Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/b8e03e-c398-4eee-8939-f909d79a44ad/1/d5KQMR5unPpeUX-rsNlvqaccPaE.mft
File: d5KQMR5unPpeUX-rsNlvqaccPaE.mft (raw, json)
Hash identifier: mJnhHcws1ikI5Bi0/rrmgt2jHmpjSWphnYDNnRfL4o8=
Subject key identifier: 6E:41:5A:FF:4F:60:52:06:CC:C6:67:B5:C7:B8:E5:C9:F8:0D:BC:59
Authority key identifier: 77:92:90:31:1E:6E:9C:FA:5E:51:7F:AB:B0:D9:6F:A9:A7:1C:3D:A1
Certificate issuer: /CN=779290311e6e9cfa5e517fabb0d96fa9a71c3da1
Certificate serial: 01967B69763B8602363B850D02806C82F884
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d5KQMR5unPpeUX-rsNlvqaccPaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/b8e03e-c398-4eee-8939-f909d79a44ad/1/d5KQMR5unPpeUX-rsNlvqaccPaE.mft
Manifest number: 1511
Signing time: Mon 28 Apr 2025 08:00:30 +0000
Manifest this update: Mon 28 Apr 2025 08:00:30 +0000
Manifest next update: Tue 29 Apr 2025 08:00:30 +0000
Files and hashes: 1: LOkJgQnrVhTjIGglVDZP2nXIS3k.roa (hash: w0AA95RC5IbPZCqkTY536mw4aIKSxO5pRstC+7ehig8=)
2: d5KQMR5unPpeUX-rsNlvqaccPaE.crl (hash: 2rzR1QuTLS0JWMsaYdS1Hc+pltUmN4b+ymLSUWarkM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/b8e03e-c398-4eee-8939-f909d79a44ad/1/d5KQMR5unPpeUX-rsNlvqaccPaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/b8e03e-c398-4eee-8939-f909d79a44ad/1/d5KQMR5unPpeUX-rsNlvqaccPaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/d5KQMR5unPpeUX-rsNlvqaccPaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:69:76:3b:86:02:36:3b:85:0d:02:80:6c:82:f8:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=779290311e6e9cfa5e517fabb0d96fa9a71c3da1
Validity
Not Before: Apr 28 08:00:30 2025 GMT
Not After : Apr 29 08:00:30 2025 GMT
Subject: CN=6e415aff4f605206ccc667b5c7b8e5c9f80dbc59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cd:1e:17:51:d8:7c:69:b8:8e:0d:78:f4:e6:
9e:db:9a:7b:4e:f7:0e:8d:8e:02:6e:48:5e:5d:77:
de:09:b5:c6:f7:47:c1:01:d9:01:0a:6a:1d:c2:f5:
8f:3a:76:a8:fc:bf:8e:c5:fa:22:40:fa:3a:13:96:
15:65:cc:8e:5a:af:c6:f5:e7:dd:db:76:f8:56:21:
1c:8f:81:4b:4b:15:ac:04:43:90:fd:c9:6d:59:f3:
b8:df:4c:e8:61:f2:1b:58:2b:25:3b:cb:86:6f:42:
84:e4:40:fb:75:8d:c1:9d:ea:96:95:df:d5:f5:cf:
33:92:76:d2:06:6e:68:6e:9f:4d:d0:57:5e:6b:ba:
e0:3f:f0:f6:21:40:5f:51:e8:cd:2d:08:29:0a:be:
a6:5a:d6:eb:e7:59:2e:ba:a6:42:62:0d:e2:09:88:
91:28:ac:15:86:98:0d:a5:c9:79:fa:c9:04:73:e2:
37:55:4e:ec:3a:39:b4:2d:5d:da:d7:ab:e2:3e:2a:
0d:e1:af:3f:cd:c5:d8:5f:99:5a:12:30:ee:7c:c9:
10:d4:27:45:6a:fb:2b:b4:18:43:88:06:c0:51:e1:
db:cc:fe:b3:e9:5d:44:4b:7e:54:6c:e1:fa:b7:30:
23:87:f8:54:90:92:f5:a3:2c:03:1e:09:e3:72:6c:
e6:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:41:5A:FF:4F:60:52:06:CC:C6:67:B5:C7:B8:E5:C9:F8:0D:BC:59
X509v3 Authority Key Identifier:
keyid:77:92:90:31:1E:6E:9C:FA:5E:51:7F:AB:B0:D9:6F:A9:A7:1C:3D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5KQMR5unPpeUX-rsNlvqaccPaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b8e03e-c398-4eee-8939-f909d79a44ad/1/d5KQMR5unPpeUX-rsNlvqaccPaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b8e03e-c398-4eee-8939-f909d79a44ad/1/d5KQMR5unPpeUX-rsNlvqaccPaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:96:30:70:8b:d2:31:a3:4d:c0:f3:78:23:e0:06:02:49:9b:
7d:59:3c:07:3d:ae:f9:6f:3c:22:88:4b:e7:a2:3e:63:2b:43:
a9:c7:4a:3c:5a:7a:5b:a6:40:2d:2e:8a:d5:47:16:59:ae:76:
bb:a9:18:3a:8e:46:2a:ea:3b:7d:05:00:1a:0c:b9:5b:5d:c7:
2d:a1:26:3a:dc:ee:4e:d7:80:f5:d2:4a:8c:6a:d3:ff:7f:ca:
35:02:34:39:81:4a:a1:f3:ed:99:c2:47:c3:58:2a:80:22:38:
3c:57:86:89:9a:23:a7:7d:67:94:b2:3b:9a:3f:e8:52:82:d3:
38:7c:e2:39:5f:e4:2e:39:2a:c6:c8:aa:f5:b4:1f:c3:f9:aa:
08:55:78:a3:38:fd:a4:46:1a:e5:c2:e7:d4:b5:51:35:f7:58:
f5:4d:cb:94:49:76:fc:d1:48:2a:aa:d5:7b:84:9b:68:bb:eb:
ee:b7:6b:95:15:4c:b4:d4:65:a4:e6:57:6f:87:6d:ba:e1:31:
9f:d3:0e:bb:7b:63:9b:d4:af:1c:39:ab:c1:1d:4d:9d:a5:92:
31:53:b3:1d:2d:67:aa:bd:56:57:64:eb:5d:d6:06:ee:39:38:
c4:7a:37:16:f8:8a:38:b6:d5:f9:4f:1a:05:30:11:ba:7d:4b:
f6:13:4f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:11:22 2025 by rpki-client