Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/df79c1-b802-4419-8ec0-cf447009e349/1/mnRIG4fez2ODfiaXRiyeRHANS90.mft
File: mnRIG4fez2ODfiaXRiyeRHANS90.mft (raw, json)
Hash identifier: sulDRhWlh3etHOy3v1/9WnCLTstzrX2w0KVjKMEy8h8=
Subject key identifier: 7A:EF:79:24:DE:F9:CE:60:73:30:29:C9:FD:4F:9C:46:1B:1E:36:18
Authority key identifier: 9A:74:48:1B:87:DE:CF:63:83:7E:26:97:46:2C:9E:44:70:0D:4B:DD
Certificate issuer: /CN=9a74481b87decf63837e2697462c9e44700d4bdd
Certificate serial: 0196760BFC4B05A0788056A207DF8B56FF95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnRIG4fez2ODfiaXRiyeRHANS90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/df79c1-b802-4419-8ec0-cf447009e349/1/mnRIG4fez2ODfiaXRiyeRHANS90.mft
Manifest number: 04C7
Signing time: Sun 27 Apr 2025 07:00:18 +0000
Manifest this update: Sun 27 Apr 2025 07:00:18 +0000
Manifest next update: Mon 28 Apr 2025 07:00:18 +0000
Files and hashes: 1: CK4siPWBYfHEvMudVxcsDQPxAR4.roa (hash: YhDnpIVqIiFTzSv32iL9GB9Nu0H7+HMcl1R+Eah/CyM=)
2: mnRIG4fez2ODfiaXRiyeRHANS90.crl (hash: h2z9VeDREL9LmTJGJMb7D61vYV9kS9OQgjcYYOR8rIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/df79c1-b802-4419-8ec0-cf447009e349/1/mnRIG4fez2ODfiaXRiyeRHANS90.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/df79c1-b802-4419-8ec0-cf447009e349/1/mnRIG4fez2ODfiaXRiyeRHANS90.mft
rsync://rpki.ripe.net/repository/DEFAULT/mnRIG4fez2ODfiaXRiyeRHANS90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0b:fc:4b:05:a0:78:80:56:a2:07:df:8b:56:ff:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a74481b87decf63837e2697462c9e44700d4bdd
Validity
Not Before: Apr 27 07:00:18 2025 GMT
Not After : Apr 28 07:00:18 2025 GMT
Subject: CN=7aef7924def9ce60733029c9fd4f9c461b1e3618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:94:5b:36:2d:17:46:2d:ea:4e:67:ab:07:a3:
14:84:a1:f0:40:37:f5:72:8f:a6:0b:a4:1b:f5:21:
14:e0:bb:77:44:22:b2:ab:37:f6:bf:55:4d:0a:ae:
42:a1:12:12:c8:48:cc:81:1f:c0:9e:4e:61:3b:17:
3e:d2:f6:d5:ee:19:01:e7:b5:11:d7:d7:0e:3d:8a:
de:45:41:e2:96:b6:4e:08:eb:f1:4a:e5:59:5b:32:
ec:3a:2e:36:1b:98:80:c0:40:ef:86:c2:2a:d4:2d:
0b:b9:28:0d:83:44:ad:1f:23:cb:ee:7c:4a:57:23:
aa:f2:67:9f:97:b2:ec:6d:70:97:8e:14:00:09:e3:
7b:dc:d2:aa:5d:38:71:37:f9:16:84:5a:d2:e6:70:
97:8f:5f:49:28:16:1e:b8:9a:85:a0:19:53:5f:8c:
fc:7b:96:d6:0c:86:5b:0e:bc:db:33:31:fc:0f:db:
71:d2:1f:9e:ce:e9:63:ea:c9:36:cf:19:d3:63:1e:
6b:91:d5:e2:96:e2:4a:ba:87:60:e1:92:07:bc:80:
9f:08:d9:50:84:f7:22:b5:be:6e:96:55:06:7e:6e:
37:f3:34:f1:f5:ca:0e:28:84:a7:e1:2a:14:62:5c:
9c:76:88:1d:ee:20:ba:2e:d1:bb:4a:bf:8d:e0:7b:
90:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:EF:79:24:DE:F9:CE:60:73:30:29:C9:FD:4F:9C:46:1B:1E:36:18
X509v3 Authority Key Identifier:
keyid:9A:74:48:1B:87:DE:CF:63:83:7E:26:97:46:2C:9E:44:70:0D:4B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnRIG4fez2ODfiaXRiyeRHANS90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/df79c1-b802-4419-8ec0-cf447009e349/1/mnRIG4fez2ODfiaXRiyeRHANS90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/df79c1-b802-4419-8ec0-cf447009e349/1/mnRIG4fez2ODfiaXRiyeRHANS90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:38:ba:90:4c:bd:8c:c9:42:c0:98:37:f1:22:e8:89:ff:80:
7f:54:54:59:6e:86:48:dd:4d:25:b5:17:1d:bf:d9:2b:1b:3e:
6b:ae:21:fd:eb:e9:73:10:92:d6:a9:01:e3:95:27:5b:b2:e0:
9d:d8:92:68:ea:2a:4d:74:cb:20:92:bc:3d:db:9a:03:af:cd:
f7:e0:fd:6b:27:86:09:75:1e:1d:a8:c6:e4:d7:05:e1:9f:bb:
9d:7e:18:7e:e3:2b:ab:8e:92:fb:ca:13:6f:f0:78:2a:68:25:
63:d5:35:11:97:5b:8f:a0:07:8d:b2:bd:f7:3a:ed:6f:58:05:
ed:60:4d:fa:7a:54:87:27:5a:ca:cf:2e:28:bc:e5:9f:6c:75:
af:75:87:e2:ad:bd:54:06:88:c1:62:b6:3d:11:fe:1b:81:18:
26:f5:45:61:b2:45:30:98:5b:fb:dd:b5:4d:d0:fe:78:f4:f3:
c9:d2:7d:af:aa:c1:ec:68:de:33:06:3c:5d:43:49:37:fe:14:
90:94:7a:75:3d:59:f3:36:bf:7b:d2:2b:77:e7:06:f0:c5:ad:
5b:df:37:ea:34:18:96:6d:3e:f7:84:39:4d:a8:51:e6:6b:aa:
09:25:73:72:d1:13:6a:4b:93:90:76:7d:d8:6e:b5:b9:8e:ea:
5a:80:9e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:17:41 2025 by rpki-client