Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft
File: ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft (raw, json)
Hash identifier: 5jpOlO1YALAEKis5NYxrUMsEknI9oO1IiIhY2w+SiZo=
Subject key identifier: 6A:BE:72:43:7C:1D:EC:28:6C:27:F9:27:06:B7:0B:A9:0D:DB:9B:0D
Authority key identifier: 45:E3:A0:C1:F1:D8:1E:E0:69:64:3B:40:C3:23:99:9B:B5:58:46:31
Certificate issuer: /CN=45e3a0c1f1d81ee069643b40c323999bb5584631
Certificate serial: 01968ADC6EAC5FC0F7E13C52D024581EF609
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ReOgwfHYHuBpZDtAwyOZm7VYRjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft
Manifest number: 07BB
Signing time: Thu 01 May 2025 08:00:24 +0000
Manifest this update: Thu 01 May 2025 08:00:24 +0000
Manifest next update: Fri 02 May 2025 08:00:24 +0000
Files and hashes: 1: ReOgwfHYHuBpZDtAwyOZm7VYRjE.crl (hash: WZlk3wIyDKdFNbSBinWtk4/H1A/us8dBhTUJ2emAj+8=)
2: c1218tMrC-SYY-Yo1ITctKUD9_k.roa (hash: 8AGbg1kAcimxxtZO8YTai8jQPbPTR+28UymCTknNVxU=)
3: v9XCpSvXJgFn93oqPO6QjvmDaV0.roa (hash: 2/0z9nylSvJWI46oSDGL4Lr6kTxicsj+PodL8IKe940=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ReOgwfHYHuBpZDtAwyOZm7VYRjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:dc:6e:ac:5f:c0:f7:e1:3c:52:d0:24:58:1e:f6:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e3a0c1f1d81ee069643b40c323999bb5584631
Validity
Not Before: May 1 08:00:24 2025 GMT
Not After : May 2 08:00:24 2025 GMT
Subject: CN=6abe72437c1dec286c27f92706b70ba90ddb9b0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:22:57:59:c4:01:00:12:4e:58:9e:e9:af:e9:
9b:90:d0:42:20:08:2a:58:11:d4:c9:0c:13:21:42:
92:c9:8c:bb:1d:1d:c6:ef:22:f0:89:99:02:28:73:
b9:f5:d8:7d:b2:49:ad:47:63:7a:13:83:cc:ec:b7:
68:7d:18:2f:3a:2c:f1:f1:01:07:28:19:9e:70:68:
22:07:1a:de:77:bd:4d:6b:1f:7f:d0:d9:4c:04:1e:
c6:6d:29:93:58:2d:96:15:08:77:a5:af:08:7d:88:
9e:17:e3:48:1f:5d:a3:76:e3:23:0e:63:b2:28:69:
7a:5c:b4:cf:44:57:d8:df:6f:03:0d:ef:01:79:fd:
d9:7c:25:7e:06:85:11:03:d8:a2:60:7b:37:20:81:
ee:cd:8e:dc:bb:d3:9e:3f:8a:92:ed:35:54:b2:44:
a1:ce:72:56:5d:ea:8c:46:b6:f1:cc:cb:0e:32:99:
99:ae:ae:a1:8d:ee:7c:16:d8:87:e0:f3:35:7e:3d:
cd:f5:42:90:1c:25:6e:73:d3:29:f8:48:c1:49:58:
72:32:fa:c6:56:2e:6b:48:66:4d:8a:68:47:6f:6b:
d4:32:3d:d5:c9:24:36:93:9d:3b:f8:52:4d:ec:1b:
f0:87:cd:72:e5:c7:81:ad:7f:fb:aa:66:37:04:36:
cf:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:BE:72:43:7C:1D:EC:28:6C:27:F9:27:06:B7:0B:A9:0D:DB:9B:0D
X509v3 Authority Key Identifier:
keyid:45:E3:A0:C1:F1:D8:1E:E0:69:64:3B:40:C3:23:99:9B:B5:58:46:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ReOgwfHYHuBpZDtAwyOZm7VYRjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:09:68:09:30:bf:0c:49:1f:22:e6:55:10:d3:af:1d:d5:22:
10:b0:99:7d:49:c6:79:3e:f7:78:53:d6:ae:77:d2:2f:9f:76:
11:7a:fe:9f:9b:33:22:3c:97:07:0d:1e:fd:de:b2:ef:4f:9b:
3a:d6:17:0b:78:5f:ba:1b:34:d3:e0:8a:c1:68:7a:01:3f:b8:
7c:b4:6c:eb:ae:d8:8f:c9:42:71:62:bd:73:e2:f2:29:fe:b0:
53:d2:7e:eb:ad:db:23:8c:00:10:db:88:6c:f7:36:67:f6:14:
b5:06:81:63:3b:fa:3c:2d:83:a9:86:93:1f:19:a8:e4:7d:f3:
d8:eb:7f:2f:dd:23:44:86:9f:9d:96:80:9e:93:a6:74:fe:c2:
08:d7:67:1c:c9:dc:63:7d:c8:c6:11:51:9d:08:86:01:ff:2a:
a6:67:bc:4a:07:3c:d6:4d:1f:64:6a:9e:a9:bc:b7:2b:1a:80:
c8:63:67:ac:c1:c1:41:66:ad:33:19:c1:4b:b3:5f:3b:c5:63:
85:89:11:9c:ea:be:3c:6c:10:b4:63:28:79:58:6c:2c:66:7f:
07:5c:bc:90:c5:18:a0:c1:f6:ae:29:b2:82:72:da:70:ba:38:
e7:d0:de:e2:ef:b8:cb:18:9d:0d:e3:67:86:74:94:b5:91:66:
e9:fc:f6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:19:39 2025 by rpki-client