Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.mft
File: No41oF8nB7WnQcKnL15Ls0ybCag.mft (raw, json)
Hash identifier: xgBvMZJ1/+yGPVDu5EMfJ57QnCFBOJNUiDqiLdFCs3w=
Subject key identifier: 88:CB:F9:BC:9E:82:9E:09:41:7D:42:1C:5B:C0:AA:12:8F:CA:13:EB
Authority key identifier: 36:8E:35:A0:5F:27:07:B5:A7:41:C2:A7:2F:5E:4B:B3:4C:9B:09:A8
Certificate issuer: /CN=368e35a05f2707b5a741c2a72f5e4bb34c9b09a8
Certificate serial: 019679B221A133A8E56A89BA2D73A6F05C9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/No41oF8nB7WnQcKnL15Ls0ybCag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.mft
Manifest number: 150F
Signing time: Mon 28 Apr 2025 00:00:39 +0000
Manifest this update: Mon 28 Apr 2025 00:00:39 +0000
Manifest next update: Tue 29 Apr 2025 00:00:39 +0000
Files and hashes: 1: L7FYC8e89xGKnty6O1mK_Gb2H5U.roa (hash: McrAWYa182W0VDulttkCRb8Sku8UBSHS1nLFi0h9Euw=)
2: No41oF8nB7WnQcKnL15Ls0ybCag.crl (hash: Tr++iruAEk/ojFJzwXzGaKD0+wQTD1QDIg5n5y+FDsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.mft
rsync://rpki.ripe.net/repository/DEFAULT/No41oF8nB7WnQcKnL15Ls0ybCag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 00:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:b2:21:a1:33:a8:e5:6a:89:ba:2d:73:a6:f0:5c:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368e35a05f2707b5a741c2a72f5e4bb34c9b09a8
Validity
Not Before: Apr 28 00:00:39 2025 GMT
Not After : Apr 29 00:00:39 2025 GMT
Subject: CN=88cbf9bc9e829e09417d421c5bc0aa128fca13eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:78:59:53:e4:a5:0e:46:fd:7b:04:f5:b6:f8:
6a:4a:1d:b8:39:31:1d:96:89:1d:5c:8c:02:ff:f9:
5a:49:f3:88:dc:64:25:fa:dc:65:fc:03:59:a9:04:
d3:7a:d4:92:a7:a7:0d:e3:89:d7:2d:d8:7d:32:84:
74:a6:a7:38:6e:04:cd:d5:78:bd:23:fd:9a:81:73:
ec:42:ad:1b:22:a6:c1:df:f1:ad:cc:01:6e:32:ad:
e3:2b:f7:98:ab:fd:10:01:12:43:e3:3f:be:30:b7:
32:1b:77:e6:7b:6d:5c:74:9d:34:58:b5:5f:a4:a1:
cb:a0:62:c0:ed:46:33:fe:4f:5c:83:52:72:3e:39:
cc:11:88:9f:73:42:56:5d:b5:d0:45:98:79:b7:9c:
1c:11:eb:63:ae:5c:69:6d:43:b8:09:6d:6e:d0:44:
3d:5c:2b:98:68:29:ae:cb:45:5f:22:8b:2f:81:81:
a2:6e:bb:76:70:52:15:ea:58:0b:99:b4:00:55:7b:
0c:17:56:3e:02:ea:40:20:fd:d7:f3:44:db:ac:f0:
9d:04:79:92:2b:81:06:03:b6:62:89:e4:ac:9f:9c:
2f:0c:df:50:41:45:71:19:e4:b5:68:b7:c1:e1:6b:
c6:c6:24:a0:a7:4f:2e:59:ef:08:65:af:28:50:f7:
2b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:CB:F9:BC:9E:82:9E:09:41:7D:42:1C:5B:C0:AA:12:8F:CA:13:EB
X509v3 Authority Key Identifier:
keyid:36:8E:35:A0:5F:27:07:B5:A7:41:C2:A7:2F:5E:4B:B3:4C:9B:09:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/No41oF8nB7WnQcKnL15Ls0ybCag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:75:c3:9e:87:79:6f:4e:15:6c:4b:95:f0:96:ec:53:0c:0c:
50:72:fa:c9:9e:b2:64:12:de:2d:c4:1c:7d:4d:26:ac:1b:1d:
5a:28:45:93:dd:f0:03:18:c0:c3:e1:79:50:28:26:71:19:52:
0a:da:24:2b:9e:a4:48:52:d8:c1:4e:1f:46:dd:cb:e5:b5:90:
93:99:ca:44:94:3a:3c:fa:0f:e5:83:2e:32:87:d1:04:b6:fb:
b5:86:7f:c7:34:fe:5c:ab:00:8c:58:57:43:f9:93:f3:fb:32:
8a:43:60:bf:00:06:26:bf:cc:44:87:21:0e:cd:94:a7:7b:e8:
13:17:f3:f6:a0:fc:ab:38:a0:8d:bc:03:2d:96:29:2d:d0:7a:
fb:95:8f:e0:f9:da:ea:6e:74:d9:c5:0e:dd:24:54:2e:49:ed:
35:81:dd:a7:af:f8:02:e4:ef:4e:21:37:4a:68:e2:33:fc:21:
84:c6:15:9e:b4:54:05:17:a1:af:71:b4:cd:f6:b8:34:b7:ae:
d6:df:1a:92:6c:e3:57:13:a3:0e:12:dd:b1:f3:f9:61:f5:25:
17:44:05:15:89:d6:36:58:aa:10:ab:71:1e:58:cf:4e:c1:bf:
2f:6e:25:42:94:7a:7f:19:60:1d:eb:1c:cf:4f:fc:1e:16:28:
10:26:07:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:03:36 2025 by rpki-client