Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/cd33d5-7bba-49e4-9ab0-78f6c804773d/1/r633xfgtvAsdujKChi1T7Ih9XGY.mft
File: r633xfgtvAsdujKChi1T7Ih9XGY.mft (raw, json)
Hash identifier: 5rp9PQkER8AyN4NlUyq0jQr4E0huei9nKvVi5+ZzBu8=
Subject key identifier: 3E:EF:83:55:AD:35:74:46:F1:F0:41:EA:F6:0F:F9:DC:CB:18:5E:36
Authority key identifier: AF:AD:F7:C5:F8:2D:BC:0B:1D:BA:32:82:86:2D:53:EC:88:7D:5C:66
Certificate issuer: /CN=afadf7c5f82dbc0b1dba3282862d53ec887d5c66
Certificate serial: 0196839168501155C6B3200E6C43C74BD576
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r633xfgtvAsdujKChi1T7Ih9XGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/cd33d5-7bba-49e4-9ab0-78f6c804773d/1/r633xfgtvAsdujKChi1T7Ih9XGY.mft
Manifest number: 1513
Signing time: Tue 29 Apr 2025 22:01:06 +0000
Manifest this update: Tue 29 Apr 2025 22:01:06 +0000
Manifest next update: Wed 30 Apr 2025 22:01:06 +0000
Files and hashes: 1: G_uyP800qF9xq38CufvzcASfUJk.roa (hash: wXXcLrJ9H/mm6fOwDIgDVncWMj2oRMLhDL41bJPAtPA=)
2: r633xfgtvAsdujKChi1T7Ih9XGY.crl (hash: OzzSSUw17WZ7SdYcsb8YZYXYOej0OnYRzmLDHcQ+6/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/cd33d5-7bba-49e4-9ab0-78f6c804773d/1/r633xfgtvAsdujKChi1T7Ih9XGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/cd33d5-7bba-49e4-9ab0-78f6c804773d/1/r633xfgtvAsdujKChi1T7Ih9XGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/r633xfgtvAsdujKChi1T7Ih9XGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 22:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:91:68:50:11:55:c6:b3:20:0e:6c:43:c7:4b:d5:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afadf7c5f82dbc0b1dba3282862d53ec887d5c66
Validity
Not Before: Apr 29 22:01:06 2025 GMT
Not After : Apr 30 22:01:06 2025 GMT
Subject: CN=3eef8355ad357446f1f041eaf60ff9dccb185e36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3d:18:ca:2e:36:57:a6:39:63:98:4d:b5:a5:
df:e3:96:22:6e:b0:32:2d:bb:ef:79:20:ff:75:98:
bb:4e:60:43:aa:3a:88:53:d0:59:5c:30:23:7c:0a:
f0:3e:d7:ba:06:46:fb:1f:99:08:44:53:dc:30:5f:
67:29:73:f3:07:16:f0:4f:e6:46:af:35:b9:72:a1:
d5:86:c0:e7:6c:d1:85:02:5d:14:11:d8:a3:f0:0d:
5e:c5:e6:9f:0a:c9:67:54:bc:db:ae:51:b2:b5:c8:
c2:a3:b0:71:9e:3f:7a:a1:b4:fd:a2:9f:d9:e4:f8:
20:9b:f5:a0:2d:27:0e:9a:24:a3:19:38:75:bf:70:
68:a7:dd:29:02:ae:8d:e4:83:d2:ae:48:1f:0b:8c:
55:69:06:85:3a:b7:e5:ef:f5:e7:db:c4:55:41:19:
4c:ff:34:55:0e:aa:f4:98:31:dd:aa:fd:03:e7:d8:
5b:16:82:72:d4:48:3a:2b:d8:59:6f:1f:e9:8a:39:
00:a9:e4:f7:0b:20:86:f0:7a:b6:03:f3:cd:35:c9:
d3:0f:3c:a6:44:51:14:e2:8e:b5:bf:b0:a2:05:fe:
9c:02:05:02:fa:1f:33:88:35:ac:db:b0:95:05:e2:
5f:95:9c:d7:a2:41:5b:64:ef:57:52:93:e7:a1:5d:
11:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:EF:83:55:AD:35:74:46:F1:F0:41:EA:F6:0F:F9:DC:CB:18:5E:36
X509v3 Authority Key Identifier:
keyid:AF:AD:F7:C5:F8:2D:BC:0B:1D:BA:32:82:86:2D:53:EC:88:7D:5C:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r633xfgtvAsdujKChi1T7Ih9XGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/cd33d5-7bba-49e4-9ab0-78f6c804773d/1/r633xfgtvAsdujKChi1T7Ih9XGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/cd33d5-7bba-49e4-9ab0-78f6c804773d/1/r633xfgtvAsdujKChi1T7Ih9XGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:49:cc:26:f0:47:14:9a:5e:b0:9e:75:9d:db:38:b6:e8:a0:
ba:d8:b1:7f:ec:79:e6:75:70:fb:98:db:e5:66:7f:ef:9c:f8:
6a:47:5a:09:e7:a2:af:df:49:77:61:05:e3:1e:cb:58:af:c5:
72:97:3d:df:08:9e:ec:9f:98:52:c5:68:29:ea:98:4e:6c:f5:
60:53:a8:d9:da:38:d5:f7:92:78:a3:cd:93:13:b9:de:ca:15:
74:c5:05:f7:4e:3a:69:18:3e:51:19:16:09:c5:3f:e9:ea:ea:
21:9f:fc:5e:de:76:ed:75:16:69:61:df:bb:df:4e:98:14:bc:
c9:1a:22:d6:14:f4:47:69:b9:46:d8:0d:8f:9f:a1:4a:cc:2b:
1d:2d:15:e0:36:05:7e:66:63:50:ee:92:6f:f9:48:c9:b4:95:
04:87:1f:62:0f:40:bc:57:61:24:13:8b:cc:09:ec:63:95:44:
28:c4:61:72:87:7f:a5:eb:41:71:a8:7a:d2:cc:85:27:5a:f6:
14:e8:c8:dd:ab:54:8d:82:e8:ab:80:36:25:fe:34:da:46:2f:
8a:a3:b5:db:e2:32:ac:98:52:a3:f8:25:9c:64:9f:ce:78:b2:
b4:81:55:aa:0c:5a:d7:fa:98:45:b7:50:aa:05:e9:ba:90:7a:
8a:c8:c5:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:17:41 2025 by rpki-client