Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/ud8VbuGLaVjUMGtjEbSghnY-_2I.mft
File: ud8VbuGLaVjUMGtjEbSghnY-_2I.mft (raw, json)
Hash identifier: L0ppHfYVZU+L0+bno57oyP1JnqOCOsU9BaRZODS285I=
Subject key identifier: CD:7D:D0:05:73:CC:11:B4:B9:81:F1:5B:14:42:D9:33:7D:57:37:F8
Authority key identifier: B9:DF:15:6E:E1:8B:69:58:D4:30:6B:63:11:B4:A0:86:76:3E:FF:62
Certificate issuer: /CN=b9df156ee18b6958d4306b6311b4a086763eff62
Certificate serial: 0196857FEA696D236F164657A8E5148C9982
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ud8VbuGLaVjUMGtjEbSghnY-_2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/ud8VbuGLaVjUMGtjEbSghnY-_2I.mft
Manifest number: 1124
Signing time: Wed 30 Apr 2025 07:01:14 +0000
Manifest this update: Wed 30 Apr 2025 07:01:14 +0000
Manifest next update: Thu 01 May 2025 07:01:14 +0000
Files and hashes: 1: Rz_g2oWyKG-Vw1QEp2fRKBiV6zs.roa (hash: F5azyHcNhL5q+y/WKX+C217rx2nLkYCoYjrcB90ZhMg=)
2: dO0iAzf59ELGy5YFAfLCImx6CoY.roa (hash: khd3I95oYPZ7Oe9vWseJ5vBlqZ90z8OH3SOmldjOK5o=)
3: ud8VbuGLaVjUMGtjEbSghnY-_2I.crl (hash: dnrcCA5V+fWn6EtXbCtV7boJuWThppZT6BOswOsvrqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/ud8VbuGLaVjUMGtjEbSghnY-_2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/ud8VbuGLaVjUMGtjEbSghnY-_2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ud8VbuGLaVjUMGtjEbSghnY-_2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 07:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:7f:ea:69:6d:23:6f:16:46:57:a8:e5:14:8c:99:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9df156ee18b6958d4306b6311b4a086763eff62
Validity
Not Before: Apr 30 07:01:14 2025 GMT
Not After : May 1 07:01:14 2025 GMT
Subject: CN=cd7dd00573cc11b4b981f15b1442d9337d5737f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2c:cc:8f:bf:d6:db:83:dc:5d:f4:e9:51:dc:
ec:41:47:ff:46:94:7b:c5:8c:2f:70:94:5a:64:28:
bb:b3:eb:86:8a:f0:99:54:51:c7:d6:b1:3d:9c:f0:
35:fe:25:f1:e7:ec:8c:88:f3:9a:d3:e1:ab:81:59:
e9:c8:a2:03:45:82:95:3e:87:f3:d5:81:87:74:b8:
80:39:59:3c:1b:d2:07:c1:c7:a8:26:b4:3d:40:16:
cc:2b:f9:54:02:a5:c1:30:1c:2e:d6:09:1a:1d:bd:
c7:0b:5e:ba:5e:cc:af:10:59:32:74:25:a4:15:de:
aa:2a:20:88:49:42:13:3c:d6:0f:98:74:b9:82:8f:
79:95:73:7f:e5:0a:79:71:85:95:a8:71:9f:91:0e:
0a:f7:be:81:31:0e:c4:0b:3c:7a:84:82:01:8e:43:
34:02:ef:df:73:b7:cf:d5:06:29:8c:d7:51:96:28:
32:e4:20:d2:21:67:36:b4:ab:2a:16:ad:6f:17:fe:
1a:67:97:31:84:db:33:0d:ff:d4:c2:33:8f:c8:7e:
f5:b5:cf:5f:a2:50:22:c3:8b:89:5c:3f:d3:e9:7f:
48:c9:a5:3f:54:a8:c8:57:77:d6:ee:ec:ae:46:92:
2c:ea:f2:63:f7:58:bd:11:d2:07:ce:1a:43:bf:f3:
a4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:7D:D0:05:73:CC:11:B4:B9:81:F1:5B:14:42:D9:33:7D:57:37:F8
X509v3 Authority Key Identifier:
keyid:B9:DF:15:6E:E1:8B:69:58:D4:30:6B:63:11:B4:A0:86:76:3E:FF:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ud8VbuGLaVjUMGtjEbSghnY-_2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/ud8VbuGLaVjUMGtjEbSghnY-_2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/ud8VbuGLaVjUMGtjEbSghnY-_2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:1c:dd:51:e7:96:60:23:2c:2d:41:2d:84:f7:06:50:fc:a1:
7c:3e:f5:e6:2b:ce:65:d5:8e:ca:16:db:79:a3:62:33:84:7e:
0b:be:6b:1c:9a:99:5a:a0:1f:55:5e:51:f2:e0:92:e0:76:1e:
ea:8e:90:a2:20:07:37:ef:20:d0:44:a3:15:54:d9:07:c5:ca:
4c:e5:d3:85:fe:1b:5f:26:6d:48:e2:a8:b7:fd:c5:ac:02:d8:
d4:37:a0:ac:a2:33:75:9a:d4:b3:d7:77:cb:48:e5:ce:b5:53:
ba:63:b9:8f:81:c8:14:51:56:a3:5f:f8:f2:10:e3:8d:b1:f2:
07:46:eb:3c:02:78:91:00:5c:44:4e:59:75:b7:e6:e2:16:94:
22:06:be:98:25:f4:8b:13:5d:30:b3:a5:60:ad:81:04:18:14:
ab:24:91:75:e6:b2:dd:d5:ae:b5:e4:d7:6b:7b:c8:4d:ae:9a:
a4:75:f3:29:f7:97:a5:fc:b9:d5:2c:4c:e3:a5:af:5a:c3:31:
71:ff:b4:b0:61:cf:36:49:d6:88:c2:0a:cf:12:b9:6f:0a:80:
48:12:2b:ad:90:87:df:92:92:e4:7a:2f:61:d6:ba:50:a2:54:
1a:c2:72:7e:64:63:78:47:67:d6:2b:4a:67:f7:c1:21:4e:91:
82:42:0c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 12:58:01 2025 by rpki-client