Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/21b36e-742c-4ae5-b735-f6141e03f3a7/1/svg6PraHtBmUyJ94I4qZETPfJfY.mft
File: svg6PraHtBmUyJ94I4qZETPfJfY.mft (raw, json)
Hash identifier: w8G0LMfBbRxQ8mvUJSMJFbkB7zmPXPQZXN2UUoRIMPk=
Subject key identifier: D7:F0:A9:98:7A:48:30:92:3D:72:9B:F8:28:08:5C:8B:B6:3A:52:91
Authority key identifier: B2:F8:3A:3E:B6:87:B4:19:94:C8:9F:78:23:8A:99:11:33:DF:25:F6
Certificate issuer: /CN=b2f83a3eb687b41994c89f78238a991133df25f6
Certificate serial: 01967EA1C8E93333C8C8F8445E0B19AA628C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/svg6PraHtBmUyJ94I4qZETPfJfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/21b36e-742c-4ae5-b735-f6141e03f3a7/1/svg6PraHtBmUyJ94I4qZETPfJfY.mft
Manifest number: 0DB9
Signing time: Mon 28 Apr 2025 23:00:53 +0000
Manifest this update: Mon 28 Apr 2025 23:00:53 +0000
Manifest next update: Tue 29 Apr 2025 23:00:53 +0000
Files and hashes: 1: svg6PraHtBmUyJ94I4qZETPfJfY.crl (hash: DXW66T8GviDNSNt3MteJyO5bru7a6YQG0DJsnvd55hk=)
2: tZnHKvR--oQspHXiMTb_7j-JYds.roa (hash: /ZQxh+STzzVQTIGd7v/o5S5T+TwpT7pJx116SvjP5MU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/21b36e-742c-4ae5-b735-f6141e03f3a7/1/svg6PraHtBmUyJ94I4qZETPfJfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/21b36e-742c-4ae5-b735-f6141e03f3a7/1/svg6PraHtBmUyJ94I4qZETPfJfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/svg6PraHtBmUyJ94I4qZETPfJfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:a1:c8:e9:33:33:c8:c8:f8:44:5e:0b:19:aa:62:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f83a3eb687b41994c89f78238a991133df25f6
Validity
Not Before: Apr 28 23:00:53 2025 GMT
Not After : Apr 29 23:00:53 2025 GMT
Subject: CN=d7f0a9987a4830923d729bf828085c8bb63a5291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fb:4d:b0:51:b8:2b:43:bd:68:6a:05:33:4a:
a5:de:fe:eb:16:b6:a7:62:c9:bc:04:f0:b1:54:b7:
9f:5d:d7:e2:82:10:72:a3:2e:a2:7f:9f:5b:b9:c8:
bc:d1:c6:9f:f5:c1:f1:20:20:39:60:b6:64:e0:5e:
0c:f0:f5:85:2e:f2:3c:3f:ac:bb:d0:52:5d:34:d0:
1e:0b:7b:2d:7e:4a:15:2c:dd:fb:75:ea:09:f5:ef:
69:3c:68:61:70:22:ae:3f:7a:af:4b:be:34:ad:f1:
49:56:7e:43:d5:50:a3:58:dd:86:fc:e1:cc:26:2d:
ab:1f:aa:e3:a7:9e:8e:e9:54:97:89:5f:f8:49:26:
90:ca:26:bd:86:23:91:3b:b0:b2:f4:90:69:26:92:
b9:de:fb:1c:7b:1b:1b:15:57:06:a9:75:19:2f:ba:
8b:26:3d:09:06:90:b9:58:44:57:ab:c5:35:3e:4f:
1b:d0:07:af:6f:8a:99:18:87:57:1b:ca:aa:52:bd:
14:f2:0e:e8:0b:83:63:df:b8:f4:7f:c4:85:a7:1a:
06:13:2c:f1:b8:dd:8f:60:88:db:91:4c:24:8e:17:
d3:ef:c1:86:a8:58:18:85:67:ec:5b:67:22:c0:b3:
93:9a:ac:af:6c:39:3f:c2:26:31:72:88:80:19:43:
ce:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:F0:A9:98:7A:48:30:92:3D:72:9B:F8:28:08:5C:8B:B6:3A:52:91
X509v3 Authority Key Identifier:
keyid:B2:F8:3A:3E:B6:87:B4:19:94:C8:9F:78:23:8A:99:11:33:DF:25:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/svg6PraHtBmUyJ94I4qZETPfJfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/21b36e-742c-4ae5-b735-f6141e03f3a7/1/svg6PraHtBmUyJ94I4qZETPfJfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/21b36e-742c-4ae5-b735-f6141e03f3a7/1/svg6PraHtBmUyJ94I4qZETPfJfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:6b:68:10:39:27:8a:37:de:13:bb:63:01:e3:47:6f:19:1a:
b0:09:04:17:97:fa:d4:41:8e:85:0c:6d:b7:08:e2:60:e7:80:
41:3e:22:f7:17:8a:75:a2:1f:e2:0b:d2:6e:f9:18:aa:39:27:
de:ed:22:d8:36:ab:9b:d1:01:06:76:78:98:68:08:84:6b:3a:
2e:6b:e0:46:26:e3:02:33:3e:ad:b7:22:df:fc:48:c9:47:d8:
86:c0:c1:96:43:5f:e2:c0:30:ab:8e:1a:d0:ed:44:0f:b4:72:
60:e0:f9:24:a3:7a:b3:94:df:93:07:f0:69:d5:4b:d2:94:63:
4e:96:e1:2c:1b:12:05:ac:58:20:ef:b0:a5:6d:43:e7:90:14:
57:df:e6:fb:86:aa:55:a7:dd:bd:66:bb:ee:d7:c4:05:93:dd:
3d:7b:d5:91:b3:11:ae:0a:d6:ef:42:fb:32:25:e1:9f:00:c9:
ff:4f:72:7a:c2:8b:28:a7:67:e1:7d:82:c0:78:67:16:ca:c4:
c9:f7:e6:94:24:f0:93:bf:a2:bc:e9:83:b6:35:84:c2:5b:b7:
1a:1c:6e:ee:19:4b:9a:c1:6c:d0:87:88:45:41:eb:bc:9c:92:
3c:70:8b:2a:ff:de:8e:4c:c1:54:ae:5e:51:05:9c:df:0c:c1:
4d:e5:e3:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:52:16 2025 by rpki-client