Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/61VMRARsNkOakZc4lC8x-nVraRE.mft
File: 61VMRARsNkOakZc4lC8x-nVraRE.mft (raw, json)
Hash identifier: b5UJWTwOLP96iBAdcXGtveB1/f2eQDhe9QPnMAHiSX8=
Subject key identifier: FC:40:89:A2:D0:18:CA:44:FC:BA:CE:EA:E3:9B:16:7E:F6:C3:72:E9
Authority key identifier: EB:55:4C:44:04:6C:36:43:9A:91:97:38:94:2F:31:FA:75:6B:69:11
Certificate issuer: /CN=eb554c44046c36439a919738942f31fa756b6911
Certificate serial: 019678D689ED27AD2B4B488B55143B4354FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/61VMRARsNkOakZc4lC8x-nVraRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/61VMRARsNkOakZc4lC8x-nVraRE.mft
Manifest number: 125E
Signing time: Sun 27 Apr 2025 20:00:48 +0000
Manifest this update: Sun 27 Apr 2025 20:00:48 +0000
Manifest next update: Mon 28 Apr 2025 20:00:48 +0000
Files and hashes: 1: 61VMRARsNkOakZc4lC8x-nVraRE.crl (hash: 3gIm47FKJlvKtziv+b4QI8ooU/iox6kCcEZsGIRyqzo=)
2: E1bl48S3uJKeNjvLI-bFqfXhncs.roa (hash: ArUx/3Qpsc+v7haQQn7oiPimdfGwPvnJmdz3/p9me1Q=)
3: V3CR4lYDNh-Wfn6M2vlTj-37od8.roa (hash: n4U7/jlyixasB2+KGy4l8AmX928ML9kaTph3fSn4QJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/61VMRARsNkOakZc4lC8x-nVraRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/61VMRARsNkOakZc4lC8x-nVraRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/61VMRARsNkOakZc4lC8x-nVraRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 20:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:d6:89:ed:27:ad:2b:4b:48:8b:55:14:3b:43:54:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb554c44046c36439a919738942f31fa756b6911
Validity
Not Before: Apr 27 20:00:48 2025 GMT
Not After : Apr 28 20:00:48 2025 GMT
Subject: CN=fc4089a2d018ca44fcbaceeae39b167ef6c372e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c9:7e:3b:6c:38:f4:e0:08:a6:13:cf:e5:db:
a4:ed:75:5a:ef:d6:2f:fc:3f:99:84:2d:e3:f6:07:
27:90:71:7b:c5:9f:b7:c2:f7:63:c2:28:d9:61:96:
c8:7c:71:6d:54:d8:05:c1:b7:9b:db:c7:ed:73:4a:
1c:8f:e0:b9:52:66:7e:dd:bc:f3:c6:17:53:e0:8e:
0c:6b:61:88:e5:f3:77:15:23:f5:ab:13:e4:e7:e9:
14:a4:21:88:ce:3d:b8:a0:8b:a2:32:66:c6:3c:d5:
73:1f:b2:cb:95:ed:64:a9:a8:52:c1:21:c9:3f:97:
86:df:b7:f3:ba:8e:db:9c:19:88:57:49:eb:fc:6e:
b4:39:7b:ab:58:e1:79:02:c2:55:53:e1:37:2a:ad:
77:96:d8:6d:4e:96:1f:9b:87:3e:7c:63:c0:92:94:
b3:28:76:c2:54:67:45:c1:08:03:d7:21:46:fc:5a:
e1:4d:7e:ca:c2:aa:8b:ec:80:20:d3:a3:ce:36:14:
90:d2:81:78:96:5a:ec:05:b9:fe:1e:8c:fc:55:b2:
a3:47:31:10:99:36:73:79:db:45:bd:9c:c4:53:e1:
2e:d9:cb:13:07:a2:76:c0:be:5c:7f:a8:36:6e:45:
81:3d:85:66:dd:89:91:57:ec:18:15:92:65:c7:5c:
3b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:40:89:A2:D0:18:CA:44:FC:BA:CE:EA:E3:9B:16:7E:F6:C3:72:E9
X509v3 Authority Key Identifier:
keyid:EB:55:4C:44:04:6C:36:43:9A:91:97:38:94:2F:31:FA:75:6B:69:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61VMRARsNkOakZc4lC8x-nVraRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/61VMRARsNkOakZc4lC8x-nVraRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/61VMRARsNkOakZc4lC8x-nVraRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:46:cb:33:07:5d:a1:2a:81:9e:99:a6:50:44:21:81:b8:84:
79:87:f8:da:f2:30:a8:6f:bc:29:85:3e:0d:c9:b5:81:bc:ed:
9f:20:69:08:eb:fe:4f:01:7a:ce:c9:73:de:ee:43:f6:b1:ce:
f7:39:d3:48:29:c0:96:05:54:3d:f6:55:0a:01:f2:67:3a:71:
df:bd:92:13:da:fe:76:8b:60:fa:e7:6a:21:69:ee:d8:f5:c2:
bd:1b:2b:76:0e:b1:c4:ba:d1:92:88:c8:6a:30:f1:0e:a1:7d:
93:9d:28:c7:ab:01:fc:ca:f9:93:30:b0:29:86:73:c3:43:cb:
f1:b7:20:5b:19:f4:5b:18:fd:d2:81:a6:84:0a:cb:24:dc:f6:
e2:f6:12:5e:ef:26:3d:5c:9a:0d:f0:f5:68:8f:eb:b7:37:f5:
47:cc:8d:74:7a:9e:ed:7b:ff:8e:d2:ac:4a:93:53:8f:0a:ed:
47:cc:9b:0a:4b:37:ad:0f:07:fc:47:f8:46:61:00:ea:09:c5:
e6:12:01:a9:f4:e5:fa:62:33:61:5e:b2:30:96:f3:0d:a0:2c:
39:a1:13:b2:48:2b:f3:30:69:6c:0c:d5:c0:73:66:09:47:25:
a5:37:67:02:db:ce:80:fc:56:fc:ea:4c:f4:09:70:e0:ee:4c:
9f:2f:8e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:08:16 2025 by rpki-client