Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft
File: a8vbb9OedvAEhAEuExRrIYdVw_s.mft (raw, json)
Hash identifier: d9dk9y4/uoWxz13oMpVNht8GpKXPQwzR91Mh9mmK/f8=
Subject key identifier: 73:EA:C2:8E:C2:5B:7A:8D:32:4D:E2:22:5C:22:B6:2E:B1:4A:0C:3D
Authority key identifier: 6B:CB:DB:6F:D3:9E:76:F0:04:84:01:2E:13:14:6B:21:87:55:C3:FB
Certificate issuer: /CN=6bcbdb6fd39e76f00484012e13146b218755c3fb
Certificate serial: 019676B0C795AB0C432E259C3C917DBA60DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8vbb9OedvAEhAEuExRrIYdVw_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft
Manifest number: 140A
Signing time: Sun 27 Apr 2025 10:00:18 +0000
Manifest this update: Sun 27 Apr 2025 10:00:18 +0000
Manifest next update: Mon 28 Apr 2025 10:00:18 +0000
Files and hashes: 1: a8vbb9OedvAEhAEuExRrIYdVw_s.crl (hash: OHedamTVjWbvcs0hHyjAKtvOQ8i+7AnVhswrb5Q334c=)
2: cHx9sYkuiAFAjOWcBOb5TDvNls8.roa (hash: ShwHq89MA2jwo160RZTKkKFkHAW0OiQLJH4eT6G+deQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/a8vbb9OedvAEhAEuExRrIYdVw_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:b0:c7:95:ab:0c:43:2e:25:9c:3c:91:7d:ba:60:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bcbdb6fd39e76f00484012e13146b218755c3fb
Validity
Not Before: Apr 27 10:00:18 2025 GMT
Not After : Apr 28 10:00:18 2025 GMT
Subject: CN=73eac28ec25b7a8d324de2225c22b62eb14a0c3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b5:d3:aa:46:95:d7:59:14:a8:d8:c6:b2:83:
c2:31:ae:76:73:12:96:31:50:df:41:11:ed:78:1e:
9e:c2:db:94:c2:08:9c:f3:f5:aa:ef:3b:21:2e:70:
f5:60:cd:94:04:e7:12:f7:7a:10:66:cc:11:80:ca:
43:f1:37:9c:ed:f0:b7:4a:a2:80:34:f7:11:2a:ae:
0f:ee:a3:14:0c:b5:f5:51:67:f1:e1:2c:35:54:f5:
12:00:ef:bf:a5:d8:ab:06:bd:c9:4a:96:d7:58:0e:
49:27:c4:4d:08:15:dc:0d:d2:58:3a:22:c0:84:9c:
de:dd:4b:75:f6:d5:8d:ec:4a:86:22:21:83:94:55:
f3:71:54:5e:3b:dc:46:b0:b6:3e:57:66:44:4c:09:
db:97:d0:73:2b:98:09:e2:01:fc:8e:d0:21:5e:b6:
60:88:bd:a4:2f:b9:cc:8c:c2:44:20:65:f8:f1:12:
5a:b1:22:3f:63:ba:82:08:8f:b4:a0:0f:6b:76:ed:
9e:fc:fe:0e:18:28:2b:08:a5:ac:93:70:51:c1:bc:
5a:96:bc:e4:b5:4c:ae:0d:bf:d1:ce:1f:a5:69:a4:
ed:ef:f3:88:35:9d:00:43:33:99:e9:33:17:a4:f7:
ca:6c:1f:cc:a2:d2:19:ba:01:5c:5e:a9:a2:ac:fe:
71:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:EA:C2:8E:C2:5B:7A:8D:32:4D:E2:22:5C:22:B6:2E:B1:4A:0C:3D
X509v3 Authority Key Identifier:
keyid:6B:CB:DB:6F:D3:9E:76:F0:04:84:01:2E:13:14:6B:21:87:55:C3:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8vbb9OedvAEhAEuExRrIYdVw_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:47:b7:56:ae:a3:c0:a4:11:3f:32:58:8a:36:91:84:11:31:
94:32:5f:de:fb:50:13:28:98:bf:78:40:43:36:63:86:1f:e2:
d7:5d:44:7d:2d:fa:0f:d8:8a:aa:91:ba:c1:aa:b2:79:00:9f:
ec:af:d9:e5:62:7e:cb:bd:04:f1:36:d4:42:48:74:7a:5f:5a:
4b:28:4c:75:41:b1:18:cb:94:0f:b3:9a:69:ce:0b:a9:34:29:
f8:2f:19:41:ed:88:bd:c4:8e:5b:41:6c:ea:cb:93:de:61:fc:
8a:6c:70:50:e6:f6:82:3e:4d:6d:f0:17:b1:cc:b1:10:5c:d6:
f9:97:a2:ad:f2:cd:f7:47:4e:88:01:13:93:ea:06:03:aa:e6:
b3:ea:ad:65:b2:2a:d6:ea:d9:57:f9:3c:f7:c7:a7:c2:af:f9:
99:ad:1b:6e:1c:dc:a5:16:0c:c9:23:a2:cb:cc:81:ed:f9:51:
70:16:99:d6:05:70:70:d5:8e:06:3e:72:26:aa:13:2c:5f:ab:
8e:e3:5c:a3:75:c0:37:6f:27:e9:77:36:09:65:f4:26:7c:0d:
ff:5b:d0:f3:b1:1d:c5:ad:41:c0:fc:a4:86:fc:a8:ef:f6:d2:
e0:e0:c7:42:88:98:fa:51:57:4b:d5:5b:25:86:b7:70:25:92:
62:cd:0a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:49:39 2025 by rpki-client