Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft
File: pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft (raw, json)
Hash identifier: OOf2P9WBJK4antkk5xVFe8yo5PaPdCiD4AurA+DQaSo=
Subject key identifier: 06:90:DA:E1:79:0F:58:9E:C2:F1:06:10:FC:67:9A:52:CC:4C:48:DB
Authority key identifier: A6:7F:1C:F2:74:26:07:0A:ED:A7:B2:60:53:45:3C:28:3F:DF:75:37
Certificate issuer: /CN=a67f1cf27426070aeda7b26053453c283fdf7537
Certificate serial: 01967EA1948FC45CBD38DE874099D6123591
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pn8c8nQmBwrtp7JgU0U8KD_fdTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft
Manifest number: 07A0
Signing time: Mon 28 Apr 2025 23:00:40 +0000
Manifest this update: Mon 28 Apr 2025 23:00:40 +0000
Manifest next update: Tue 29 Apr 2025 23:00:40 +0000
Files and hashes: 1: pGhFSYKZpUat85kiXiiCd2_IqX0.roa (hash: rRFD7qwRqqnJAuhQ1luySoQoJ9GoQlnTCcam7ZPbXJk=)
2: pn8c8nQmBwrtp7JgU0U8KD_fdTc.crl (hash: ej+QoVKLhAIL8n36q5EASmpvUHDfsaQJwuONsrYWWnY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/pn8c8nQmBwrtp7JgU0U8KD_fdTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:a1:94:8f:c4:5c:bd:38:de:87:40:99:d6:12:35:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a67f1cf27426070aeda7b26053453c283fdf7537
Validity
Not Before: Apr 28 23:00:40 2025 GMT
Not After : Apr 29 23:00:40 2025 GMT
Subject: CN=0690dae1790f589ec2f10610fc679a52cc4c48db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b1:4d:03:d4:2d:f3:1a:57:50:93:b8:02:9c:
9f:b4:a2:ab:af:ca:16:1d:f3:57:7a:cf:88:9c:8a:
ab:d1:f0:f0:16:a6:aa:19:7b:a5:65:56:80:d9:b1:
cd:e0:0b:d4:8f:02:47:cc:c6:34:df:04:f3:45:0e:
1c:04:f8:e3:d3:8f:04:8e:b0:e9:df:73:bf:5e:59:
c4:e0:3b:5b:6e:ba:39:26:fa:82:36:6d:73:3b:01:
37:47:c6:e2:d6:62:81:41:80:0e:50:ef:45:73:e7:
13:37:8a:d5:89:a4:26:df:cb:04:de:0b:01:f0:e2:
95:87:ad:fa:74:dd:00:f3:8a:c2:07:e1:52:63:6a:
2f:36:67:37:f9:88:8e:ba:5e:6b:1b:fc:bc:7b:61:
e3:5b:61:2b:3b:3c:9e:85:f6:7d:fd:ce:91:0a:73:
5f:c8:33:1e:6a:62:35:96:f3:d1:79:ba:f6:e4:4a:
8f:15:0f:df:58:7b:e0:6e:b1:90:b0:9d:7d:05:89:
d4:99:3a:0b:87:54:4b:f6:22:73:27:b6:7b:00:bd:
78:b0:7f:e6:16:d2:70:f0:a1:d5:74:c4:fd:9a:9c:
2b:13:4d:64:19:4d:df:a8:37:0a:46:8c:c5:f2:b9:
01:62:a7:00:96:84:f5:e9:bf:ec:a9:2b:c5:d2:dc:
ec:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:90:DA:E1:79:0F:58:9E:C2:F1:06:10:FC:67:9A:52:CC:4C:48:DB
X509v3 Authority Key Identifier:
keyid:A6:7F:1C:F2:74:26:07:0A:ED:A7:B2:60:53:45:3C:28:3F:DF:75:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pn8c8nQmBwrtp7JgU0U8KD_fdTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:b5:13:ce:e5:b3:2b:fb:3c:52:2a:94:af:5f:df:1a:00:72:
d0:39:b2:d5:42:64:b1:72:27:84:55:9c:9f:30:5d:9c:8f:a0:
c3:71:f7:c3:16:97:94:e6:45:e5:42:b0:f4:29:36:77:53:c8:
36:71:13:73:17:13:0d:3c:e8:7f:ab:ce:2d:cf:e0:0f:e0:51:
74:28:24:50:6a:30:81:63:48:11:b8:6c:a2:cc:92:6d:4a:8f:
a9:7b:0a:dd:a6:cc:0e:2d:62:24:01:a1:ef:d9:bd:f9:3b:29:
c2:bb:92:c9:41:b2:91:bf:92:2d:70:ad:47:61:a3:11:b9:a3:
0f:79:14:ad:00:ea:6f:df:07:18:18:b0:b7:5f:96:de:f2:ab:
be:da:a7:1c:ca:80:40:5b:74:6d:a3:7c:49:66:57:01:94:ea:
41:7c:68:0d:cc:40:5b:7d:24:61:0b:4c:38:79:25:a6:45:ba:
f9:08:36:d2:ce:1f:bb:00:3f:0e:81:80:14:f9:82:d2:6d:3f:
84:3e:db:ee:7c:81:8b:8a:27:75:17:75:d7:e5:2a:e8:9c:b3:
41:fe:f3:b9:d6:64:7c:ae:d6:6b:1d:f6:e6:f8:ee:93:c2:9d:
a8:2d:25:1b:68:c6:c2:d6:3c:a6:5e:b6:5a:b9:d6:ae:6c:ca:
19:84:73:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:22:44 2025 by rpki-client