Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/sHATRrrVXff13IGLu7z7t9sQcKs.mft
File: sHATRrrVXff13IGLu7z7t9sQcKs.mft (raw, json)
Hash identifier: b95c1xUbr7BRn8IfYoKCCfM0cg/DZ/bEe1elBGmHIjI=
Subject key identifier: 05:C7:C9:14:60:EE:FA:F7:A7:F6:7A:2B:D8:B9:2F:8E:DB:27:0F:32
Authority key identifier: B0:70:13:46:BA:D5:5D:F7:F5:DC:81:8B:BB:BC:FB:B7:DB:10:70:AB
Certificate issuer: /CN=b0701346bad55df7f5dc818bbbbcfbb7db1070ab
Certificate serial: 019672661923D206BC47B36D49DACAECA3A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sHATRrrVXff13IGLu7z7t9sQcKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/sHATRrrVXff13IGLu7z7t9sQcKs.mft
Manifest number: 06E1
Signing time: Sat 26 Apr 2025 14:00:15 +0000
Manifest this update: Sat 26 Apr 2025 14:00:15 +0000
Manifest next update: Sun 27 Apr 2025 14:00:15 +0000
Files and hashes: 1: 2vj5B04hPRrl36o4PSEreNmSh7Y.roa (hash: IJqTeCNZ6pF/BafJ55wl0YbKPxsnvPNim6xG4D9/f0M=)
2: sHATRrrVXff13IGLu7z7t9sQcKs.crl (hash: pp0kj6ATNnBg2iKQP6bAL4EhwqhAHEX471qTZfZQxY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/sHATRrrVXff13IGLu7z7t9sQcKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/sHATRrrVXff13IGLu7z7t9sQcKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/sHATRrrVXff13IGLu7z7t9sQcKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 14:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:66:19:23:d2:06:bc:47:b3:6d:49:da:ca:ec:a3:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0701346bad55df7f5dc818bbbbcfbb7db1070ab
Validity
Not Before: Apr 26 14:00:15 2025 GMT
Not After : Apr 27 14:00:15 2025 GMT
Subject: CN=05c7c91460eefaf7a7f67a2bd8b92f8edb270f32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:1a:54:20:7c:15:f4:d6:d2:f3:3c:b0:2c:15:
4a:af:df:1f:5c:d4:d9:25:39:99:69:90:99:59:08:
4c:ec:a6:ab:ba:ec:c6:e4:b3:04:37:03:18:54:2b:
9d:d9:dc:5c:8b:4e:d4:54:f7:d4:84:3a:3f:8c:46:
ba:ea:bc:c9:4c:13:42:04:c8:f3:dc:94:58:79:0d:
21:98:7e:b9:70:5f:15:8e:cd:01:d4:15:49:e5:33:
c4:64:6c:c7:f5:45:13:7b:41:6c:9e:52:ce:7d:af:
ea:08:b9:70:f5:5d:ff:e4:eb:2a:9a:08:33:e6:11:
e4:e3:c3:33:22:49:8a:dd:91:50:ef:19:18:92:da:
85:68:27:a1:a0:33:c1:cd:68:4c:dd:d8:7d:b8:ce:
cd:28:d4:f3:4d:16:1b:1a:6e:d1:4d:8e:ef:b4:56:
52:27:bd:61:5d:6c:1c:f7:4e:6c:c2:b0:64:75:ac:
43:11:7b:5a:0c:fa:0f:97:d6:a3:eb:d3:08:df:3d:
6c:2a:75:0e:8f:e5:c5:7c:86:4f:94:9f:d9:c6:d2:
8b:04:03:f6:39:71:3b:ee:db:9c:fa:c9:78:bd:f1:
71:50:d2:62:14:cd:fb:db:c0:51:2b:f0:92:73:0a:
16:54:1d:51:fd:38:06:7b:6a:6b:d0:a2:42:25:6f:
dc:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:C7:C9:14:60:EE:FA:F7:A7:F6:7A:2B:D8:B9:2F:8E:DB:27:0F:32
X509v3 Authority Key Identifier:
keyid:B0:70:13:46:BA:D5:5D:F7:F5:DC:81:8B:BB:BC:FB:B7:DB:10:70:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sHATRrrVXff13IGLu7z7t9sQcKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/sHATRrrVXff13IGLu7z7t9sQcKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/sHATRrrVXff13IGLu7z7t9sQcKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:97:c7:30:fb:33:d5:bd:f2:e6:d7:0c:b9:73:59:f6:17:92:
db:8c:93:6f:98:f6:a4:5c:38:60:d5:6e:56:0e:b3:d7:b3:f3:
bc:f0:ea:0b:a5:8e:48:a3:d2:a1:a7:04:0f:1f:fd:2c:08:9d:
dc:64:d3:a1:53:8e:b8:43:31:62:97:e8:27:e4:fb:5b:76:98:
de:fc:75:a0:9a:17:53:d5:a7:e3:36:24:20:8d:51:0e:df:c7:
eb:be:04:ea:1f:05:ba:c0:8a:ca:bb:91:09:08:d7:7a:90:1b:
37:42:a0:fb:4d:44:e8:b5:4e:1e:8c:1f:6e:39:76:fa:8d:0d:
70:d3:e3:2b:f2:87:81:16:af:41:1b:61:1c:22:aa:7c:bd:08:
c7:3d:ba:22:ef:0e:3b:78:45:a7:d7:b0:6e:42:94:b0:09:f8:
65:4a:0d:6f:82:88:e8:6d:7f:69:cc:00:8f:fa:72:62:c6:21:
44:0b:5b:95:82:dd:1c:4b:3e:15:bd:24:4c:d6:86:c9:02:6e:
1f:92:b6:e1:d7:92:d5:ba:f5:3e:7a:2b:a5:67:2b:e7:3f:b9:
8e:a4:73:4f:7e:97:eb:89:d5:2d:8f:8f:8a:e7:4e:cf:bb:05:
01:2e:57:70:c8:dc:e7:a8:8a:20:88:ef:2d:e4:bd:79:ec:5f:
84:61:b5:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 23:23:58 2025 by rpki-client