Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2dd03b-589b-451c-b9ed-d12b58ccb87c/1/95x8Ghuu0yYNlQ1M_Omol8yX-jA.mft
File: 95x8Ghuu0yYNlQ1M_Omol8yX-jA.mft (raw, json)
Hash identifier: 73nQSCSA18M5jaDNH7/rkaz7jP5ScwabnNv0cf4MaLQ=
Subject key identifier: 96:19:EE:32:05:EB:EE:64:5D:36:E6:46:12:15:E8:E4:7D:92:00:70
Authority key identifier: F7:9C:7C:1A:1B:AE:D3:26:0D:95:0D:4C:FC:E9:A8:97:CC:97:FA:30
Certificate issuer: /CN=f79c7c1a1baed3260d950d4cfce9a897cc97fa30
Certificate serial: 01967642CFF3DCB2FE1D33B7377ABBB5B4E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/95x8Ghuu0yYNlQ1M_Omol8yX-jA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2dd03b-589b-451c-b9ed-d12b58ccb87c/1/95x8Ghuu0yYNlQ1M_Omol8yX-jA.mft
Manifest number: 06BA
Signing time: Sun 27 Apr 2025 08:00:12 +0000
Manifest this update: Sun 27 Apr 2025 08:00:12 +0000
Manifest next update: Mon 28 Apr 2025 08:00:12 +0000
Files and hashes: 1: 95x8Ghuu0yYNlQ1M_Omol8yX-jA.crl (hash: yQOUtHfIIU89KhlMHSCoKcr8dnsazylqmyxos/MhhbA=)
2: Mqsj_mYBdYcPJ5l_74z5bHNTr1k.roa (hash: +l1/GGdu0QqetRbkoCyavDfKTfdB+pfAVXCWByI+XBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/2dd03b-589b-451c-b9ed-d12b58ccb87c/1/95x8Ghuu0yYNlQ1M_Omol8yX-jA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/2dd03b-589b-451c-b9ed-d12b58ccb87c/1/95x8Ghuu0yYNlQ1M_Omol8yX-jA.mft
rsync://rpki.ripe.net/repository/DEFAULT/95x8Ghuu0yYNlQ1M_Omol8yX-jA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:42:cf:f3:dc:b2:fe:1d:33:b7:37:7a:bb:b5:b4:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f79c7c1a1baed3260d950d4cfce9a897cc97fa30
Validity
Not Before: Apr 27 08:00:12 2025 GMT
Not After : Apr 28 08:00:12 2025 GMT
Subject: CN=9619ee3205ebee645d36e6461215e8e47d920070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f8:fe:25:16:5d:40:43:cf:dd:c2:5c:ad:55:
98:fa:20:ce:79:f2:3d:11:cb:fa:6b:15:d9:83:d7:
01:f8:53:07:f4:c6:55:41:9e:f7:24:be:c0:84:36:
c6:2d:ef:07:30:88:77:58:dc:c8:9b:ff:44:8c:a8:
81:80:e8:4a:5b:d9:41:24:62:63:e0:36:1c:45:1f:
c8:51:af:41:e2:03:88:66:c7:8b:ba:db:46:73:77:
ef:4f:52:bc:dc:4d:1a:7d:79:8e:9e:69:be:ab:90:
eb:79:08:22:3c:c7:f2:ff:62:5e:dd:25:38:65:e9:
91:14:44:6f:55:98:29:7e:51:25:c7:2f:48:df:c3:
bd:8b:54:33:dd:96:b4:02:df:df:15:96:84:94:63:
52:24:a4:ca:5e:17:67:bb:70:d9:5e:d8:d3:f6:7e:
ca:62:d0:d7:cb:23:13:9b:4f:50:14:65:6f:73:cf:
d1:01:ee:e2:41:08:21:2a:51:83:5c:01:11:9b:d5:
cc:d0:4b:21:8d:03:81:7a:10:e8:b2:a1:a9:54:45:
a1:08:8a:27:35:c2:47:3d:0f:fc:af:43:a7:5c:d2:
a1:9f:d8:e7:1c:f3:42:4b:30:58:3c:85:a1:8b:a8:
04:19:ee:81:ec:68:95:e1:a8:a6:7f:1e:d4:dd:3c:
53:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:19:EE:32:05:EB:EE:64:5D:36:E6:46:12:15:E8:E4:7D:92:00:70
X509v3 Authority Key Identifier:
keyid:F7:9C:7C:1A:1B:AE:D3:26:0D:95:0D:4C:FC:E9:A8:97:CC:97:FA:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95x8Ghuu0yYNlQ1M_Omol8yX-jA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2dd03b-589b-451c-b9ed-d12b58ccb87c/1/95x8Ghuu0yYNlQ1M_Omol8yX-jA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2dd03b-589b-451c-b9ed-d12b58ccb87c/1/95x8Ghuu0yYNlQ1M_Omol8yX-jA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:3b:d6:d0:ce:4d:1c:85:2c:6d:0d:9b:d0:7c:a0:19:54:72:
08:79:e4:e4:55:3b:7b:4c:01:2d:5b:f6:7e:c1:9c:67:6b:b9:
55:1f:b7:d2:d7:23:a2:53:03:d1:54:21:ae:e8:9c:00:3e:ae:
e6:24:4a:05:7e:0b:c8:ad:38:75:4c:a7:c3:b4:e3:08:ca:3c:
8a:12:21:7c:8c:6e:33:e4:27:6c:53:72:91:38:9a:a7:35:c0:
30:14:54:68:3d:47:39:07:51:3f:0b:77:28:24:80:24:49:e1:
ee:c7:1b:a0:d2:04:10:3e:a8:f0:91:76:7d:76:80:07:74:d1:
13:6f:22:65:94:9c:8d:96:0a:44:6d:2f:7b:a5:29:06:44:3b:
e4:20:1d:de:47:c6:cd:d9:d6:e2:86:fa:e2:c8:af:93:c9:47:
34:eb:4f:d9:42:e2:cb:49:b8:11:07:60:c9:39:72:cc:24:bf:
22:3d:e0:02:33:6e:6b:c7:7d:fa:fe:cf:d8:4e:31:d7:50:7f:
0d:6f:f2:19:a3:e7:12:5b:bf:f9:09:33:5b:8d:5e:b4:98:e3:
0e:ba:2b:c8:ab:a1:a5:ea:37:c7:06:bd:37:08:09:b6:23:ae:
66:01:5b:54:76:11:3b:33:f3:d3:78:5a:da:c4:64:6b:66:62:
67:38:34:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:11:07 2025 by rpki-client