Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.mft
File: quRIJx2Froeamr8Vs7ypg0cKE0g.mft (raw, json)
Hash identifier: cIDXYFH2KwxQdo49hmJrAxeeqiMBQFW2yBP2O6/+t24=
Subject key identifier: 97:CD:62:41:6E:9C:6F:D8:5D:42:28:2C:5B:CC:B1:4E:7D:D9:A2:89
Authority key identifier: AA:E4:48:27:1D:85:AE:87:9A:9A:BF:15:B3:BC:A9:83:47:0A:13:48
Certificate issuer: /CN=aae448271d85ae879a9abf15b3bca983470a1348
Certificate serial: 01967AFB86AD87576C3E439DACEA412C5CE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/quRIJx2Froeamr8Vs7ypg0cKE0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.mft
Manifest number: 040D
Signing time: Mon 28 Apr 2025 06:00:26 +0000
Manifest this update: Mon 28 Apr 2025 06:00:26 +0000
Manifest next update: Tue 29 Apr 2025 06:00:26 +0000
Files and hashes: 1: cfA5700Oyp_l8HYxK2rUF9sJFNw.roa (hash: nBkOSSWEqJ7QWBbrB7ANbAxBsvt2sTitoBCV4yvlduo=)
2: quRIJx2Froeamr8Vs7ypg0cKE0g.crl (hash: 5qkI+VachsEnYVVLmtHKfVH22wE9Oa0IDrOX3Pop5zw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/quRIJx2Froeamr8Vs7ypg0cKE0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:fb:86:ad:87:57:6c:3e:43:9d:ac:ea:41:2c:5c:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aae448271d85ae879a9abf15b3bca983470a1348
Validity
Not Before: Apr 28 06:00:26 2025 GMT
Not After : Apr 29 06:00:26 2025 GMT
Subject: CN=97cd62416e9c6fd85d42282c5bccb14e7dd9a289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:66:89:46:f3:29:ce:fb:ed:c0:ab:6b:12:da:
a1:5e:70:29:c2:1b:64:58:42:4e:3e:37:e1:9c:23:
39:de:c2:bf:24:9a:66:6d:ce:c5:96:fa:f0:76:4b:
0b:d0:56:b8:5f:0e:72:2a:73:fe:15:2a:68:c9:38:
e1:d9:fd:4b:e3:c7:2a:21:9d:a2:b0:56:ac:a0:a5:
e2:c4:b4:39:4a:6e:9c:41:67:92:54:21:56:16:73:
e1:aa:f6:9f:f9:1c:f6:f6:e2:fe:9a:45:f5:c5:db:
ab:25:c3:85:85:9c:04:95:a4:5f:a4:66:b3:b4:a5:
d1:c6:a7:70:6a:ff:89:ff:60:76:d4:95:36:34:59:
bb:22:7d:2a:d7:cd:10:d7:9e:ff:8e:7b:28:42:d1:
b7:54:15:13:c2:8a:88:5e:29:63:1d:0e:5c:5b:da:
c8:dc:e7:c0:5a:19:05:3d:ff:c5:59:70:e3:be:6f:
1d:be:9b:f7:1c:f5:b1:8c:ca:2f:65:6a:e0:ea:47:
2a:9b:f8:ea:f4:1b:ac:9d:e2:cb:f9:6e:e8:d5:2c:
c6:5c:5e:87:23:d7:43:88:8b:3b:0d:49:ff:d6:d4:
f0:eb:f6:b7:3e:67:be:2d:ca:8f:63:a4:6d:d8:85:
05:15:0c:fd:2b:05:a2:45:e9:b1:1f:2b:f0:a5:44:
8a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:CD:62:41:6E:9C:6F:D8:5D:42:28:2C:5B:CC:B1:4E:7D:D9:A2:89
X509v3 Authority Key Identifier:
keyid:AA:E4:48:27:1D:85:AE:87:9A:9A:BF:15:B3:BC:A9:83:47:0A:13:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/quRIJx2Froeamr8Vs7ypg0cKE0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:22:e3:20:6c:a9:47:9c:b9:be:5d:8f:07:46:0d:82:30:f6:
a4:7f:31:89:ba:11:b4:3d:7c:a4:f7:ef:a1:92:89:4c:97:70:
90:a5:5b:6c:9b:72:db:9c:ff:f8:70:f4:6e:ee:74:36:85:76:
55:60:2e:c3:f9:94:43:3d:d8:3c:3b:f8:07:aa:94:58:38:19:
3b:6f:83:7f:59:15:6f:30:a9:29:79:7c:97:e4:18:66:8f:ad:
7f:6d:c8:d4:07:ab:6b:c4:12:44:a9:5a:b9:2d:b0:05:54:60:
cd:7c:e8:da:04:bc:b7:5a:b3:eb:e7:9f:69:4d:f9:30:cf:01:
f5:3c:a2:cc:a4:19:17:bd:f0:6a:e4:54:36:0d:df:e6:b1:4e:
62:1e:bd:03:7f:68:4d:f2:53:b5:de:11:e6:3a:c2:c8:c6:5c:
f8:f5:e9:34:69:2a:f2:1b:d3:8f:d8:18:90:37:f7:c3:0d:bf:
32:80:62:24:db:b1:34:fe:4c:22:db:39:9e:9a:cf:0a:19:33:
58:2d:4f:e8:01:30:f4:e3:66:b4:2d:41:2f:60:8b:61:58:83:
f2:83:ea:36:11:92:2d:c9:65:58:2d:45:86:34:6d:7d:69:fc:
cf:6d:6a:72:8c:35:76:9b:e2:7c:53:15:af:cc:f8:38:42:2f:
3a:25:ad:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:18:20 2025 by rpki-client