Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.mft
File: sVXa3bhxudalPNa0f3diUIN_d3Q.mft (raw, json)
Hash identifier: x//W3xOH3stIOb8mj7aG4XKbn/4q11jAf308qy3zLnw=
Subject key identifier: AF:5D:85:42:D5:57:9A:5F:E0:B3:87:45:D6:B8:C3:41:78:BF:09:00
Authority key identifier: B1:55:DA:DD:B8:71:B9:D6:A5:3C:D6:B4:7F:77:62:50:83:7F:77:74
Certificate issuer: /CN=b155daddb871b9d6a53cd6b47f776250837f7774
Certificate serial: 019676E82442E376AFB983341B5215F61C1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.mft
Manifest number: 0F9C
Signing time: Sun 27 Apr 2025 11:00:47 +0000
Manifest this update: Sun 27 Apr 2025 11:00:47 +0000
Manifest next update: Mon 28 Apr 2025 11:00:47 +0000
Files and hashes: 1: SEy_q8yasarL4vhAyv6DcTF7WB8.roa (hash: B1SRh1WwCZtBHMAKkgvifQJ/iJUggGCgGgLLkNss5Nw=)
2: ahvH7VwsREz5RE_ZFd3kIxelgEQ.roa (hash: udwWfKom+EbN8jk91UYE1hrtLtfJILvdv1JBZTIFT0w=)
3: qFzA_pZ_xGWwQzfJMInzfWDKkuQ.roa (hash: 9OvJ6Tjvc0ybgSO+B/2T4VgdwfSjKx3tRoZuZYIdcTc=)
4: sVXa3bhxudalPNa0f3diUIN_d3Q.crl (hash: 93yyTUjQ2QTKFxdxDAS+VRGxjazsovI7vNDXg4u90bU=)
5: wZzuntLr1Qz8EEQrI8gaxN9PJzk.roa (hash: /amIoY3uoWrTi9ErwL/m7gwpV0plV6uE2N5Muk44yLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:e8:24:42:e3:76:af:b9:83:34:1b:52:15:f6:1c:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155daddb871b9d6a53cd6b47f776250837f7774
Validity
Not Before: Apr 27 11:00:47 2025 GMT
Not After : Apr 28 11:00:47 2025 GMT
Subject: CN=af5d8542d5579a5fe0b38745d6b8c34178bf0900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:39:fd:fd:5e:d7:3a:05:c9:55:d3:92:41:4b:
dc:a5:e4:31:5b:00:26:ad:fb:d0:42:8a:d6:33:15:
60:fd:42:1d:d6:6a:55:a1:f8:28:f4:5a:ee:6c:66:
c3:11:52:e3:11:dc:3f:b5:a5:4b:dc:cf:73:5d:da:
eb:4c:7d:84:a6:ac:67:83:7c:09:af:f2:76:c7:2c:
c7:23:d8:6d:66:1a:53:ef:aa:1a:85:15:3f:ce:a7:
a4:d3:02:20:d7:e6:d0:8f:1e:fa:e5:7e:20:f6:8d:
54:6a:69:f4:6c:76:17:1b:57:d0:34:6d:f5:43:b9:
17:c0:b2:d2:a6:9b:36:c7:03:d7:3e:72:47:18:09:
2f:31:ae:3d:47:23:11:49:e1:87:98:c6:0c:c7:9c:
71:f0:1e:79:85:a0:91:b8:e1:b5:30:3c:e0:fc:f5:
22:cc:22:bb:33:2f:45:c4:76:d2:76:32:a4:6a:f2:
83:02:f2:99:77:d8:d5:1c:9b:a4:1e:19:68:7c:30:
78:29:e5:06:40:74:07:5a:a2:ab:bb:36:aa:93:9a:
27:e4:92:f8:61:52:68:0c:7b:96:12:5a:e7:6d:c0:
66:f4:4c:d7:0b:12:64:ac:59:09:c8:a7:0e:e3:96:
95:b6:39:03:7b:12:27:f7:bc:9c:9b:33:4f:b4:b2:
7a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:5D:85:42:D5:57:9A:5F:E0:B3:87:45:D6:B8:C3:41:78:BF:09:00
X509v3 Authority Key Identifier:
keyid:B1:55:DA:DD:B8:71:B9:D6:A5:3C:D6:B4:7F:77:62:50:83:7F:77:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:d0:4e:b1:51:eb:8a:8a:8d:1b:b4:3f:9e:e9:58:44:17:6f:
aa:49:e3:d0:fc:0c:2f:38:3b:99:02:d5:1f:f3:9d:6d:82:4e:
02:85:20:72:e4:22:ec:5b:29:96:53:be:fc:08:f5:bf:cc:36:
fc:3f:d9:d4:71:7e:25:b4:d3:10:e9:e9:f4:54:17:20:0c:2b:
e5:f8:b6:ef:8f:0c:77:1a:9c:c1:5a:a7:fb:ba:44:24:7e:47:
3a:f3:8b:29:be:1f:e0:26:10:cf:9c:4d:d3:3c:71:4a:d4:2b:
95:5d:10:16:e8:72:83:49:85:8d:66:40:3a:ee:86:b6:fe:f9:
8c:24:63:27:80:b9:32:bb:36:98:02:fc:0e:eb:52:c8:ca:e3:
0e:58:49:0b:f0:b1:e1:35:a8:17:10:6b:3f:93:8f:69:69:8a:
43:88:22:db:a4:b5:a4:e0:7d:5b:8a:66:bd:58:7f:03:20:14:
c3:58:82:41:49:cf:e9:60:2c:2e:27:dc:12:d1:4f:9f:12:11:
57:b4:74:7b:ac:f0:c5:14:e0:fb:c1:e4:6c:76:71:c3:28:79:
12:75:67:24:ce:00:95:da:75:3f:e3:d1:9f:53:be:e2:6b:7a:
2e:b8:03:bc:0a:84:16:34:c7:51:43:dd:4e:f5:b2:e9:ab:03:
fa:f7:8d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:50:18 2025 by rpki-client