Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.mft
File: DEd6vwon7eiG-8QkE9eonCJrEfo.mft (raw, json)
Hash identifier: 580oCJM4aUF3cIueJ65hWk8M+DiCRTelbxh6L5nI7Eg=
Subject key identifier: 96:10:E9:51:1B:F6:7A:0D:91:5E:AB:16:5C:D9:99:5A:BE:C3:99:44
Authority key identifier: 0C:47:7A:BF:0A:27:ED:E8:86:FB:C4:24:13:D7:A8:9C:22:6B:11:FA
Certificate issuer: /CN=0c477abf0a27ede886fbc42413d7a89c226b11fa
Certificate serial: 01967D20EAF898692A1780120F09F081AE38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DEd6vwon7eiG-8QkE9eonCJrEfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.mft
Manifest number: 1229
Signing time: Mon 28 Apr 2025 16:00:31 +0000
Manifest this update: Mon 28 Apr 2025 16:00:31 +0000
Manifest next update: Tue 29 Apr 2025 16:00:31 +0000
Files and hashes: 1: DEd6vwon7eiG-8QkE9eonCJrEfo.crl (hash: 73IIBzjYSRJi6k7NhpryJFzgn7LYSuc6xIl+7UCby9g=)
2: MYyuhG97imzI5Pm1fkTfDLbKlzY.roa (hash: k660F4i2QJei9j4+uwjYRvwDfAYznP8Ua/OgE2wvOJU=)
3: hHJHjw71kMqAy3nNekCDF8-fv6E.roa (hash: fFUGKJTKX7mKwkHmDQYrtXQn9GbWgqgB8AHbXkjZidU=)
4: r4VU_uNqDC_tYxTm1Z-aicTmAoU.roa (hash: GEBOWS5Nmk+ZdCwQMB5B+9yuw+vJ1/5swydSImIPrxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DEd6vwon7eiG-8QkE9eonCJrEfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:20:ea:f8:98:69:2a:17:80:12:0f:09:f0:81:ae:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c477abf0a27ede886fbc42413d7a89c226b11fa
Validity
Not Before: Apr 28 16:00:31 2025 GMT
Not After : Apr 29 16:00:31 2025 GMT
Subject: CN=9610e9511bf67a0d915eab165cd9995abec39944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e3:b3:2d:34:6b:54:1d:25:d0:10:8d:fe:65:
94:91:dc:73:65:44:21:9e:28:fc:3a:e5:f6:56:2a:
e7:8f:0a:99:58:3c:65:93:4c:95:8f:20:90:5c:98:
5f:89:b7:d2:0a:f1:29:63:cf:32:5a:4e:43:41:26:
bf:6e:f7:83:05:49:30:62:b5:f3:d0:ab:ae:ad:c0:
99:6a:90:d2:9e:0f:26:61:d5:13:b0:9d:fa:d5:8d:
eb:24:5c:96:0d:1f:9f:58:b0:d5:fe:45:e1:a5:2b:
79:c7:85:bb:05:4a:fe:b3:96:5a:e6:a0:d2:ce:c3:
15:38:6a:ec:b6:5a:dd:39:57:95:54:1b:0c:cb:54:
d8:15:37:51:7d:96:c4:86:ec:3c:6d:bc:7b:af:3f:
67:32:13:53:37:72:c9:59:c1:9a:f2:fa:24:1f:ba:
71:3d:e4:cc:fc:4d:ec:56:61:fd:84:b8:d0:48:fc:
f9:eb:e8:68:1c:57:dd:aa:1b:5d:7b:e7:6e:5f:b3:
4d:a3:81:17:2b:fa:ff:65:5f:be:1e:98:e2:3a:a9:
ac:91:69:36:ca:a7:e6:cd:2d:6d:22:da:97:ea:9b:
d9:39:d0:b4:a2:24:77:c3:14:40:75:f6:f0:0d:ea:
ec:b8:50:bc:58:cc:98:cb:b7:99:a6:93:11:93:a1:
f0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:10:E9:51:1B:F6:7A:0D:91:5E:AB:16:5C:D9:99:5A:BE:C3:99:44
X509v3 Authority Key Identifier:
keyid:0C:47:7A:BF:0A:27:ED:E8:86:FB:C4:24:13:D7:A8:9C:22:6B:11:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DEd6vwon7eiG-8QkE9eonCJrEfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:1e:1a:24:15:11:ff:b3:9c:20:d3:51:00:83:7a:10:27:f3:
33:9f:bd:6d:4a:45:1f:b5:94:50:9a:d2:d1:7e:de:7b:b2:7d:
be:bb:d8:b2:9a:a5:f7:9c:a8:1f:46:49:11:b8:64:bc:d4:e2:
04:e3:b6:87:fb:50:67:74:17:fe:2b:c8:8f:f7:7d:48:ff:ec:
a5:b3:0a:3c:c1:51:de:90:93:6f:57:74:f0:ac:87:a8:d6:c6:
4a:f7:42:5c:ff:46:e8:e2:f2:fb:dc:fa:cc:75:43:41:4e:4f:
ca:c5:32:ee:43:39:47:c0:52:f7:18:e8:1e:d9:48:2d:dd:26:
bd:d8:70:62:21:6e:f5:f2:87:1c:8c:8a:7e:ba:73:e7:e1:09:
6c:c4:3d:87:30:23:8b:be:89:ca:4f:28:ca:a5:9e:3f:8f:05:
e3:b5:ab:fa:01:86:c4:8b:19:8d:cc:d4:bc:e1:f2:99:34:de:
fe:0d:90:87:67:12:a4:db:d4:9a:9d:23:c9:da:55:91:08:24:
d2:10:47:80:08:7f:a4:38:b7:6d:90:5d:2f:49:08:ce:80:67:
19:1c:3c:c0:f1:68:51:0b:b6:f1:50:ab:2b:ed:ad:34:56:48:
69:3b:e9:61:86:29:d9:f1:22:09:f3:ed:4a:0f:7f:64:fd:50:
9b:cd:a5:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 01:39:13 2025 by rpki-client