Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/ril1GgrIGmVxkFRupHgM2GFA3J8.mft
File: ril1GgrIGmVxkFRupHgM2GFA3J8.mft (raw, json)
Hash identifier: CRxYfMtA1HG2BCOKXp8jZDm2hx7jevmzbCFaT1kpsbk=
Subject key identifier: 95:02:6F:09:6C:0A:7F:1D:0D:92:AC:9B:D3:6E:96:F5:58:05:47:EA
Authority key identifier: AE:29:75:1A:0A:C8:1A:65:71:90:54:6E:A4:78:0C:D8:61:40:DC:9F
Certificate issuer: /CN=ae29751a0ac81a657190546ea4780cd86140dc9f
Certificate serial: 01967AFB4C113BF588E9CDA523A667DF0BC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ril1GgrIGmVxkFRupHgM2GFA3J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/ril1GgrIGmVxkFRupHgM2GFA3J8.mft
Manifest number: 1514
Signing time: Mon 28 Apr 2025 06:00:11 +0000
Manifest this update: Mon 28 Apr 2025 06:00:11 +0000
Manifest next update: Tue 29 Apr 2025 06:00:11 +0000
Files and hashes: 1: Pn8xyEax8dTf2X7jJobPQxh-9Fg.roa (hash: HTtYaWmG4vFsBggg1bZWXxDw9HN8LeHTNamhfWYt0+s=)
2: TzCEbM_FX1C8Etsgv1SpL73BfwY.roa (hash: 0+du4/EByKMALnvia/65AUVyk52kmBip6bBqdirNoQM=)
3: ril1GgrIGmVxkFRupHgM2GFA3J8.crl (hash: htV03Nia9OKuFyxiPE+wRnhC9GbjgAVFwyutt9bVEoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/ril1GgrIGmVxkFRupHgM2GFA3J8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/ril1GgrIGmVxkFRupHgM2GFA3J8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ril1GgrIGmVxkFRupHgM2GFA3J8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 06:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:fb:4c:11:3b:f5:88:e9:cd:a5:23:a6:67:df:0b:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae29751a0ac81a657190546ea4780cd86140dc9f
Validity
Not Before: Apr 28 06:00:11 2025 GMT
Not After : Apr 29 06:00:11 2025 GMT
Subject: CN=95026f096c0a7f1d0d92ac9bd36e96f5580547ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:14:a1:fb:c1:f4:ae:34:f3:ae:68:2e:9b:d1:
38:5d:aa:76:99:d4:dd:1d:f4:a5:eb:53:87:9b:a4:
a6:eb:4a:99:d8:78:57:0f:d9:63:22:57:4d:a3:83:
a2:9c:9c:d2:6e:21:7c:38:e8:5f:cf:a6:98:48:05:
aa:ad:86:8e:a8:1b:9e:3e:1b:10:d1:cf:72:2e:f7:
ad:04:67:a2:26:8d:05:92:5d:6f:e8:fc:9a:70:4c:
c7:37:2d:dd:2d:e2:21:e0:2a:a5:31:70:ea:3e:a8:
cb:3c:a5:65:30:0f:de:35:19:8f:57:6f:46:48:e9:
b2:71:8e:b2:a3:e4:b9:69:2b:3b:fb:09:57:ba:8c:
3d:d6:b3:c1:ea:fc:28:a3:45:4b:93:48:a0:f9:18:
50:fc:4a:57:ef:3e:a3:33:a1:d5:14:18:77:be:1a:
10:26:4e:2b:6c:57:0f:42:0b:e8:f6:98:a5:57:a3:
db:52:49:f1:48:86:ec:7c:b8:73:1b:92:51:9f:05:
88:01:ad:d3:f1:ac:94:d1:eb:56:5c:db:45:a8:74:
e5:81:8c:35:ad:dd:b0:9a:17:4b:c7:4b:27:9b:94:
ae:bf:91:06:8e:d1:7f:ad:42:6e:b6:b1:c2:af:aa:
e5:ca:19:2c:a0:e5:d5:01:78:c3:bc:56:98:d6:c9:
56:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:02:6F:09:6C:0A:7F:1D:0D:92:AC:9B:D3:6E:96:F5:58:05:47:EA
X509v3 Authority Key Identifier:
keyid:AE:29:75:1A:0A:C8:1A:65:71:90:54:6E:A4:78:0C:D8:61:40:DC:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ril1GgrIGmVxkFRupHgM2GFA3J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/ril1GgrIGmVxkFRupHgM2GFA3J8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/ril1GgrIGmVxkFRupHgM2GFA3J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:f7:5d:fc:e2:cf:ab:dd:0d:d2:6d:ec:c9:34:e9:e8:1f:c8:
6c:6b:6d:b6:32:92:ae:7a:84:18:90:bb:a5:7f:a3:0a:c5:0b:
29:16:14:e4:23:32:0f:57:cc:81:bc:9a:ad:aa:d1:60:b5:63:
c3:e2:60:2d:86:39:80:6c:f1:c0:e6:de:9a:35:c2:1d:79:09:
cb:23:81:18:15:a9:f3:99:d9:2d:26:ba:20:7a:f8:d5:8e:35:
1e:b9:2f:da:92:bd:c5:be:0f:d1:c7:d8:df:e9:76:97:99:bc:
48:16:56:94:ef:e8:ab:94:2b:ab:86:fa:28:73:cd:8f:50:44:
c1:85:a6:8a:f4:ba:0a:dc:01:a7:cc:e6:45:23:c0:b1:c6:98:
7a:5f:ce:a6:6e:c8:56:df:ea:62:c3:04:18:a1:2a:a7:26:19:
f6:58:74:27:78:4b:98:80:cf:ba:c0:54:74:ac:5d:5f:65:5f:
44:0d:42:28:bf:b0:77:3c:0a:87:10:fe:20:73:59:57:71:c9:
d5:22:3e:61:22:d7:4d:c4:01:da:49:02:1a:7e:b7:e4:6f:76:
49:e4:c8:e8:27:11:97:65:c5:e3:9f:8b:c4:07:dd:86:48:5c:
1b:71:2c:d7:87:14:c9:91:cc:52:be:20:6a:9e:ba:10:93:c2:
9a:6a:99:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:09:19 2025 by rpki-client