Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1e5A9FidahGyT3u8wpq5-a5olxk.mft
File: 1e5A9FidahGyT3u8wpq5-a5olxk.mft (raw, json)
Hash identifier: eaXTqlz44VNC/xwF+kv/sXdHWbqL90TVZdJpl4V7Bk0=
Subject key identifier: 4E:2E:75:10:36:BF:2D:64:76:B0:18:E8:44:C9:9D:39:40:1C:C1:08
Authority key identifier: D5:EE:40:F4:58:9D:6A:11:B2:4F:7B:BC:C2:9A:B9:F9:AE:68:97:19
Certificate issuer: /CN=d5ee40f4589d6a11b24f7bbcc29ab9f9ae689719
Certificate serial: 01967F7D34F1993713AC950C09F1784CD3D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1e5A9FidahGyT3u8wpq5-a5olxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1e5A9FidahGyT3u8wpq5-a5olxk.mft
Manifest number: 0940
Signing time: Tue 29 Apr 2025 03:00:33 +0000
Manifest this update: Tue 29 Apr 2025 03:00:33 +0000
Manifest next update: Wed 30 Apr 2025 03:00:33 +0000
Files and hashes: 1: 1e5A9FidahGyT3u8wpq5-a5olxk.crl (hash: bpPow015ykGQrc9ftbya8qNGzMxOn6hyD1ZPHpb5Vdg=)
2: XjL_VzQpHSFAWpxr8LGCRwpbqdA.roa (hash: Brx7GKcJBpG7UwHG4ArWnTWvC9k75AexdudLOh9h/Pw=)
3: _iMkYM2SlDhb8BiWpSMXooueyD8.roa (hash: S5QL6kGITU62oZ1okwVbSjZ25wXtKrDyDz3OlnPy3eo=)
4: r8lD_AoxI_vqECkRvj5MGM36UnA.roa (hash: 3Vhj0OvbLDXudkl6wnwYXZg0rj1sNr06FqG4dJbW2C4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1e5A9FidahGyT3u8wpq5-a5olxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1e5A9FidahGyT3u8wpq5-a5olxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1e5A9FidahGyT3u8wpq5-a5olxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 03:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:7d:34:f1:99:37:13:ac:95:0c:09:f1:78:4c:d3:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5ee40f4589d6a11b24f7bbcc29ab9f9ae689719
Validity
Not Before: Apr 29 03:00:33 2025 GMT
Not After : Apr 30 03:00:33 2025 GMT
Subject: CN=4e2e751036bf2d6476b018e844c99d39401cc108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:97:2e:5a:af:99:22:4b:ed:88:d3:c8:e2:e0:
f2:34:94:be:d7:c0:e2:96:f9:cd:1c:80:8e:42:bd:
f0:f8:77:85:16:a7:c8:4a:9a:22:d3:3d:13:4d:ad:
d0:1e:a4:e2:57:9e:8f:55:e2:85:83:33:23:36:0b:
83:54:da:f8:3d:cd:72:15:4f:c7:a0:5c:82:24:56:
2b:50:e6:de:7c:94:7d:4f:a1:71:82:3e:65:36:c0:
63:82:b3:1a:be:c1:f9:c7:ab:e8:31:5a:32:e7:13:
66:0f:d8:65:07:bf:98:24:ba:ab:59:a4:53:5e:bf:
84:0c:89:dd:45:5a:c1:f3:5a:60:96:83:01:d3:42:
f4:5a:a2:16:48:a2:45:3f:12:a0:ed:68:31:b9:05:
d1:8b:77:d2:75:70:c9:13:20:42:d4:8b:3d:47:6f:
99:5d:6f:46:f9:57:84:6f:65:af:ae:ed:68:6b:d0:
71:46:4e:c3:e8:34:fd:e6:5f:23:67:a6:39:3a:6a:
d4:e5:b1:d4:0b:b2:0c:c2:03:be:6c:09:3a:16:5c:
5e:bd:d3:1f:9b:48:cc:44:8e:d2:e5:5e:99:20:c1:
46:e5:ae:f7:cb:d8:31:83:0f:a4:ff:63:38:58:92:
bf:c2:45:03:1c:a3:eb:cf:42:34:10:a5:6c:7f:2c:
21:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:2E:75:10:36:BF:2D:64:76:B0:18:E8:44:C9:9D:39:40:1C:C1:08
X509v3 Authority Key Identifier:
keyid:D5:EE:40:F4:58:9D:6A:11:B2:4F:7B:BC:C2:9A:B9:F9:AE:68:97:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e5A9FidahGyT3u8wpq5-a5olxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1e5A9FidahGyT3u8wpq5-a5olxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1e5A9FidahGyT3u8wpq5-a5olxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:e7:c4:a4:c7:85:05:44:dd:59:5a:f7:69:6c:90:99:08:a9:
4e:ef:9d:ff:a2:21:09:c4:91:4b:2d:e1:43:16:58:bf:83:d9:
57:57:bb:e9:eb:d8:0d:12:55:7d:fe:e9:e3:e8:9a:94:57:c0:
d9:13:c9:e0:15:ef:52:e9:a9:34:2e:ff:45:ee:a9:b2:11:9e:
a0:bc:e2:ea:d6:58:f2:5f:a0:2b:d1:7d:1a:32:7b:01:b1:a1:
1f:8a:e0:4d:27:68:d7:4e:49:bc:99:30:d0:d7:c7:bf:16:18:
1e:5a:01:f6:ba:87:b3:bc:31:81:db:57:1e:c4:56:52:72:e5:
fc:bb:34:d5:6b:23:c9:6b:a3:ec:7d:06:95:d8:5c:fb:27:9a:
10:66:d8:39:96:ad:ba:01:80:b5:9b:b1:67:6a:a8:07:8a:4c:
34:e1:5f:0d:db:a6:95:2a:6a:92:92:0c:df:a2:2d:57:e7:e9:
a2:83:4a:ca:5d:ee:2f:70:27:80:d6:69:6b:d8:53:3d:b3:52:
65:fa:65:3d:97:03:11:01:7c:64:e5:1a:98:c8:f8:11:c0:0b:
45:7f:f0:54:fe:5f:72:e3:e6:78:48:84:27:2f:27:f1:52:ed:
49:e1:c7:30:90:04:1e:d6:02:d1:35:ee:53:9d:ca:de:fe:cc:
3d:e4:27:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:51:40 2025 by rpki-client