3:CA:5F:18:36:EC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kB6dpbweYQUMFTUEePKXxg27NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:11:86:2c:f2:ce:3d:cb:3e:31:b1:9e:85:30:a0:48:80:9e:
f8:5a:9e:20:25:f3:8e:3c:8b:fa:10:9e:e7:6c:0c:a2:3f:f7:
22:2b:70:53:ab:6c:a7:87:3c:e3:57:a3:6a:81:27:92:ef:d9:
c9:4f:f1:91:81:f9:c1:74:c6:e0:a6:6e:33:e4:07:38:7e:65:
4c:da:10:b9:97:a6:71:d5:e9:dd:dc:a1:2c:68:96:89:d1:e1:
b2:e0:dc:6b:48:d9:45:79:b0:de:87:7a:82:bd:97:32:1a:d1:
24:18:c3:9f:32:c1:39:ca:d0:b2:4b:7d:05:6c:5d:da:c2:be:
52:46:c6:78:7e:9f:7f:ec:bd:bb:47:92:ee:8b:25:f6:5d:31:
db:bd:7d:e0:4e:b0:59:87:69:32:a6:7a:bc:cf:86:b4:81:fd:
2b:6e:d5:a0:05:32:ec:b5:aa:17:b0:16:40:9f:f4:78:d3:82:
72:f7:21:23:39:cb:d0:2b:24:40:98:8b:6a:d7:f4:68:56:35:
42:d9:c6:78:7d:fd:1d:14:cb:c2:1c:eb:60:fb:51:0f:4e:c0:
46:b8:48:bf:5c:af:00:57:0b:5d:38:12:52:b0:54:7c:00:9e:
fa:f0:f3:3c:4d:64:4a:ee:0d:b5:cd:2a:a6:0b:a3:36:06:bf:
ea:70:2c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 16:03:22 2025 by rpki-client