Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/65985b-55b7-4cb7-a4f4-998783c6841d/1/RTuE6ODlYXw0Jg12j0QKUTHy3PQ.mft
File: RTuE6ODlYXw0Jg12j0QKUTHy3PQ.mft (raw, json)
Hash identifier: JzJVG8+FtRfJ8YX42vF7qDsCOPdMOXPyBN2E6NC8psc=
Subject key identifier: 34:B9:BF:71:0B:4D:49:DF:FB:54:84:C7:C8:D8:47:C1:37:F3:1F:00
Authority key identifier: 45:3B:84:E8:E0:E5:61:7C:34:26:0D:76:8F:44:0A:51:31:F2:DC:F4
Certificate issuer: /CN=453b84e8e0e5617c34260d768f440a5131f2dcf4
Certificate serial: 0196748C0FD54BD281FB4A77F3AC5FE80882
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RTuE6ODlYXw0Jg12j0QKUTHy3PQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/65985b-55b7-4cb7-a4f4-998783c6841d/1/RTuE6ODlYXw0Jg12j0QKUTHy3PQ.mft
Manifest number: 0C7F
Signing time: Sun 27 Apr 2025 00:00:58 +0000
Manifest this update: Sun 27 Apr 2025 00:00:58 +0000
Manifest next update: Mon 28 Apr 2025 00:00:58 +0000
Files and hashes: 1: RTuE6ODlYXw0Jg12j0QKUTHy3PQ.crl (hash: QiXkwYeJNpDXi+gRzYLmbY2+cDsxoFboLi6XgtwKfOI=)
2: su-hbEzusTLSOxmaXJEWMOWCTZI.roa (hash: wY777l5pDJFcS+82iBVpdLmEK77pZHYgVlbVwhboSl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/65985b-55b7-4cb7-a4f4-998783c6841d/1/RTuE6ODlYXw0Jg12j0QKUTHy3PQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/65985b-55b7-4cb7-a4f4-998783c6841d/1/RTuE6ODlYXw0Jg12j0QKUTHy3PQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/RTuE6ODlYXw0Jg12j0QKUTHy3PQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8c:0f:d5:4b:d2:81:fb:4a:77:f3:ac:5f:e8:08:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453b84e8e0e5617c34260d768f440a5131f2dcf4
Validity
Not Before: Apr 27 00:00:58 2025 GMT
Not After : Apr 28 00:00:58 2025 GMT
Subject: CN=34b9bf710b4d49dffb5484c7c8d847c137f31f00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:89:93:c3:10:12:cb:9d:26:7a:d9:4a:24:6d:
79:98:c1:d5:33:bb:bd:69:4a:93:c3:7c:df:62:f7:
cc:e9:63:e8:56:43:09:30:1b:16:be:94:01:bc:ed:
9d:d0:d1:f3:92:03:c2:3b:08:c0:71:07:4e:a8:de:
17:19:dd:8c:59:a3:07:44:a4:28:f7:08:de:e7:47:
39:e8:e0:ac:fd:0d:a3:1c:60:7b:bc:b8:ac:37:b1:
5e:e3:a8:d3:7a:85:a9:34:1b:99:f2:3b:5f:c1:84:
b7:7a:c9:05:41:a4:5e:fc:81:12:d7:b1:4d:65:50:
69:97:52:62:33:45:95:e9:ca:b9:07:78:0d:7a:c3:
bd:36:ac:01:b7:b7:ef:c9:a0:54:32:2d:d2:82:ba:
bb:24:34:1b:cf:e5:7a:eb:92:cc:f7:e4:a7:8e:5e:
06:01:c2:9b:68:ff:60:1e:b6:d2:2c:63:e6:63:87:
a3:e8:4f:f2:a8:ac:14:59:4e:2c:c8:09:10:44:cc:
8d:a0:89:b5:df:06:d7:44:ef:d8:25:ec:48:d4:f2:
d5:44:c1:a8:5b:c1:00:60:7f:0b:91:91:9c:2c:0b:
46:01:75:e8:30:ec:a1:9e:da:ae:01:0c:b1:12:fc:
e4:19:43:8c:3f:de:c6:7b:82:ab:f0:f7:88:7f:ce:
60:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:B9:BF:71:0B:4D:49:DF:FB:54:84:C7:C8:D8:47:C1:37:F3:1F:00
X509v3 Authority Key Identifier:
keyid:45:3B:84:E8:E0:E5:61:7C:34:26:0D:76:8F:44:0A:51:31:F2:DC:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RTuE6ODlYXw0Jg12j0QKUTHy3PQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/65985b-55b7-4cb7-a4f4-998783c6841d/1/RTuE6ODlYXw0Jg12j0QKUTHy3PQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/65985b-55b7-4cb7-a4f4-998783c6841d/1/RTuE6ODlYXw0Jg12j0QKUTHy3PQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:3a:d7:92:20:da:22:b0:eb:27:44:e7:d4:dd:63:df:4d:f9:
78:1e:53:e0:77:5e:bf:42:5e:d1:7c:70:db:32:95:e4:6a:68:
f8:40:17:92:69:c9:f4:fa:aa:a7:4d:80:c1:5f:d0:21:96:56:
c1:c4:23:30:cc:de:c8:85:45:6d:0c:7b:47:31:18:6a:ee:77:
81:01:4f:87:c2:2b:02:a6:f9:41:00:67:7d:21:97:1b:aa:e7:
0c:01:3e:3e:f4:5c:b3:51:d0:79:49:d2:2c:f0:b2:e0:e5:c4:
5f:ec:58:be:92:da:0e:a1:ea:da:88:51:22:21:e8:15:b0:de:
0e:3d:94:92:1f:fc:d7:0f:ed:c8:c1:16:a0:a0:f9:3b:aa:15:
f0:7a:1f:90:d3:11:05:a6:7f:88:dc:fc:85:b0:d8:11:a1:d4:
57:74:10:48:d0:11:16:45:76:78:d4:88:1f:3a:e4:fb:df:29:
88:19:59:71:71:4b:76:18:8c:08:68:25:0f:e0:fe:ed:f4:94:
05:73:36:e9:cc:0a:d4:8f:c8:36:9d:92:bf:ee:42:13:62:18:
19:ea:e5:46:ec:cd:5d:89:d5:56:b7:2f:12:53:8a:20:74:90:
d9:bc:eb:f3:02:ee:61:93:aa:9f:66:0f:dd:36:1c:f3:69:7f:
97:fa:8e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:50:37 2025 by rpki-client