Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
File: 06fDvga8RcPxK5CxhSeK1OyRl1Y.mft (raw, json)
Hash identifier: jMdTjNbwuMs3IkVkCU0uOWVgXdtshgoHf7GeG2DimZc=
Subject key identifier: AE:88:B5:D7:EA:52:90:FE:6B:CD:DC:72:13:48:60:44:2A:1D:D6:7F
Authority key identifier: D3:A7:C3:BE:06:BC:45:C3:F1:2B:90:B1:85:27:8A:D4:EC:91:97:56
Certificate issuer: /CN=d3a7c3be06bc45c3f12b90b185278ad4ec919756
Certificate serial: 01967F7CD91A592FC3554316243C239985BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/06fDvga8RcPxK5CxhSeK1OyRl1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
Manifest number: 1334
Signing time: Tue 29 Apr 2025 03:00:10 +0000
Manifest this update: Tue 29 Apr 2025 03:00:10 +0000
Manifest next update: Wed 30 Apr 2025 03:00:10 +0000
Files and hashes: 1: 06fDvga8RcPxK5CxhSeK1OyRl1Y.crl (hash: Ur9WSfN+syzii5sMCWLtivaDc04amkOoKvTpITnSLhY=)
2: tbW3C2BxGOP8RipICwkXorNWMa0.roa (hash: sAyggufTAiW8TAkDGmUgXEYrufIqSzYFIzTOlTIqneg=)
3: u1VhcVTy354RLIy1HL3zp9mHr4s.roa (hash: bTXjEk3aPbxZmee9JV98PLXefqyqj+KHu6+Sm9Lnq+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/06fDvga8RcPxK5CxhSeK1OyRl1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:7c:d9:1a:59:2f:c3:55:43:16:24:3c:23:99:85:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3a7c3be06bc45c3f12b90b185278ad4ec919756
Validity
Not Before: Apr 29 03:00:10 2025 GMT
Not After : Apr 30 03:00:10 2025 GMT
Subject: CN=ae88b5d7ea5290fe6bcddc72134860442a1dd67f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:16:0a:d6:50:38:a0:d4:61:9a:86:c4:e5:48:
59:c2:06:aa:a7:88:85:4a:b6:46:88:0d:9b:d1:03:
1e:7a:36:3f:4e:7a:77:24:2e:89:89:d4:22:0b:8b:
b0:92:c2:d8:18:12:ea:1c:16:f0:4d:d9:a4:22:86:
30:b8:24:e7:fb:5a:1f:9d:f9:b0:88:a2:7d:ff:f5:
e0:01:96:56:35:18:1e:7d:50:d6:c5:af:f8:42:84:
69:b4:3e:42:f4:b5:18:c7:32:50:13:94:0a:39:21:
38:d3:78:f8:f8:72:b1:ee:77:aa:f7:2c:24:30:00:
32:07:33:06:de:73:dd:76:8d:18:f2:ff:42:04:41:
8b:61:81:69:e3:5e:01:53:61:72:9e:6a:84:f5:46:
25:c1:9a:17:fe:91:87:90:1c:f5:ad:55:4f:6f:64:
4c:ff:56:67:2a:37:6b:53:6c:ea:2c:62:46:73:26:
b2:71:c4:18:f1:9d:bc:ef:dc:c7:1e:04:01:84:bc:
71:be:fd:1b:ee:56:14:98:9b:da:d2:f0:1d:04:6d:
c5:c6:4c:31:6a:13:2c:82:bd:1b:81:7d:0f:26:20:
86:8b:a9:aa:7a:3d:65:64:40:cb:a8:10:96:5f:7a:
a1:bc:1a:3e:21:5b:c1:ab:75:97:0d:36:e6:94:bd:
60:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:88:B5:D7:EA:52:90:FE:6B:CD:DC:72:13:48:60:44:2A:1D:D6:7F
X509v3 Authority Key Identifier:
keyid:D3:A7:C3:BE:06:BC:45:C3:F1:2B:90:B1:85:27:8A:D4:EC:91:97:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06fDvga8RcPxK5CxhSeK1OyRl1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:9a:8b:18:85:6e:67:31:95:c1:16:05:8b:4c:4b:c3:b5:d7:
eb:15:ee:cc:67:e5:32:f2:db:e7:cd:ab:11:49:fa:2e:4a:79:
77:ce:35:28:a8:99:ae:7d:e9:1e:03:90:17:43:d3:ce:b0:42:
03:f8:f1:0a:41:eb:5f:5f:e8:72:a2:d0:5d:10:e3:f2:88:8d:
8f:dc:12:67:84:21:1d:f8:f6:1e:ec:73:ed:66:ea:59:ce:2a:
ec:35:7f:41:29:68:42:0a:c8:7f:57:c9:64:9e:05:bf:f6:e3:
14:f8:44:eb:fe:96:2f:7e:0a:20:b9:f2:90:50:cd:03:9b:96:
54:60:e1:1f:bd:f9:6e:a7:51:54:86:65:1a:9d:3d:a4:33:16:
0b:af:2f:14:d9:5a:f2:74:4a:58:0c:e3:f1:43:89:41:d3:db:
03:7e:f6:dd:75:43:d1:23:d1:a8:f6:de:69:e3:b6:00:1b:9a:
ff:6c:99:f3:05:fa:93:e5:f1:ee:eb:32:af:7f:1d:e3:d4:a5:
63:ac:37:7b:bd:9b:d9:52:47:1b:63:c9:92:0c:ad:8b:53:f7:
f6:36:cb:05:b0:5a:65:41:aa:13:ff:5f:8b:30:b3:eb:74:50:
1a:8b:b9:e8:3f:63:c4:b9:5a:5c:1d:af:9f:c1:8b:cb:fc:08:
cd:ee:4f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:49:52 2025 by rpki-client