Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
File: rIpp7LeHzOmJLcZUgEY_sIi2E98.mft (raw, json)
Hash identifier: U6zXGBX8UjID0CQ/v9b8GeiZJG74JGHAZyeLSDOJzXk=
Subject key identifier: 21:FC:02:E7:3B:01:F6:DA:D6:39:99:12:CD:72:F0:B7:35:17:4D:05
Authority key identifier: AC:8A:69:EC:B7:87:CC:E9:89:2D:C6:54:80:46:3F:B0:88:B6:13:DF
Certificate issuer: /CN=ac8a69ecb787cce9892dc65480463fb088b613df
Certificate serial: 01969ED10098AA184F718F5973E544FDEFCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rIpp7LeHzOmJLcZUgEY_sIi2E98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
Manifest number: 1526
Signing time: Mon 05 May 2025 05:00:19 +0000
Manifest this update: Mon 05 May 2025 05:00:19 +0000
Manifest next update: Tue 06 May 2025 05:00:19 +0000
Files and hashes: 1: 697cAJc5ww3rq8-l1VuLwBpxIdc.roa (hash: btaRkUjrugna/WWsgPD4k728P+M+Z1FNlrq9vxtZCME=)
2: DaeyFZIVOpaKJnrrdp8I8XkKfsw.roa (hash: K2abCfRZZHcX+YntqkfA1f/D7lChaJuQZeWDdJ7QE9s=)
3: rIpp7LeHzOmJLcZUgEY_sIi2E98.crl (hash: bMf7LFohlWvbpLYo1qGdBxlx2lNKaB7YkEU9QZI+vaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
rsync://rpki.ripe.net/repository/DEFAULT/rIpp7LeHzOmJLcZUgEY_sIi2E98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:d1:00:98:aa:18:4f:71:8f:59:73:e5:44:fd:ef:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac8a69ecb787cce9892dc65480463fb088b613df
Validity
Not Before: May 5 05:00:19 2025 GMT
Not After : May 6 05:00:19 2025 GMT
Subject: CN=21fc02e73b01f6dad6399912cd72f0b735174d05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:1d:a5:4b:2a:f2:13:5f:b0:2b:24:3f:a5:80:
ac:4c:35:29:c2:a8:68:07:fa:c7:36:ac:36:59:b5:
ba:00:98:b9:de:b7:51:3e:ff:7c:ad:26:e6:71:ff:
63:d1:95:14:f9:5e:0c:18:5d:9a:cb:6c:ab:33:0e:
40:8b:a5:8f:e3:2d:40:6e:8a:d5:e2:24:01:6c:11:
63:e3:3b:1b:d5:55:61:ce:7b:7e:e1:1c:79:22:72:
7d:29:43:c6:f1:d2:73:ec:57:bc:45:b2:24:14:66:
d3:64:5a:44:75:56:52:84:21:bd:8f:9b:79:da:e9:
fd:63:18:b3:f9:cd:29:ad:c6:3c:80:af:97:48:1e:
20:eb:24:17:56:3d:d2:3b:cb:60:b9:ca:f2:6c:87:
03:c0:fb:d4:ac:22:60:81:a0:2e:b8:04:54:c5:bb:
b5:ab:fe:c9:cc:dc:fe:90:78:a1:7e:a8:b3:53:66:
00:e1:d2:05:bd:98:f0:87:35:e4:0f:45:83:2b:b9:
5d:6d:ec:ad:d0:ed:f1:60:f3:87:a3:70:ab:31:ca:
6c:ed:af:eb:57:ca:fd:8c:a3:07:19:8c:89:cc:14:
c1:8c:cd:5d:ff:6a:d5:11:a7:71:46:d9:65:98:c2:
39:7f:f6:11:bc:f6:d0:13:ba:78:95:16:0c:af:af:
d7:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:FC:02:E7:3B:01:F6:DA:D6:39:99:12:CD:72:F0:B7:35:17:4D:05
X509v3 Authority Key Identifier:
keyid:AC:8A:69:EC:B7:87:CC:E9:89:2D:C6:54:80:46:3F:B0:88:B6:13:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rIpp7LeHzOmJLcZUgEY_sIi2E98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:a0:19:cc:1d:60:68:8b:b1:2a:2f:94:2f:3c:a1:b3:df:22:
ba:26:d4:f7:3e:fa:30:62:d8:18:38:1c:80:bb:e7:71:29:d2:
bc:8f:0e:93:99:43:f1:a7:37:c3:f1:53:11:8e:b4:02:56:5e:
b1:60:1e:ee:73:26:37:f9:f6:2c:fa:99:08:10:8f:9d:2f:a6:
67:d1:fd:76:70:5b:19:ef:02:9b:f2:5f:c7:88:85:fa:19:82:
24:3f:95:ee:25:d7:97:14:d7:be:c6:e3:93:6a:90:4a:e5:e5:
44:ef:ac:53:1f:ce:10:d9:a4:26:36:6e:d1:5f:63:4b:1a:3a:
ee:c2:55:da:c6:cb:25:34:ff:22:da:74:f5:2b:3c:6c:6f:e7:
b0:ab:67:f1:a0:a3:25:b9:e9:43:64:95:65:12:55:07:80:4c:
ff:9e:e0:ae:f1:4c:e7:80:04:6b:2c:2a:7c:ae:05:aa:12:b0:
e4:c2:1b:93:4b:ff:be:cc:61:34:04:34:9a:74:db:ec:1b:83:
50:c0:a1:1e:d1:78:fd:16:3a:73:72:60:e0:8b:d2:16:16:57:
cc:d3:9d:f3:8c:7d:ae:0e:62:7a:62:08:4c:5f:e6:20:9d:4a:
71:e2:4b:af:96:c3:5c:ce:69:3a:84:97:64:f3:6e:15:54:e0:
07:da:49:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 07:48:59 2025 by rpki-client