Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.mft
File: rImvYJhubZWDIvsCbGtlruyUmg0.mft (raw, json)
Hash identifier: RLJnoIJxRcECkv+iz7ymLIgnePwpjOltAUrCwlpuzO0=
Subject key identifier: 5A:ED:4B:C5:0D:71:41:48:92:15:A0:E2:2D:E0:A5:24:FF:92:35:4E
Authority key identifier: AC:89:AF:60:98:6E:6D:95:83:22:FB:02:6C:6B:65:AE:EC:94:9A:0D
Certificate issuer: /CN=ac89af60986e6d958322fb026c6b65aeec949a0d
Certificate serial: 0196722F7B46E791BD1CBCD649F2DBD354B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rImvYJhubZWDIvsCbGtlruyUmg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.mft
Manifest number: 0658
Signing time: Sat 26 Apr 2025 13:00:36 +0000
Manifest this update: Sat 26 Apr 2025 13:00:36 +0000
Manifest next update: Sun 27 Apr 2025 13:00:36 +0000
Files and hashes: 1: HWWs6MqFS2nmbLw3ShctihMbNaY.roa (hash: KSXNNa9oIp9r32J4311J0aN03+Peflc2SZu+HPxriyM=)
2: QUH08L51MfImU-aeLB1gViX82cI.roa (hash: YfmDCd25c+HZBRwpm39HGU+G/47jVrQR3XrIyRY2J8U=)
3: b81h_NWwhKjMbH2-sUXyjP4n64s.roa (hash: e3T+4A186w/5PvOch5tYGnvLHtBctNKp6kP6+X8+j/w=)
4: rImvYJhubZWDIvsCbGtlruyUmg0.crl (hash: XhOYtI3boSG3takXYYG+Yg4ywgd9z61P0JRFs+K/5PM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rImvYJhubZWDIvsCbGtlruyUmg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:2f:7b:46:e7:91:bd:1c:bc:d6:49:f2:db:d3:54:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac89af60986e6d958322fb026c6b65aeec949a0d
Validity
Not Before: Apr 26 13:00:36 2025 GMT
Not After : Apr 27 13:00:36 2025 GMT
Subject: CN=5aed4bc50d7141489215a0e22de0a524ff92354e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:20:8a:3c:25:95:a1:01:bb:1a:b9:10:3c:f9:
bf:e7:b1:3e:45:06:cc:e5:93:e8:04:9e:7b:88:b2:
74:b7:81:fa:16:0c:c0:5e:a4:d9:f4:a0:89:ee:02:
d6:c4:3a:25:13:7a:2d:00:92:f6:37:51:00:9a:0b:
c2:d9:35:90:30:f1:d7:49:2e:0b:5f:fc:c0:99:ec:
f3:7d:ae:f2:c4:c4:fd:20:6a:1c:ea:9d:e4:7e:e1:
69:9d:ea:ce:db:89:8e:35:81:0b:54:03:f6:1a:95:
a9:f4:90:fb:8a:87:d3:33:55:2a:c7:48:6f:ae:d6:
fe:f7:bc:d4:c4:ab:ad:04:91:6f:9a:a8:4e:33:3d:
b3:88:d7:8e:3a:6d:0d:62:9f:6b:11:c2:a5:75:64:
7f:d6:d1:44:e6:c3:ed:77:61:ec:ca:59:07:fb:ee:
40:55:5c:27:93:f4:a0:38:6a:37:42:34:20:9e:6d:
e9:e3:b3:51:d5:8b:51:71:26:c9:19:b9:15:5d:7b:
a6:5b:71:c8:40:cb:43:27:93:89:58:2a:55:4d:6a:
d5:dd:5c:31:fa:0a:a1:83:a3:51:f0:eb:1f:96:4d:
8c:9b:13:34:d5:80:e5:36:a6:10:6d:2e:42:69:d4:
94:71:84:c6:d8:c2:9e:ad:93:b6:d7:8e:79:e6:f5:
5c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:ED:4B:C5:0D:71:41:48:92:15:A0:E2:2D:E0:A5:24:FF:92:35:4E
X509v3 Authority Key Identifier:
keyid:AC:89:AF:60:98:6E:6D:95:83:22:FB:02:6C:6B:65:AE:EC:94:9A:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rImvYJhubZWDIvsCbGtlruyUmg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:87:bc:2a:28:70:5b:27:20:64:86:25:04:dc:4e:fb:20:02:
97:a9:c6:97:9f:45:ed:20:9c:77:8d:6a:94:51:0b:3b:71:96:
87:91:ee:86:9d:26:1e:b3:28:18:4f:96:25:19:b7:12:39:1a:
f8:40:0d:ad:d4:3a:9e:d0:70:ea:54:5a:5a:18:e9:0d:c2:e0:
c5:cd:d4:60:27:d0:b9:4a:bd:10:f5:78:40:63:96:a6:55:84:
96:f7:c3:b4:32:69:9e:8d:25:2b:f9:05:9b:41:6d:3d:fb:b8:
e8:f7:72:7e:4c:8d:eb:dd:9e:56:99:27:09:d2:a2:72:2b:56:
96:b5:53:57:9b:a2:c0:a1:09:d7:15:e8:f7:c8:d7:5d:35:b0:
70:d3:fe:07:80:2b:c8:a6:93:71:29:26:f4:a5:a0:a2:e8:85:
c1:1a:25:3a:0f:3d:5d:40:5e:70:95:34:79:e7:9e:24:5f:e3:
8e:49:ae:b3:8b:81:98:e0:38:32:62:2a:44:ff:05:41:6c:4e:
e8:f5:c1:a7:5a:2c:c9:13:b3:51:00:0c:09:5c:d1:da:20:30:
1f:18:f2:25:92:9a:83:61:11:61:6a:b6:19:22:51:96:17:64:
f5:8c:a6:95:90:91:64:bb:70:a8:32:e5:f3:56:2f:a7:54:a1:
0c:fa:0f:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:50:36 2025 by rpki-client