Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/lN7qVibZ6DJkDx7N9_i7clckCEc.mft
File: lN7qVibZ6DJkDx7N9_i7clckCEc.mft (raw, json)
Hash identifier: eaQ6wkRpd4sKkXJ9z/g66TtHT9t1t8Bm7U0wlY9iuU8=
Subject key identifier: 46:51:FE:0E:C2:0D:B0:F9:C1:B6:56:59:EB:C0:4A:BE:BF:E4:E3:06
Authority key identifier: 94:DE:EA:56:26:D9:E8:32:64:0F:1E:CD:F7:F8:BB:72:57:24:08:47
Certificate issuer: /CN=94deea5626d9e832640f1ecdf7f8bb7257240847
Certificate serial: 019675D5792BEC4A4D85F1A41759F931A998
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lN7qVibZ6DJkDx7N9_i7clckCEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/lN7qVibZ6DJkDx7N9_i7clckCEc.mft
Manifest number: 0A03
Signing time: Sun 27 Apr 2025 06:00:46 +0000
Manifest this update: Sun 27 Apr 2025 06:00:46 +0000
Manifest next update: Mon 28 Apr 2025 06:00:46 +0000
Files and hashes: 1: cJPUTKGhm9-SQMKgHrLgVtONres.roa (hash: YPKASk/Rrx47xThFCgmIxwpwkFMGL6Ambuvld828dUQ=)
2: lN7qVibZ6DJkDx7N9_i7clckCEc.crl (hash: PzRy4VFq0xGmg+Xf+kDxJvSm39HStxJV/IuMIpwvDgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/lN7qVibZ6DJkDx7N9_i7clckCEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/lN7qVibZ6DJkDx7N9_i7clckCEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/lN7qVibZ6DJkDx7N9_i7clckCEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:d5:79:2b:ec:4a:4d:85:f1:a4:17:59:f9:31:a9:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94deea5626d9e832640f1ecdf7f8bb7257240847
Validity
Not Before: Apr 27 06:00:46 2025 GMT
Not After : Apr 28 06:00:46 2025 GMT
Subject: CN=4651fe0ec20db0f9c1b65659ebc04abebfe4e306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c5:ff:32:ad:2e:0a:f9:e6:36:96:5d:f9:69:
33:01:39:4f:73:22:2d:cc:ca:b3:db:d8:74:19:02:
7f:0e:c2:3e:5f:3b:0c:be:89:ab:42:2e:8b:49:8a:
62:af:a7:e6:b4:10:95:39:85:b7:54:de:9b:ce:19:
40:be:1d:9f:e4:ee:73:e7:a9:23:3c:1d:fe:3a:cf:
4e:1c:8a:88:8c:a5:de:1e:30:bd:a8:97:da:9a:57:
42:1f:e5:b7:b5:25:37:88:ad:b8:73:2a:77:d2:a3:
af:e4:ae:30:79:84:e4:89:ab:45:9e:1d:99:0f:ae:
5f:c6:63:0a:dd:35:4c:00:41:d0:40:bd:f7:57:1e:
03:e9:09:dd:01:5b:bb:63:43:24:18:70:f5:c5:9d:
fe:11:39:b3:54:3c:09:28:69:ab:dd:c6:59:03:3a:
20:78:ae:b7:51:77:5c:79:0d:04:be:d5:e2:fa:85:
cd:a9:1d:15:31:f4:0c:46:e7:70:45:86:8c:49:31:
e2:c8:19:9e:00:39:15:cc:50:67:a7:b7:24:a8:24:
b6:12:dc:f6:70:1d:19:f3:eb:9c:a2:e6:76:51:3e:
75:a9:c4:48:b6:18:56:dd:b9:04:db:b9:6b:6a:67:
da:ce:20:77:e6:33:12:91:7d:2c:8c:27:5f:02:37:
35:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:51:FE:0E:C2:0D:B0:F9:C1:B6:56:59:EB:C0:4A:BE:BF:E4:E3:06
X509v3 Authority Key Identifier:
keyid:94:DE:EA:56:26:D9:E8:32:64:0F:1E:CD:F7:F8:BB:72:57:24:08:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lN7qVibZ6DJkDx7N9_i7clckCEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/lN7qVibZ6DJkDx7N9_i7clckCEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/lN7qVibZ6DJkDx7N9_i7clckCEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:4f:91:ea:a2:df:0c:cd:c7:f4:b7:d2:e4:cd:75:ff:73:b3:
3a:b1:01:44:4a:ed:44:84:5b:00:f9:78:39:4d:60:06:cc:74:
49:19:d3:dd:e9:bc:b3:f3:0c:c5:92:74:6f:a6:8d:ae:30:3e:
1b:57:cd:5b:11:c3:af:d6:64:1a:8d:a9:91:5e:41:9d:76:18:
84:b8:36:b3:32:b0:6f:f2:d9:8b:c7:10:d0:79:00:9f:43:52:
92:0e:1b:e7:01:22:43:ed:8c:5a:b8:ab:ff:85:ca:a3:73:1c:
44:1d:af:f9:cd:7c:93:a2:68:a8:fa:cc:17:e6:ad:50:f7:3b:
23:03:21:cf:34:8c:87:02:c9:21:57:95:d2:be:44:c1:78:16:
74:7a:da:6e:65:88:c4:98:8c:4a:6f:32:1e:60:7c:e2:5d:20:
d2:5a:4d:88:77:bd:f3:4c:10:f3:11:5d:a7:c4:e6:76:01:99:
66:d9:31:8d:d4:51:9b:bf:ae:22:9b:66:2e:b2:2e:d1:8e:fc:
37:84:f7:61:e3:87:3b:43:6c:c5:d9:17:2f:c9:a0:75:62:57:
a8:30:2b:2e:7a:7f:ab:8b:e0:e8:8e:cc:d8:c0:a5:48:ee:ca:
4b:66:ac:86:57:f2:06:7b:24:e5:b9:9f:e7:3e:4c:00:a3:62:
ac:53:fd:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:37:29 2025 by rpki-client