Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/rdbXV2zSgkXGefmvNXXANbiiLJ4.mft
File: rdbXV2zSgkXGefmvNXXANbiiLJ4.mft (raw, json)
Hash identifier: rNoZHoq1L1H4YEpmVmIL/mzsq+Pf0h55Y5dlV6Y4M38=
Subject key identifier: 63:2B:08:4E:07:17:23:C1:FC:1E:A8:D7:BA:70:6F:0A:1C:4A:DF:19
Authority key identifier: AD:D6:D7:57:6C:D2:82:45:C6:79:F9:AF:35:75:C0:35:B8:A2:2C:9E
Certificate issuer: /CN=add6d7576cd28245c679f9af3575c035b8a22c9e
Certificate serial: 01967D8E9072EF5598C8AA369833148DEE2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rdbXV2zSgkXGefmvNXXANbiiLJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/rdbXV2zSgkXGefmvNXXANbiiLJ4.mft
Manifest number: 1514
Signing time: Mon 28 Apr 2025 18:00:17 +0000
Manifest this update: Mon 28 Apr 2025 18:00:17 +0000
Manifest next update: Tue 29 Apr 2025 18:00:17 +0000
Files and hashes: 1: l7t2iScMgw_Vqqdey3zojLvCFAo.roa (hash: GElb5qawLmwlWjlnnhanimj+W7edI5MOyhH1UzXbSog=)
2: rdbXV2zSgkXGefmvNXXANbiiLJ4.crl (hash: ZAoM7lGiLBa2EI3db1EtxlFakDsPOx2JQ/PMWfNlk0U=)
3: svKZo3SYe3cv8Mz7OTgmT4eXdPY.roa (hash: hDRuttNUPmkUswD/PN5v7bjO2pBa9L/1t8q5gG/jwI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/rdbXV2zSgkXGefmvNXXANbiiLJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/rdbXV2zSgkXGefmvNXXANbiiLJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rdbXV2zSgkXGefmvNXXANbiiLJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:8e:90:72:ef:55:98:c8:aa:36:98:33:14:8d:ee:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=add6d7576cd28245c679f9af3575c035b8a22c9e
Validity
Not Before: Apr 28 18:00:17 2025 GMT
Not After : Apr 29 18:00:17 2025 GMT
Subject: CN=632b084e071723c1fc1ea8d7ba706f0a1c4adf19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3a:29:e3:f7:58:8a:16:59:19:31:45:fb:1e:
1b:11:bf:db:7c:d1:1e:53:e0:1f:24:67:24:cb:62:
9c:fc:61:ad:a6:61:b9:d8:ec:fd:71:a7:60:86:64:
c0:6e:ec:c5:14:d3:e8:8c:8f:94:f8:9d:a6:01:c1:
32:28:c3:d6:71:b3:0c:6f:08:95:eb:b8:a9:ac:dc:
87:c7:90:87:51:af:8a:e5:12:d4:d8:72:72:26:e3:
6e:bc:d9:b7:bd:ba:2d:85:93:a8:c8:1e:fd:0c:19:
79:0d:d2:1d:ff:f0:78:9d:8e:46:23:3e:2d:a4:a7:
7e:5f:71:6a:32:17:7a:2e:0d:65:96:95:d9:06:a4:
55:4b:ee:ac:60:fc:06:7a:e1:61:cb:71:9b:04:01:
47:eb:4d:20:aa:e0:ad:48:5a:70:78:37:fb:f1:21:
a5:20:3d:d5:70:79:eb:3a:b5:fd:9f:c3:04:a9:23:
fd:4b:b5:09:dc:ab:ad:95:98:c2:92:23:b4:ed:e6:
8d:30:b5:96:53:8f:ac:7c:80:07:ba:2c:97:93:ae:
2c:57:3e:ea:9c:85:36:eb:b3:f9:ef:6f:a1:f5:3b:
77:17:e6:28:1a:9b:2b:e8:39:82:d2:7b:f4:03:a4:
c7:a1:b3:4b:17:be:de:1c:c8:8b:10:92:08:07:25:
d8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:2B:08:4E:07:17:23:C1:FC:1E:A8:D7:BA:70:6F:0A:1C:4A:DF:19
X509v3 Authority Key Identifier:
keyid:AD:D6:D7:57:6C:D2:82:45:C6:79:F9:AF:35:75:C0:35:B8:A2:2C:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rdbXV2zSgkXGefmvNXXANbiiLJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/rdbXV2zSgkXGefmvNXXANbiiLJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/rdbXV2zSgkXGefmvNXXANbiiLJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:b2:de:c4:27:6a:c7:49:90:a5:a8:8f:94:48:21:3e:c3:2c:
01:cb:6f:11:68:47:80:34:a5:79:36:d6:58:bb:9e:13:4c:35:
d5:6c:c3:1d:7d:9b:27:51:21:53:d4:30:4e:50:dc:87:cd:e0:
3c:22:2e:30:6c:c0:04:46:1f:52:c3:a9:9f:a8:5d:f5:c8:0b:
62:27:c5:6c:9b:90:a0:49:53:f6:12:bf:72:51:5f:98:50:08:
92:67:c8:69:4c:40:31:71:55:84:98:f8:8d:2a:41:3c:6c:61:
d4:91:a4:c2:f5:d4:2e:19:87:33:ed:1d:ad:3e:51:aa:32:ad:
07:d9:0d:2d:77:23:a5:76:ee:cd:03:64:45:cd:d1:f6:47:b4:
69:18:11:b8:69:9f:3e:2d:e5:0c:20:db:aa:be:12:48:32:21:
83:ca:56:c3:cd:84:31:c1:ad:28:41:c1:a4:7c:ab:8b:ef:5b:
5c:4e:00:d5:7b:b0:f3:9b:4c:cf:70:42:e1:99:89:84:10:c8:
4d:5e:ff:86:27:a9:36:df:ab:90:6f:8a:9b:5a:3e:d4:46:43:
1b:0a:8c:ac:8f:b8:c5:14:62:9b:86:12:48:8a:7a:6d:fb:d7:
ee:01:01:0c:04:db:1f:e8:ec:7e:4c:f5:04:99:6a:01:a7:91:
de:9b:2b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:32:15 2025 by rpki-client