Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
File: 9WsgSbOpqm8jaObutL_NFnlTpek.mft (raw, json)
Hash identifier: 49LVOuydQRpxUehEpXPGylq4a/R0tDG7KymPtN+vAWc=
Subject key identifier: 30:6B:9A:92:46:8B:F6:DF:EB:36:2A:EE:5C:D9:93:29:58:57:F4:6C
Authority key identifier: F5:6B:20:49:B3:A9:AA:6F:23:68:E6:EE:B4:BF:CD:16:79:53:A5:E9
Certificate issuer: /CN=f56b2049b3a9aa6f2368e6eeb4bfcd167953a5e9
Certificate serial: 01967C4589A1559F45218CDCC8F0EA8C3C21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
Manifest number: 1512
Signing time: Mon 28 Apr 2025 12:00:54 +0000
Manifest this update: Mon 28 Apr 2025 12:00:54 +0000
Manifest next update: Tue 29 Apr 2025 12:00:54 +0000
Files and hashes: 1: 1-Rgkx9BsEfikK5eKOgyodd6h4gY.roa (hash: CT7Rp9+Jw7zWR3AQw89KWuUkHEx7Im+IKlsSdQ20Nq8=)
2: 9WsgSbOpqm8jaObutL_NFnlTpek.crl (hash: aEq0dDO3R4hi1UdlazNqhXDsdE1AIMzV16SIUOhOjCY=)
3: JOUMaPpHTLs0B4CR5_freWlNIso.roa (hash: lQdFlW5I+9SlK8gtAYGtz3jqfCmzmwfXYR3qnMqPbFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 12:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:45:89:a1:55:9f:45:21:8c:dc:c8:f0:ea:8c:3c:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f56b2049b3a9aa6f2368e6eeb4bfcd167953a5e9
Validity
Not Before: Apr 28 12:00:54 2025 GMT
Not After : Apr 29 12:00:54 2025 GMT
Subject: CN=306b9a92468bf6dfeb362aee5cd993295857f46c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:72:59:61:22:17:cd:a1:86:0f:7e:0c:59:d6:
98:87:1e:29:1d:98:32:b7:74:5b:23:76:d5:5e:52:
73:28:41:2a:72:df:87:17:bc:cb:c4:e2:9f:63:b6:
4a:f3:4e:5d:8f:b1:fa:3a:fd:7f:03:5a:ae:d5:03:
a7:7f:5b:c8:fa:21:6d:ad:58:b1:6d:70:1b:c9:16:
1a:3d:b1:d3:44:ba:57:dd:78:ed:04:bd:e7:33:54:
97:79:a2:e0:e2:af:89:a4:ff:ff:fa:51:f1:fd:c7:
f3:74:58:51:0d:3a:2c:5a:fe:fe:54:b5:88:1c:13:
db:03:9d:38:74:31:33:58:4c:54:d3:a2:ba:7c:96:
37:e7:a6:bd:67:d2:cf:94:dc:8b:66:54:19:20:58:
f9:1c:34:bb:19:2a:e0:25:9b:18:6c:5b:14:79:04:
5a:20:a7:7f:fe:68:c4:16:86:f6:14:73:ee:62:11:
63:bb:fa:bc:56:90:d3:bd:56:af:80:d1:64:d3:e5:
ff:ca:da:4c:1e:0a:b8:cf:20:54:e5:4a:51:d4:56:
df:47:53:36:3c:ac:c5:3b:e8:98:eb:0b:f0:88:8a:
d7:80:5e:1a:ce:95:43:5d:6a:c1:3e:92:a1:4d:10:
12:13:f5:93:ca:46:f5:bb:b9:cc:8c:9b:9a:fe:f3:
02:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:6B:9A:92:46:8B:F6:DF:EB:36:2A:EE:5C:D9:93:29:58:57:F4:6C
X509v3 Authority Key Identifier:
keyid:F5:6B:20:49:B3:A9:AA:6F:23:68:E6:EE:B4:BF:CD:16:79:53:A5:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:54:b2:2f:c6:ae:2b:28:78:27:b6:25:83:ff:dd:2f:d2:b4:
14:ea:2d:33:9f:44:f6:ac:a1:6f:9b:ab:a8:48:e5:44:dc:67:
70:43:6e:cc:76:b4:57:2a:d9:77:8a:d1:7a:20:7b:73:ba:f6:
0a:43:b9:49:dd:33:ad:75:fd:f8:58:ab:79:3e:75:38:40:7a:
21:95:18:5f:57:8a:88:a2:7d:b2:71:20:b5:00:6b:b6:89:fe:
6d:cf:6d:ae:5e:b3:ee:79:6f:c8:74:f1:bf:7a:5d:84:f3:86:
1f:f3:d6:0c:19:3c:e3:e0:24:8f:24:e9:08:16:7c:1d:6d:ca:
2b:c0:dc:d6:0e:0c:73:2a:f1:d0:02:b6:b9:8d:48:66:99:9a:
0c:d9:f4:9e:c3:69:35:60:06:b0:09:bd:5b:58:d6:e5:1b:19:
f6:cb:e4:73:45:db:1f:c2:4c:d4:20:d8:c2:7d:e1:ac:01:89:
63:65:26:c1:3a:52:0a:1e:69:43:83:31:6f:fc:a1:37:d7:e6:
66:5b:3a:bd:4d:97:12:34:4d:e0:e3:44:33:8f:02:dc:69:27:
03:29:61:f0:6f:d6:63:3a:d9:08:89:03:81:f5:ef:db:10:fd:
6f:ce:ec:c2:4d:7a:94:5e:19:cc:73:3a:89:7f:8d:67:f1:81:
3e:ea:79:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:56:19 2025 by rpki-client