Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/aP4jOevgl_9pirMOW2PswhoqI6s.mft
File: aP4jOevgl_9pirMOW2PswhoqI6s.mft (raw, json)
Hash identifier: VuIUaHaOj2Y69Qq30Am5YlYJv1oLRTxTmpBkKNlDYhc=
Subject key identifier: 94:CF:14:56:C4:CF:96:AC:23:09:EA:37:19:FD:E4:D4:FC:B3:A0:1C
Authority key identifier: 68:FE:23:39:EB:E0:97:FF:69:8A:B3:0E:5B:63:EC:C2:1A:2A:23:AB
Certificate issuer: /CN=68fe2339ebe097ff698ab30e5b63ecc21a2a23ab
Certificate serial: 0196760C8C2CAE81EE123A461DC0F1B05C6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aP4jOevgl_9pirMOW2PswhoqI6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/aP4jOevgl_9pirMOW2PswhoqI6s.mft
Manifest number: 03D7
Signing time: Sun 27 Apr 2025 07:00:55 +0000
Manifest this update: Sun 27 Apr 2025 07:00:55 +0000
Manifest next update: Mon 28 Apr 2025 07:00:55 +0000
Files and hashes: 1: 9V1tND3zl52dvTGUP5zkoYgjSzk.roa (hash: ZFwBT8PQBALn0UQygkKFbmysfnKpnWDyHSFsXkqI3os=)
2: aP4jOevgl_9pirMOW2PswhoqI6s.crl (hash: 1jkTAChD+w/JbCxRE76kTOmOeliLci+C/TAtBqgk5fw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/aP4jOevgl_9pirMOW2PswhoqI6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/aP4jOevgl_9pirMOW2PswhoqI6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/aP4jOevgl_9pirMOW2PswhoqI6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:8c:2c:ae:81:ee:12:3a:46:1d:c0:f1:b0:5c:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68fe2339ebe097ff698ab30e5b63ecc21a2a23ab
Validity
Not Before: Apr 27 07:00:55 2025 GMT
Not After : Apr 28 07:00:55 2025 GMT
Subject: CN=94cf1456c4cf96ac2309ea3719fde4d4fcb3a01c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:3a:c9:bf:5b:02:ab:f2:f4:fb:60:04:52:0a:
ff:46:64:36:b7:e3:7f:52:f6:be:db:1f:24:98:48:
34:b1:d9:18:a4:75:9b:77:03:08:b1:e0:1d:ce:f7:
66:74:ed:00:ff:5d:8b:e0:fc:15:3e:01:f4:48:f8:
34:8c:49:3b:2b:2b:1b:eb:22:0b:8e:af:2f:46:27:
f7:94:34:0c:e6:25:1b:70:40:4c:83:83:a1:f4:65:
d4:0c:7c:3b:22:8e:36:de:9c:73:fa:ee:9e:ae:34:
20:df:99:66:3d:41:60:e3:98:b3:3a:a3:bf:02:72:
2f:93:59:b4:0d:0b:5a:9e:61:44:a6:12:65:c9:42:
26:2c:35:8e:0c:8f:26:80:5f:c3:74:c4:78:b0:fc:
db:98:27:3c:2b:e4:24:68:d0:e4:68:04:ac:a7:2a:
22:ee:3e:d1:be:53:5f:9d:9a:b6:38:b0:34:73:b1:
ff:7c:eb:82:f3:1f:da:34:23:5a:ab:2b:a0:7e:38:
30:22:01:05:7d:5c:ce:e0:f8:2e:b2:a9:65:d4:c5:
8f:4d:f3:b1:22:d3:10:bf:0b:12:4a:96:54:aa:11:
9d:79:57:82:d3:6f:3f:f7:1a:a3:f0:95:0d:90:bd:
df:ff:c4:25:d8:39:db:81:87:7b:b2:ca:fd:7b:8a:
11:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:CF:14:56:C4:CF:96:AC:23:09:EA:37:19:FD:E4:D4:FC:B3:A0:1C
X509v3 Authority Key Identifier:
keyid:68:FE:23:39:EB:E0:97:FF:69:8A:B3:0E:5B:63:EC:C2:1A:2A:23:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aP4jOevgl_9pirMOW2PswhoqI6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/aP4jOevgl_9pirMOW2PswhoqI6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/aP4jOevgl_9pirMOW2PswhoqI6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:f0:e0:e2:00:e9:51:6e:b2:32:57:0e:53:a6:9d:e1:b7:ac:
d9:53:e2:0d:26:ac:29:17:ad:55:6a:bb:10:86:e5:fb:df:26:
80:12:f8:b9:d3:ec:47:d5:28:57:d7:b1:5b:d2:13:52:b7:cd:
38:e9:52:2d:4a:cb:74:10:dd:d2:3b:56:39:b9:0e:1e:e0:6e:
39:86:95:e2:4a:e0:c6:5b:5d:76:ab:5d:68:2e:26:73:77:0b:
75:d2:37:45:1d:9b:c5:8a:99:fe:13:30:2c:13:5a:48:50:95:
83:e7:89:eb:e6:db:6f:f1:49:2f:b1:2a:3b:55:fb:59:14:3f:
ce:ae:cf:65:f0:e1:04:55:25:e0:0b:da:77:bb:21:17:15:c0:
b7:ec:29:09:b8:56:b1:6f:23:96:e1:ce:c9:37:04:99:2e:52:
48:6b:d8:1e:87:64:39:61:1d:7b:8f:a4:ca:17:ed:45:44:c4:
ed:75:17:85:af:20:b3:62:cd:8a:ad:08:42:16:57:ec:0c:8e:
1e:8b:42:71:5c:08:20:be:14:07:f1:c7:d4:7c:de:d0:6e:90:
43:e8:88:ba:00:05:8f:74:19:2c:5f:de:72:09:54:1b:ea:f9:
f5:13:32:db:b9:4d:e4:1a:0f:f0:05:f5:d3:ce:74:65:20:0c:
ad:00:be:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:06:27 2025 by rpki-client