Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.mft
File: sA09NPYeSEaIv_-cxwN1WCN3WZg.mft (raw, json)
Hash identifier: 0ULPUkm5NkRMsnAXb9V/UqItFEm8R54C5fd2HHO1mbk=
Subject key identifier: 29:F9:CF:1D:30:9A:9B:06:D8:2F:9A:08:A5:AC:D8:7A:D6:91:33:3D
Authority key identifier: B0:0D:3D:34:F6:1E:48:46:88:BF:FF:9C:C7:03:75:58:23:77:59:98
Certificate issuer: /CN=b00d3d34f61e484688bfff9cc703755823775998
Certificate serial: 0196748BE01E13ABB6EF4FC7B0183FA04039
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sA09NPYeSEaIv_-cxwN1WCN3WZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.mft
Manifest number: 11C2
Signing time: Sun 27 Apr 2025 00:00:45 +0000
Manifest this update: Sun 27 Apr 2025 00:00:45 +0000
Manifest next update: Mon 28 Apr 2025 00:00:45 +0000
Files and hashes: 1: LKbJBE8NWEbtvlmwjvUv8EH6lzg.roa (hash: OvzM1ONuWDYGL3UTKmOuYTSxh3U96Ifed1WChkSuccI=)
2: sA09NPYeSEaIv_-cxwN1WCN3WZg.crl (hash: ASUrm8pxbsc5ibxUChGBsDwxoRyLMxI6O/KG3x3ZJ3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/sA09NPYeSEaIv_-cxwN1WCN3WZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 00:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8b:e0:1e:13:ab:b6:ef:4f:c7:b0:18:3f:a0:40:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b00d3d34f61e484688bfff9cc703755823775998
Validity
Not Before: Apr 27 00:00:45 2025 GMT
Not After : Apr 28 00:00:45 2025 GMT
Subject: CN=29f9cf1d309a9b06d82f9a08a5acd87ad691333d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4f:6a:3c:73:ff:93:e7:ed:db:d2:4a:aa:04:
a7:90:80:88:3c:0b:66:a0:6a:28:02:f2:55:9c:7b:
48:9d:75:24:af:9f:ed:c9:e5:0c:c9:5e:bf:87:d6:
90:30:db:56:6b:9f:79:9f:d6:24:ab:33:8a:1b:c1:
a7:dc:17:04:23:38:00:9b:3c:31:84:cd:c0:df:e8:
77:59:18:8c:fd:43:ac:5f:d2:b1:c6:5c:1f:bf:75:
39:f9:77:50:4d:9d:db:ff:cd:7c:2b:9a:13:40:9e:
6b:b6:5a:73:21:72:e1:38:56:c9:7f:ec:b0:5c:ee:
19:bd:24:2b:90:c0:40:df:d3:7c:60:09:5e:01:b5:
23:20:4d:b9:f7:b7:28:55:6f:78:75:cf:51:c3:1a:
52:98:2f:33:5e:4e:a9:bb:10:d7:f1:a1:2f:a9:97:
cb:0d:1a:96:05:38:c8:21:09:31:4b:5a:58:5d:0e:
7f:e0:76:e0:ba:db:c1:36:23:a1:60:3b:ba:e6:2e:
f6:d7:90:c9:f6:d2:bd:a4:73:d2:0a:4e:af:d6:3d:
81:36:bd:4d:a3:d7:db:fd:70:09:d2:48:13:87:b7:
23:80:74:52:16:a3:2c:2e:f7:63:dd:87:de:36:13:
03:1c:7a:10:8d:5c:ff:a5:f0:0b:00:ca:6d:83:91:
d6:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F9:CF:1D:30:9A:9B:06:D8:2F:9A:08:A5:AC:D8:7A:D6:91:33:3D
X509v3 Authority Key Identifier:
keyid:B0:0D:3D:34:F6:1E:48:46:88:BF:FF:9C:C7:03:75:58:23:77:59:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sA09NPYeSEaIv_-cxwN1WCN3WZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:22:e6:7c:8f:f0:03:cf:7c:3d:90:a9:17:db:d6:72:b9:a2:
42:77:41:37:e0:de:9d:6b:e9:2f:7a:bb:62:02:de:1a:f6:96:
e3:ef:85:6a:34:a1:1e:28:ac:75:07:95:94:a6:ba:39:d9:84:
2e:9c:c1:58:c6:db:2a:6b:aa:06:ed:76:31:58:8d:d4:f2:9b:
30:a8:27:5e:c2:28:cc:44:f6:f3:24:f2:92:8d:47:e8:00:ce:
6d:65:ec:37:6e:27:c7:22:f5:0a:7f:c1:7a:d0:e1:80:1d:f3:
a1:52:cb:af:7b:d8:a0:04:4b:00:fc:6a:24:39:a0:5a:7a:d1:
d5:02:94:af:45:e3:4a:73:aa:cc:d4:d6:3d:41:3f:2e:55:6f:
1c:40:92:2e:49:6f:35:f6:79:f2:c7:7b:d0:e5:fa:94:65:da:
a7:de:a6:91:69:31:c9:63:6e:9d:49:2c:a7:14:60:fb:98:48:
1a:02:73:f6:cb:d0:26:fe:dd:74:8e:85:c8:b5:b0:a7:70:3e:
0b:bf:53:c8:65:2a:a4:83:99:f4:1f:1b:f7:25:77:7b:5a:f0:
6d:f3:6b:91:1c:e0:90:53:3d:88:af:8b:f1:47:41:89:6b:43:
7e:b1:ef:84:d8:15:14:ae:55:ca:58:17:b4:53:ea:cb:32:f0:
53:1a:d8:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:33:51 2025 by rpki-client