Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft
File: _7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft (raw, json)
Hash identifier: llwGzlkeSh0SFHsynmVMjRYMNqUTJI/J6c6EMFnrjIM=
Subject key identifier: 9F:06:28:52:84:CD:C3:BA:D6:AE:CA:38:93:87:F6:73:0D:38:B0:76
Authority key identifier: FF:B4:F4:0F:32:11:56:1C:29:F1:BB:C3:20:BD:87:CF:A2:DD:D0:29
Certificate issuer: /CN=ffb4f40f3211561c29f1bbc320bd87cfa2ddd029
Certificate serial: 019675D54DD165F8E0E00DA2278C999E7A82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft
Manifest number: 1511
Signing time: Sun 27 Apr 2025 06:00:35 +0000
Manifest this update: Sun 27 Apr 2025 06:00:35 +0000
Manifest next update: Mon 28 Apr 2025 06:00:35 +0000
Files and hashes: 1: _7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.crl (hash: UUzVGTLiv1IsipeP0ENO1wj4PuW/BfK3IzpihQUZpUs=)
2: fwhTjjRIhEdJ6uOffHkJ9IbiBcc.roa (hash: uAg9kNvS0wjEdBKrNfsh4Pl1caTWWUTWPoPoJJEyRFk=)
3: tmBvyCU9dS1RGbck9AhZ77ixbZ4.roa (hash: LYRTheb+KiohViLX8r9l59ZvW37F3uyl1qPERmyYOaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:d5:4d:d1:65:f8:e0:e0:0d:a2:27:8c:99:9e:7a:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffb4f40f3211561c29f1bbc320bd87cfa2ddd029
Validity
Not Before: Apr 27 06:00:35 2025 GMT
Not After : Apr 28 06:00:35 2025 GMT
Subject: CN=9f06285284cdc3bad6aeca389387f6730d38b076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2b:6b:6c:30:23:0c:0a:41:1e:9e:41:c3:44:
6e:6a:d0:7c:61:de:75:30:be:d2:e4:12:58:65:df:
d4:d8:c7:34:90:29:3c:f0:86:1e:38:ee:6b:6e:b1:
61:10:e4:e5:e3:d7:a2:85:8a:b4:e4:fb:93:99:79:
6d:f2:73:8a:5a:69:ec:72:78:16:49:fa:c0:38:eb:
b4:0e:64:d6:cf:d1:56:cd:89:7b:36:d4:de:a0:01:
a7:95:ba:c5:9c:81:66:d2:b6:b2:70:ae:ce:03:51:
9f:6e:86:bd:67:f6:98:f2:4c:99:8f:4a:a2:0f:6b:
02:a7:43:4c:2a:3c:ec:50:4d:07:a6:0b:c0:3f:4d:
c8:08:11:59:d8:47:ac:19:18:f6:79:d2:7a:73:32:
30:93:b2:37:83:b7:9a:d6:9c:d0:00:8b:1f:bb:6e:
a3:b1:0f:06:46:cd:ed:4c:2b:bf:81:ed:be:91:8c:
17:c3:d2:60:77:4a:7f:10:2a:0d:e3:2d:69:4e:43:
54:c7:77:ee:a6:84:0c:ce:c3:b0:fb:34:81:c1:df:
bd:37:10:19:a8:5a:cd:42:9d:85:17:e1:7e:23:05:
7f:d6:1c:e3:12:32:e1:7d:4d:c1:62:43:50:b0:e0:
6e:af:c3:25:82:71:1d:30:38:62:1e:1b:ae:7f:50:
50:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:06:28:52:84:CD:C3:BA:D6:AE:CA:38:93:87:F6:73:0D:38:B0:76
X509v3 Authority Key Identifier:
keyid:FF:B4:F4:0F:32:11:56:1C:29:F1:BB:C3:20:BD:87:CF:A2:DD:D0:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:e9:dd:79:4d:65:24:ad:ea:27:dc:fc:d6:3e:f8:09:69:52:
c1:e2:7e:4d:43:0a:2e:bf:84:a5:23:9f:dc:b3:76:79:84:ec:
66:73:53:34:b7:25:90:b0:51:68:12:82:0a:fb:7d:be:c6:54:
43:cb:68:e8:54:62:7d:71:01:d5:79:93:0d:4e:a7:38:54:15:
fe:f0:a4:89:bc:2a:82:35:40:4e:7d:f7:54:3d:b5:3a:44:51:
13:98:d2:18:7c:ef:bf:f9:b4:cb:76:68:b2:26:2b:2d:bb:03:
cb:f5:42:cd:07:fa:3e:cd:8d:00:2c:24:40:bd:be:fd:9b:d1:
ae:00:98:95:85:d2:60:aa:5a:19:c9:fb:c5:aa:7f:88:c7:4c:
ab:7b:1b:0b:cb:61:43:02:78:02:60:14:c9:1d:99:fc:52:ce:
de:df:fa:e6:5d:96:84:d4:e3:44:a2:73:5e:0f:50:76:54:f5:
c4:ad:d0:10:df:cd:a1:3c:17:fd:0c:8e:20:6e:43:c2:82:3f:
36:60:c4:81:c9:1e:8b:57:e0:5e:7e:97:dc:31:21:52:26:f0:
06:f2:b9:f2:e5:92:d3:ee:a4:7b:c6:43:a1:86:4e:e5:ca:6f:
8e:3b:74:a2:07:c9:ee:fb:8c:ba:b1:6c:f6:df:89:52:17:f5:
cb:12:fb:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:39:41 2025 by rpki-client