Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft
File: 24gOLcNLroD0K7HjhFf-GXqH1LM.mft (raw, json)
Hash identifier: bPsufHFud9jXjNuHfHU7YIqlxkQd2rHcyT4mvmp7SEM=
Subject key identifier: 76:67:42:55:52:EC:97:2A:F5:FC:D4:EF:28:28:58:5A:94:20:A7:D3
Authority key identifier: DB:88:0E:2D:C3:4B:AE:80:F4:2B:B1:E3:84:57:FE:19:7A:87:D4:B3
Certificate issuer: /CN=db880e2dc34bae80f42bb1e38457fe197a87d4b3
Certificate serial: 019677FBB7F07F85093C3154B7FCE0A7273F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/24gOLcNLroD0K7HjhFf-GXqH1LM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft
Manifest number: 1440
Signing time: Sun 27 Apr 2025 16:01:47 +0000
Manifest this update: Sun 27 Apr 2025 16:01:47 +0000
Manifest next update: Mon 28 Apr 2025 16:01:47 +0000
Files and hashes: 1: 24gOLcNLroD0K7HjhFf-GXqH1LM.crl (hash: vmm0ELsNQRpvUWM1QzMWCn6P8BRiG2Y+VM0DkoZazEI=)
2: 4PwJxAwKax5Reljdgs0YL3qX31Q.roa (hash: UYp5AvhZKwwfeYa3iRTnePJRJNovfCx7buPjdCyUR7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft
rsync://rpki.ripe.net/repository/DEFAULT/24gOLcNLroD0K7HjhFf-GXqH1LM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fb:b7:f0:7f:85:09:3c:31:54:b7:fc:e0:a7:27:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db880e2dc34bae80f42bb1e38457fe197a87d4b3
Validity
Not Before: Apr 27 16:01:47 2025 GMT
Not After : Apr 28 16:01:47 2025 GMT
Subject: CN=7667425552ec972af5fcd4ef2828585a9420a7d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4e:1d:e1:47:dd:89:b6:bb:a1:77:7a:2c:5d:
1b:f7:55:17:1c:03:2e:21:e7:f5:4f:38:e5:d2:60:
e5:5f:9f:8a:6f:d1:17:19:87:29:1e:b2:5f:86:c3:
e0:1f:81:ad:6d:be:07:92:96:f8:d4:dd:d0:82:63:
75:af:1e:77:a5:b9:7d:3c:18:50:a2:63:52:fb:ca:
be:95:a1:65:40:f1:5b:62:d4:d4:64:a3:96:f0:68:
58:67:25:8c:f8:0d:f1:ec:1d:20:b5:57:87:98:79:
c9:55:bf:52:31:b4:8b:d8:f5:a4:51:98:79:90:f1:
93:3b:39:52:c2:6a:f9:a2:ac:54:4b:32:da:a4:4a:
9d:5a:46:ba:b0:14:82:5f:4e:75:8e:d2:be:05:44:
f3:c8:96:da:d1:e9:74:07:5b:c6:23:d4:51:37:78:
a2:61:21:ce:b9:85:55:d6:0b:4b:a6:69:53:a2:b8:
11:08:76:e7:bc:de:b0:bc:93:38:4b:e6:6f:8c:19:
c4:30:6b:c5:29:a1:5c:2a:93:d1:eb:6f:34:08:83:
3d:ad:a1:f7:c0:c0:75:7d:ad:f7:65:1a:84:ea:05:
dc:a8:81:70:a0:0c:4b:93:7d:51:70:c4:e1:bf:9c:
77:19:a7:84:bc:3a:c7:c5:80:28:e4:c1:b4:3e:5d:
21:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:67:42:55:52:EC:97:2A:F5:FC:D4:EF:28:28:58:5A:94:20:A7:D3
X509v3 Authority Key Identifier:
keyid:DB:88:0E:2D:C3:4B:AE:80:F4:2B:B1:E3:84:57:FE:19:7A:87:D4:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24gOLcNLroD0K7HjhFf-GXqH1LM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:09:60:4f:57:2d:ca:68:7a:0e:60:50:ad:45:65:11:d8:ef:
2b:6b:cc:74:07:35:6f:df:19:df:e8:c8:1a:18:8a:9b:38:0e:
2c:a5:71:d4:a5:b1:5f:dc:97:5f:f8:06:0a:88:bc:38:94:8c:
ff:be:dc:d3:10:e2:9e:02:8e:50:46:b2:5a:d7:b5:eb:b8:5d:
0a:bb:7a:16:43:ee:fa:e4:b1:e8:d0:c7:ab:1d:10:6d:15:2f:
ac:a1:ec:d1:47:b2:ee:2a:81:83:0c:3f:59:69:45:d0:8e:94:
5b:75:7a:68:cb:5e:6c:6c:f5:58:a9:95:cb:ec:73:50:dd:23:
8c:d3:59:76:42:ba:7a:4e:4c:df:64:70:37:50:f4:d9:2d:b4:
92:b4:68:34:00:d2:a5:cc:e1:a6:98:73:a1:1f:72:01:ee:0d:
c0:28:da:98:6b:bb:19:92:bd:12:99:78:c0:a2:80:93:8b:97:
c9:64:2c:8b:f1:b6:e6:7f:58:65:4d:6e:2f:05:16:b3:f7:cb:
42:d6:3e:e5:d4:58:31:cf:4c:e1:07:0c:d5:98:96:aa:69:c3:
41:8c:db:e9:9d:6c:ff:5b:1a:c8:c8:31:88:95:a6:e0:84:14:
ce:5d:f7:36:82:69:d7:f6:a3:5f:0f:dc:6b:db:6e:38:61:8f:
2e:5f:58:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:31:27 2025 by rpki-client