Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
File: p9ha3isNTsHKCSqOJwPBkgDHLzI.mft (raw, json)
Hash identifier: 6vtIilEOMZe99wzj1Ci72kbcpObT8qfm9O7w56hMOdE=
Subject key identifier: 9E:24:30:CD:A4:99:1F:74:9A:3B:E3:45:F7:05:03:61:F2:21:25:D1
Authority key identifier: A7:D8:5A:DE:2B:0D:4E:C1:CA:09:2A:8E:27:03:C1:92:00:C7:2F:32
Certificate issuer: /CN=a7d85ade2b0d4ec1ca092a8e2703c19200c72f32
Certificate serial: 01967E33EB130C0B221BD253A84DD5353FE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
Manifest number: 0D84
Signing time: Mon 28 Apr 2025 21:00:53 +0000
Manifest this update: Mon 28 Apr 2025 21:00:53 +0000
Manifest next update: Tue 29 Apr 2025 21:00:53 +0000
Files and hashes: 1: UFy4W10oicxgmbeQ9Qsjx3EgCQo.roa (hash: duZf8h2S3aFjJNNyhBun9TsZgrWqDeY96HLWVCbzObE=)
2: V78L3J5oIjHVBChvXIOgu9Ohs78.roa (hash: CdwTBRVREg2srUT+l5SA7LltUlSHpLsaVjkjqAH9C7o=)
3: p9ha3isNTsHKCSqOJwPBkgDHLzI.crl (hash: 8F+6gKySeAsZR5rFeen+drM09hQAJLZ4bQkvaDi0848=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:33:eb:13:0c:0b:22:1b:d2:53:a8:4d:d5:35:3f:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7d85ade2b0d4ec1ca092a8e2703c19200c72f32
Validity
Not Before: Apr 28 21:00:53 2025 GMT
Not After : Apr 29 21:00:53 2025 GMT
Subject: CN=9e2430cda4991f749a3be345f7050361f22125d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e4:b5:6a:19:0a:99:bd:3a:3e:31:f5:ca:ee:
c3:08:a1:dc:4a:f3:16:33:90:7e:d4:de:2f:41:07:
0f:e9:5d:84:15:76:6b:f4:2b:98:6f:df:23:1b:85:
b7:a7:90:61:1b:fd:30:22:e3:bf:36:13:33:8b:aa:
cc:69:df:53:77:6b:cb:02:9e:68:00:6c:fc:4a:19:
05:e0:32:ad:01:6d:45:51:14:a9:a3:33:8f:a8:df:
88:05:94:f9:77:7d:89:ed:e5:35:d9:3a:d5:75:3e:
66:18:ba:45:fb:18:27:27:df:b2:e5:aa:ce:91:a7:
83:5f:09:9b:83:56:41:c2:9c:f8:82:3e:81:0d:25:
82:d5:d0:81:e1:ad:0c:16:2b:4d:6a:45:e8:8a:40:
f1:26:99:7c:03:36:45:5b:c8:00:ac:5a:be:ff:4d:
b8:e4:ba:b4:48:5b:29:1b:08:6a:8d:30:cd:48:64:
ea:b6:db:7d:67:91:0a:f1:27:39:66:f2:dd:19:8f:
b7:2d:24:99:bc:9f:68:39:23:66:98:f5:12:44:36:
00:67:2b:b9:5c:f3:eb:ac:4a:9b:84:3d:70:cc:9d:
60:df:4f:4b:9b:f8:fa:81:d2:66:13:16:70:4a:e4:
43:92:00:29:62:39:0d:d8:11:f8:f8:ae:76:3e:28:
b4:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:24:30:CD:A4:99:1F:74:9A:3B:E3:45:F7:05:03:61:F2:21:25:D1
X509v3 Authority Key Identifier:
keyid:A7:D8:5A:DE:2B:0D:4E:C1:CA:09:2A:8E:27:03:C1:92:00:C7:2F:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:0d:ae:0e:b7:3e:d6:aa:79:07:6c:51:3e:94:5a:e8:a8:62:
8d:16:fd:30:4e:a9:5d:9d:25:f3:ce:76:2c:ca:dd:50:15:c5:
2a:85:dd:60:82:77:47:3b:81:1a:7b:d0:04:71:41:9e:a0:8c:
c3:00:6c:20:c9:95:52:bc:c1:4c:bd:bd:27:61:92:28:7b:2b:
48:cc:00:e7:13:77:2a:48:d2:1f:d7:f7:57:ce:b3:40:0f:b3:
4c:36:f2:ad:bf:f6:59:33:ac:11:1d:f8:b6:a6:01:b9:7a:1b:
b2:b0:80:fb:b4:5a:55:be:9c:f2:82:ba:aa:8a:1e:6e:38:c5:
11:df:8b:33:fd:5b:01:a9:5f:a5:4c:9d:42:34:cd:a9:22:87:
93:ae:9f:b7:46:56:68:e0:a9:99:36:49:dd:61:d3:6b:47:99:
d5:82:18:c9:37:f3:26:34:7d:07:61:04:91:99:8e:bf:5c:55:
33:02:67:1c:dc:53:4b:1d:f1:2e:55:07:5f:12:8c:15:75:01:
93:32:a3:3b:61:70:3e:3d:1a:0e:0b:b4:e5:6e:11:f5:7c:56:
a3:15:0f:60:ee:5e:e7:00:a7:77:77:38:8d:81:62:36:5f:a1:
e5:d2:08:cc:53:ec:14:cc:6e:9b:ab:04:6d:db:39:23:69:92:
24:a7:bd:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:55:07 2025 by rpki-client