Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.mft
File: 704eplKHok4gxmO1FhwVE_AMio0.mft (raw, json)
Hash identifier: XNz+7YSZrzRt/aO/zzSgMjE9zImLdR0/BDupyeUHyTo=
Subject key identifier: 8D:BA:65:70:CB:68:F8:D3:8A:2E:A6:C1:57:2F:E8:64:DA:F4:41:12
Authority key identifier: EF:4E:1E:A6:52:87:A2:4E:20:C6:63:B5:16:1C:15:13:F0:0C:8A:8D
Certificate issuer: /CN=ef4e1ea65287a24e20c663b5161c1513f00c8a8d
Certificate serial: 0196B0A112AE28DC8484D326A6C473408DCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/704eplKHok4gxmO1FhwVE_AMio0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.mft
Manifest number: 0443
Signing time: Thu 08 May 2025 16:01:08 +0000
Manifest this update: Thu 08 May 2025 16:01:08 +0000
Manifest next update: Fri 09 May 2025 16:01:08 +0000
Files and hashes: 1: 1-x-3ccNzP71eAFgXPav3YRKbPc0.roa (hash: gcNVzNBHfGC67t/xgrOBlYz2dVPSnS4yGm9+O2azC54=)
2: 704eplKHok4gxmO1FhwVE_AMio0.crl (hash: e1kQDcOu6iFHSVasVB3lJfX2ljsVKRnOner+yrR1+EQ=)
3: J5QgCxKNKik7O15LPyeeQADYm_g.roa (hash: R0sIPZo3mElg4IM+t4du68+jxxhuTbAlvWncgQxpH3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.mft
rsync://rpki.ripe.net/repository/DEFAULT/704eplKHok4gxmO1FhwVE_AMio0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 15:42:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b0:a1:12:ae:28:dc:84:84:d3:26:a6:c4:73:40:8d:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef4e1ea65287a24e20c663b5161c1513f00c8a8d
Validity
Not Before: May 8 16:01:08 2025 GMT
Not After : May 9 16:01:08 2025 GMT
Subject: CN=8dba6570cb68f8d38a2ea6c1572fe864daf44112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:49:4f:28:49:12:e7:c7:a2:f9:8d:d3:7c:82:
7d:59:49:d5:c7:81:14:69:75:9e:c4:e0:db:d8:22:
d5:c8:95:5e:36:f3:6e:00:f3:c3:c1:6b:97:19:32:
ad:4a:56:c3:04:93:d4:9a:1d:ee:54:12:c2:38:4b:
53:26:e2:11:5e:fa:24:d3:40:4b:b0:f0:01:01:12:
dd:00:f1:1a:07:77:dc:d8:d6:c7:00:2f:4e:74:28:
e1:96:37:04:b4:59:e7:bc:77:82:ae:7f:94:00:82:
93:ad:25:dc:d3:c2:77:36:ca:d2:e3:9f:f7:c5:b5:
38:3d:a4:a6:2a:2f:f5:46:4d:82:d2:e1:f7:c0:26:
07:a4:43:bf:f4:f1:30:d7:6b:45:b9:5e:aa:fc:0e:
ab:7d:0d:3e:97:3a:50:b2:c9:3a:66:f8:66:e3:7b:
b5:98:06:b5:9a:c3:e8:c6:c4:2e:a0:41:e1:c9:31:
81:d2:ec:e8:c0:21:69:d9:7f:9c:fa:c8:f6:c6:73:
87:22:37:bf:af:00:e4:eb:c7:9f:85:af:e5:4e:6b:
18:73:d8:8e:45:67:6e:99:51:f1:6f:c1:b1:79:66:
a9:8f:30:2c:04:ff:de:cb:aa:95:06:89:2a:ed:a6:
41:c4:e0:23:54:0f:7c:91:f6:cf:23:06:b7:26:82:
34:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:BA:65:70:CB:68:F8:D3:8A:2E:A6:C1:57:2F:E8:64:DA:F4:41:12
X509v3 Authority Key Identifier:
keyid:EF:4E:1E:A6:52:87:A2:4E:20:C6:63:B5:16:1C:15:13:F0:0C:8A:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/704eplKHok4gxmO1FhwVE_AMio0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:10:6e:e1:6b:34:f3:9f:44:00:d1:a6:de:02:72:a0:b4:28:
98:95:7e:6b:d2:ae:ce:f9:cd:e4:7d:d3:69:84:20:cf:a6:23:
ab:59:33:51:0a:0d:ac:1f:00:6b:b1:ee:ab:2c:9c:46:2b:74:
a5:3b:c3:3c:5d:85:d8:f6:7e:a3:ea:04:70:0e:c2:18:0a:82:
04:03:80:d2:05:ea:6c:5b:7b:f8:d5:d9:18:b8:9e:3f:08:43:
cb:41:30:0f:a2:8b:67:69:ad:91:39:2d:46:6d:e1:42:f3:7a:
81:74:a9:26:b0:90:07:b5:be:40:3a:7e:b7:54:83:df:d7:a6:
00:ba:f6:6c:8d:0b:ab:7d:88:ed:44:5e:9d:73:66:ca:8e:d7:
8d:2a:1a:5d:7e:1c:8c:01:ef:a3:34:a8:96:1d:a3:44:14:e0:
ff:2b:fb:d3:98:b4:f0:c1:32:0f:6e:b6:4c:d1:a9:05:1e:c0:
7d:cd:e5:d3:20:d8:7e:cb:17:ff:fd:48:22:62:51:a2:58:48:
e3:c8:d9:b8:42:31:6d:22:c7:52:b0:6d:db:66:68:53:14:28:
fa:a9:7f:5b:75:6c:28:a9:de:a1:ca:2f:cb:5b:52:bf:3a:a3:
3b:29:bb:38:95:60:3d:78:c0:d6:5e:e5:c4:a9:0e:95:5c:4b:
c6:5b:f0:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 22:22:59 2025 by rpki-client