Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft
File: R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft (raw, json)
Hash identifier: QXM3kqaCpnJC9mPBpjHxDVC2N7Scynwr4doq0/NmYbE=
Subject key identifier: F6:7C:10:24:39:39:0D:2A:6C:84:74:0B:78:ED:0E:9E:8E:17:C1:20
Authority key identifier: 47:8D:24:89:8D:1C:F5:2D:23:F9:56:1D:C6:AC:0F:13:63:E6:C7:60
Certificate issuer: /CN=478d24898d1cf52d23f9561dc6ac0f1363e6c760
Certificate serial: 01967567896FADD2F7FE77DFF7AE9B03A393
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R40kiY0c9S0j-VYdxqwPE2Pmx2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft
Manifest number: 1510
Signing time: Sun 27 Apr 2025 04:00:41 +0000
Manifest this update: Sun 27 Apr 2025 04:00:41 +0000
Manifest next update: Mon 28 Apr 2025 04:00:41 +0000
Files and hashes: 1: 3SOTukwSWrR1Nu1I7c8QHUHDj5Q.roa (hash: 4YWkgAQs57y3jWp09RgMoPwSBLEZe+2Hmh3qEftE0D8=)
2: R40kiY0c9S0j-VYdxqwPE2Pmx2A.crl (hash: lVG1InSg9G4qregc9m55o1eNmGH73FcEW//gjULGmOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/R40kiY0c9S0j-VYdxqwPE2Pmx2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 04:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:67:89:6f:ad:d2:f7:fe:77:df:f7:ae:9b:03:a3:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=478d24898d1cf52d23f9561dc6ac0f1363e6c760
Validity
Not Before: Apr 27 04:00:41 2025 GMT
Not After : Apr 28 04:00:41 2025 GMT
Subject: CN=f67c102439390d2a6c84740b78ed0e9e8e17c120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:16:b4:67:a5:8b:f1:5b:30:b4:88:4c:5f:1a:
d2:88:c3:92:65:9d:28:73:3d:d2:cb:e7:03:3f:6d:
b9:d6:c3:16:ed:c4:5f:b8:78:07:95:fb:2b:d2:7e:
88:be:2e:7b:d5:17:be:12:cf:3d:bc:4a:62:05:94:
cb:f0:f9:a7:a4:fe:d1:6c:15:f1:ff:b4:98:68:5d:
b6:53:2f:b1:e2:f1:be:8d:61:43:47:63:08:7f:90:
7e:00:08:1b:11:b3:63:36:65:8d:a1:01:af:6b:3e:
0c:0d:49:14:3d:9e:57:d5:7e:2f:56:3f:43:3d:70:
98:99:f2:64:5e:7d:82:7f:53:0a:e4:9a:22:b1:bc:
07:68:6d:44:2b:58:2e:90:ae:01:3d:bd:ed:83:39:
5e:9b:b0:fb:bf:a4:1d:51:9b:11:0f:38:4f:18:15:
d2:4e:fb:43:1d:50:0f:c0:a9:2e:96:15:a3:47:3c:
42:10:19:c5:72:c4:bd:88:a1:a9:83:7e:d2:f1:ab:
91:ba:f7:11:41:04:c9:aa:6a:3c:a0:95:5e:52:bf:
f1:47:12:c4:7c:d4:1e:0f:fe:b1:b6:21:84:fe:e4:
71:9c:e0:6d:27:f9:87:09:d4:eb:1f:73:56:ef:e7:
6c:8e:bc:4c:ca:83:47:83:2a:b9:21:fe:e7:43:0d:
a6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:7C:10:24:39:39:0D:2A:6C:84:74:0B:78:ED:0E:9E:8E:17:C1:20
X509v3 Authority Key Identifier:
keyid:47:8D:24:89:8D:1C:F5:2D:23:F9:56:1D:C6:AC:0F:13:63:E6:C7:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R40kiY0c9S0j-VYdxqwPE2Pmx2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:98:26:c0:2b:e3:8a:7d:ac:2f:10:42:7c:8d:17:61:13:ef:
9b:ab:dd:5f:5a:f6:bb:5a:d9:11:c6:f8:fb:00:ea:ea:e2:16:
be:dc:66:0c:7f:e9:40:56:9a:4f:bd:21:08:61:bc:c4:50:14:
2f:32:06:40:df:21:05:7b:f2:4e:53:e0:db:57:00:7a:48:d0:
20:bb:e7:a7:ac:79:54:8e:57:7a:20:a8:72:86:00:cd:a5:c6:
15:c1:66:f3:aa:3a:19:8e:a0:d6:59:3d:45:87:ad:f9:a4:cc:
a0:5a:8b:21:f2:45:e7:fc:cf:90:bc:20:ce:93:9b:52:b5:f8:
da:33:8e:68:4e:e1:25:13:08:a7:4a:75:eb:a3:ee:63:ec:02:
e1:fc:16:64:58:0b:27:ec:2f:99:d5:62:6c:40:05:30:07:57:
92:99:3f:27:cb:c0:96:ce:11:d4:23:c9:37:a5:26:3e:db:50:
7d:eb:ad:3a:4a:6b:3d:54:93:b3:1a:56:67:b9:c0:11:cf:71:
eb:ee:93:8a:e0:2b:69:ba:dd:64:0f:d2:59:89:a6:08:0f:bb:
11:48:4b:27:87:41:93:8f:7b:e4:13:d8:b9:20:8a:ea:d9:0e:
9f:02:d5:d5:4e:19:ee:de:1d:f7:09:51:da:07:61:29:00:21:
68:a4:cc:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:37:20 2025 by rpki-client