Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/129a5b-b7f6-49d0-95c2-12f9cb0a2118/1/iDa9j605PlExoCNykxWzVgFOZjc.mft
File: iDa9j605PlExoCNykxWzVgFOZjc.mft (raw, json)
Hash identifier: oVqhDo1ZT+Y6rvt6u0QFpfum91lyAsoroqdw5wZJmVs=
Subject key identifier: A7:87:32:72:62:8A:95:14:F9:ED:31:EE:A1:6E:5D:B7:93:76:81:8E
Authority key identifier: 88:36:BD:8F:AD:39:3E:51:31:A0:23:72:93:15:B3:56:01:4E:66:37
Certificate issuer: /CN=8836bd8fad393e5131a023729315b356014e6637
Certificate serial: 01967CEA04E617636470ACF66739F3A1AADF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iDa9j605PlExoCNykxWzVgFOZjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/129a5b-b7f6-49d0-95c2-12f9cb0a2118/1/iDa9j605PlExoCNykxWzVgFOZjc.mft
Manifest number: 1512
Signing time: Mon 28 Apr 2025 15:00:33 +0000
Manifest this update: Mon 28 Apr 2025 15:00:33 +0000
Manifest next update: Tue 29 Apr 2025 15:00:33 +0000
Files and hashes: 1: UKX34TFCd0figIbF32wm6M0tdxE.roa (hash: BFLvjvBRECITaOdgL/U7OU6npGQVInzdalw4vhrK37A=)
2: iDa9j605PlExoCNykxWzVgFOZjc.crl (hash: YJvk8EeftPBwL0XTemIl5xmR/w+h4ASm3F2C+p/Xg/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/129a5b-b7f6-49d0-95c2-12f9cb0a2118/1/iDa9j605PlExoCNykxWzVgFOZjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/129a5b-b7f6-49d0-95c2-12f9cb0a2118/1/iDa9j605PlExoCNykxWzVgFOZjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iDa9j605PlExoCNykxWzVgFOZjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:ea:04:e6:17:63:64:70:ac:f6:67:39:f3:a1:aa:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8836bd8fad393e5131a023729315b356014e6637
Validity
Not Before: Apr 28 15:00:33 2025 GMT
Not After : Apr 29 15:00:33 2025 GMT
Subject: CN=a7873272628a9514f9ed31eea16e5db79376818e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7b:41:67:30:b3:f0:3a:52:6d:1b:41:02:0f:
20:7d:e4:3e:71:80:09:2d:c2:89:42:ec:a3:51:76:
0d:76:8e:e5:c0:a2:19:8f:bc:a5:24:88:ea:00:16:
d4:e5:f5:82:7e:4e:41:49:8b:8e:51:ec:4c:93:8d:
1c:65:25:56:c6:00:6d:28:2c:89:b1:78:f0:a8:ca:
cb:94:5e:dd:3c:49:4b:86:44:a3:3b:b5:08:14:cf:
44:6f:4e:ce:1b:29:56:c5:50:03:67:eb:dd:0b:6a:
6d:c2:de:d4:71:26:6e:fd:be:71:e4:fb:21:39:fe:
9f:fb:a8:8e:65:fa:c2:76:ec:75:8a:24:85:d2:a4:
dc:19:0b:7d:b6:00:29:67:92:93:e5:5d:d7:99:3f:
5e:0a:53:d0:68:ea:c1:d9:8d:58:8f:d3:da:8f:51:
12:70:4c:b5:62:c6:71:b2:8b:09:2c:ef:60:c6:a7:
2a:ec:40:98:cd:a0:24:a7:00:c6:5b:a5:73:64:31:
ca:3b:5c:45:5f:5e:f7:4a:c9:2a:07:29:1e:e0:10:
20:93:d1:6d:9d:04:4b:5d:1c:35:16:e4:f2:bf:b2:
d8:5d:b8:59:7c:d0:f5:29:34:d1:ad:23:c0:c5:76:
f1:ea:83:a7:57:29:e3:29:73:7b:f5:1f:b3:53:e6:
f1:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:87:32:72:62:8A:95:14:F9:ED:31:EE:A1:6E:5D:B7:93:76:81:8E
X509v3 Authority Key Identifier:
keyid:88:36:BD:8F:AD:39:3E:51:31:A0:23:72:93:15:B3:56:01:4E:66:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDa9j605PlExoCNykxWzVgFOZjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/129a5b-b7f6-49d0-95c2-12f9cb0a2118/1/iDa9j605PlExoCNykxWzVgFOZjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/129a5b-b7f6-49d0-95c2-12f9cb0a2118/1/iDa9j605PlExoCNykxWzVgFOZjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:ec:02:63:f0:fb:6a:cf:1c:58:2f:3d:48:ad:04:ff:eb:7f:
66:10:a5:a9:6d:35:ab:bb:90:7b:e1:83:67:d0:5a:74:ab:d0:
72:b6:6f:43:7e:c7:29:5e:54:19:21:7b:92:76:aa:61:7d:b8:
fb:7e:a0:b8:e3:27:22:3c:47:97:cd:00:cc:53:56:04:6d:4e:
34:3e:d6:59:c7:a4:13:79:44:64:f8:af:bb:bd:c4:6c:7b:9a:
af:06:50:4e:ba:8e:42:dd:f4:ae:ba:3a:8b:a1:46:38:3d:f2:
78:f9:b0:a6:1a:8d:12:c8:cd:10:02:a3:2f:25:9d:7e:35:d2:
25:b1:fe:40:12:e2:c7:da:13:6d:28:d5:68:3b:e6:9a:0c:4a:
d7:16:bb:e1:71:3b:7e:41:79:17:a7:ba:0d:75:0d:3a:a7:d0:
9f:3e:71:df:c6:26:88:7a:e0:4f:d0:37:52:ac:49:16:6f:4b:
da:00:02:fc:e3:38:d2:34:e2:b5:2c:00:d7:d6:73:d4:80:e4:
8f:22:5d:4d:f9:c9:c8:fd:5a:17:74:a0:f3:52:68:f5:fa:25:
d0:74:b4:ee:58:9f:d5:6d:df:6b:8b:da:f5:8e:b7:8e:43:fb:
d1:3c:5f:e0:b4:83:ee:bc:07:49:26:ca:e8:d9:7d:da:0a:7d:
55:99:24:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:35:27 2025 by rpki-client