Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
File: 1-aNSD9nCmaKHTfXke2MCpCUqcms.mft (raw, json)
Hash identifier: wt2Z6cFXNkKl2U1n8AngdzAdsWIQribT2OpO8H6Sn5c=
Subject key identifier: 00:D8:F0:31:A5:99:3B:B7:A3:FF:36:F7:65:DF:AA:D1:B5:66:2D:2C
Authority key identifier: F9:A3:52:0F:D9:C2:99:A2:87:4D:F5:E4:7B:63:02:A4:25:2A:72:6B
Certificate issuer: /CN=f9a3520fd9c299a2874df5e47b6302a4252a726b
Certificate serial: 0196790D25FBFE9052A45BE493EB09D8BAA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-aNSD9nCmaKHTfXke2MCpCUqcms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
Manifest number: 1510
Signing time: Sun 27 Apr 2025 21:00:26 +0000
Manifest this update: Sun 27 Apr 2025 21:00:26 +0000
Manifest next update: Mon 28 Apr 2025 21:00:26 +0000
Files and hashes: 1: 1-aNSD9nCmaKHTfXke2MCpCUqcms.crl (hash: RLo0INJOSESNO3u59gCQJsVqfP0quDa/6rw9ZIIU71c=)
2: xXvr5N3cdjjVXwcVtqed053TqTM.roa (hash: RPXbgfGCQVhnjZtFi6ez4KE4+8jSRCf133mSXRnDHCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-aNSD9nCmaKHTfXke2MCpCUqcms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:0d:25:fb:fe:90:52:a4:5b:e4:93:eb:09:d8:ba:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9a3520fd9c299a2874df5e47b6302a4252a726b
Validity
Not Before: Apr 27 21:00:26 2025 GMT
Not After : Apr 28 21:00:26 2025 GMT
Subject: CN=00d8f031a5993bb7a3ff36f765dfaad1b5662d2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b0:57:3b:a7:03:8c:85:fa:b6:1f:bf:6d:62:
a7:3c:3b:74:71:b5:5d:e5:10:7b:0b:23:76:4a:28:
4d:3a:1a:b5:71:79:ba:35:ed:2d:48:27:37:88:6b:
9f:1b:53:58:dc:d4:31:a3:92:f4:0d:3e:4b:ff:df:
bd:cb:1b:5e:0d:5f:1e:21:87:a5:1e:6a:f0:8f:ae:
c1:54:70:9a:e2:48:9c:d7:fe:f7:2d:76:2a:49:21:
45:8d:a0:ab:ca:50:ba:ae:c0:a8:ac:76:7f:ee:05:
f8:eb:98:6f:64:de:c4:24:da:7a:9a:c2:37:54:f0:
50:be:be:7e:0a:f9:7f:df:36:a4:37:20:b6:8a:c4:
70:79:5e:9e:77:ff:bf:c1:c8:80:ec:bc:e8:55:ee:
35:9d:61:87:96:56:8b:04:3f:47:76:01:0a:3d:3a:
d0:10:e5:e9:12:24:d3:54:ce:53:f9:50:82:6a:e9:
6d:c8:ba:12:5f:fb:05:d4:a3:a7:b3:47:c3:36:52:
a6:75:68:8b:c5:bc:87:68:38:ee:82:d2:a4:6d:80:
23:09:90:90:a4:da:9c:35:34:2b:96:fc:2a:a0:66:
61:9a:16:10:1a:31:76:b1:be:4b:05:20:f0:96:80:
7f:31:06:18:c6:fe:af:13:93:34:1c:ab:7e:ca:61:
3a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:D8:F0:31:A5:99:3B:B7:A3:FF:36:F7:65:DF:AA:D1:B5:66:2D:2C
X509v3 Authority Key Identifier:
keyid:F9:A3:52:0F:D9:C2:99:A2:87:4D:F5:E4:7B:63:02:A4:25:2A:72:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-aNSD9nCmaKHTfXke2MCpCUqcms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:e1:68:cf:49:11:7d:71:6b:32:b3:81:c8:04:11:0f:cb:a3:
97:3b:a8:c7:17:4e:52:e7:ab:03:77:0f:f9:0e:6e:b1:37:76:
dd:3c:75:2c:7a:54:0f:fb:c1:53:9e:23:ee:23:4b:d5:2c:6b:
90:03:07:e9:1d:91:5c:46:5c:a7:66:f1:0d:80:fe:15:51:34:
c0:91:e9:6d:62:dc:3c:e8:e1:11:df:b3:d2:79:6a:56:b0:47:
f6:6c:34:23:53:f3:12:1a:d1:47:22:af:bb:0f:c0:bf:b5:0f:
7a:05:80:68:f3:78:41:a6:92:eb:9f:99:11:8b:46:a6:a6:a0:
5d:0d:19:0e:7a:b8:cc:9c:6e:42:71:46:a3:95:c9:6c:65:78:
f0:f8:70:e0:2c:5f:81:e6:a7:b4:2c:b2:96:90:e2:88:75:c3:
b3:5b:18:fb:0d:3e:98:60:30:60:6f:39:df:a6:46:1d:7c:71:
42:3c:a6:f9:04:b2:c6:1e:6c:09:4d:e3:ee:c1:0b:25:11:57:
6b:12:32:c7:2b:6d:3b:ea:5f:d5:55:ac:fb:7b:37:bf:40:cb:
66:3a:1a:69:ba:b1:ab:be:be:4c:c3:e9:a2:4f:31:6c:bb:6b:
9a:18:f7:4d:04:dd:f7:8e:48:d5:e3:15:77:52:00:98:a1:b5:
1f:ca:bd:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:41:08 2025 by rpki-client