Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/7920d0-f956-4439-9cd2-4b7808d98664/1/cHr0U0bwa2IqDru0_5ujO-b0Lx4.mft
File: cHr0U0bwa2IqDru0_5ujO-b0Lx4.mft (raw, json)
Hash identifier: W5SBaaooOK2yvp4v1+0900X2QZ59rdCPBTGO2VtGq3w=
Subject key identifier: 9C:DE:A7:6A:CD:DB:DA:43:00:49:96:00:3B:A7:7F:7F:F2:DB:2A:56
Authority key identifier: 70:7A:F4:53:46:F0:6B:62:2A:0E:BB:B4:FF:9B:A3:3B:E6:F4:2F:1E
Certificate issuer: /CN=707af45346f06b622a0ebbb4ff9ba33be6f42f1e
Certificate serial: 0196A0896354B495075904AAE543DBF6D07E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cHr0U0bwa2IqDru0_5ujO-b0Lx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/7920d0-f956-4439-9cd2-4b7808d98664/1/cHr0U0bwa2IqDru0_5ujO-b0Lx4.mft
Manifest number: 132D
Signing time: Mon 05 May 2025 13:01:20 +0000
Manifest this update: Mon 05 May 2025 13:01:20 +0000
Manifest next update: Tue 06 May 2025 13:01:20 +0000
Files and hashes: 1: Dg3_0N_QJLl_z9oMjas8amvsSl4.roa (hash: i//fT7WOmOH7LBZUXbS89Zg6KyN/Hg+cEJQRzh4C3DQ=)
2: cHr0U0bwa2IqDru0_5ujO-b0Lx4.crl (hash: OClIUe8hTFTPcVrQhYfEdDz6hoTTloQwybfzogGYlfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/7920d0-f956-4439-9cd2-4b7808d98664/1/cHr0U0bwa2IqDru0_5ujO-b0Lx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/7920d0-f956-4439-9cd2-4b7808d98664/1/cHr0U0bwa2IqDru0_5ujO-b0Lx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cHr0U0bwa2IqDru0_5ujO-b0Lx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:89:63:54:b4:95:07:59:04:aa:e5:43:db:f6:d0:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=707af45346f06b622a0ebbb4ff9ba33be6f42f1e
Validity
Not Before: May 5 13:01:20 2025 GMT
Not After : May 6 13:01:20 2025 GMT
Subject: CN=9cdea76acddbda43004996003ba77f7ff2db2a56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:4c:4d:e6:dd:0d:c5:7d:06:4a:8f:5d:cb:ed:
d5:e5:de:f4:52:f9:d0:08:80:49:31:4b:8d:46:f4:
51:35:42:9f:ac:8a:58:52:39:7f:22:53:55:11:7a:
d5:5d:38:6b:78:9d:24:7e:24:1e:19:58:0e:8e:4e:
f4:05:02:fc:cd:50:fd:e1:0a:89:a6:08:3f:ac:26:
ed:f9:7e:bb:e4:28:33:bb:de:a0:56:ea:d4:8c:51:
ac:19:b8:5d:d5:7b:79:7c:21:b5:2b:46:a0:f1:44:
60:1f:ca:96:c5:7d:9d:4a:c3:1d:09:63:53:3b:f6:
25:80:af:70:9c:3b:c4:6a:6c:70:7c:e0:8b:28:ea:
11:c8:73:11:18:0e:0c:11:4c:1b:a8:6e:71:2f:f4:
54:e4:16:7e:fc:4e:48:ff:d9:4f:e9:bd:65:d4:5b:
02:fa:fe:c1:79:2b:38:2b:15:d9:e2:27:c3:68:9a:
1d:d2:10:c5:f1:c8:70:f7:7a:d4:2a:ff:db:fc:e0:
48:ad:f4:d0:f0:ea:aa:88:a9:1d:b2:8c:16:9b:e0:
1c:9f:be:fe:06:53:5d:74:0a:e5:9f:bc:24:ce:21:
07:39:51:c8:e7:e4:ba:2e:75:d0:9e:22:67:a8:c2:
fc:a6:f3:e5:ab:82:d0:c7:b7:91:2d:60:3d:ef:11:
71:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:DE:A7:6A:CD:DB:DA:43:00:49:96:00:3B:A7:7F:7F:F2:DB:2A:56
X509v3 Authority Key Identifier:
keyid:70:7A:F4:53:46:F0:6B:62:2A:0E:BB:B4:FF:9B:A3:3B:E6:F4:2F:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cHr0U0bwa2IqDru0_5ujO-b0Lx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/7920d0-f956-4439-9cd2-4b7808d98664/1/cHr0U0bwa2IqDru0_5ujO-b0Lx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/7920d0-f956-4439-9cd2-4b7808d98664/1/cHr0U0bwa2IqDru0_5ujO-b0Lx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:34:c4:33:8c:1a:b7:53:fb:33:19:5e:b4:af:04:3f:e5:87:
ea:c1:16:82:56:d1:30:02:ae:8e:81:24:94:d9:38:99:d2:6e:
51:12:94:fc:e3:88:53:e3:e1:07:a3:2c:8c:69:78:d9:81:21:
da:3d:1a:81:9c:3c:6f:8f:99:ce:df:d4:15:03:2d:0e:23:ea:
63:0e:aa:2c:f8:a2:3b:09:de:62:91:43:1e:71:62:b6:2c:7c:
84:c1:ab:47:aa:2a:e0:5a:f3:e4:55:30:17:9b:34:c2:25:2c:
b1:e0:79:0e:ca:c7:b5:e1:bc:42:d8:35:f3:ce:a0:4f:e6:b5:
f0:01:6a:38:99:0d:8a:26:88:1b:57:74:bc:ce:52:e6:eb:3e:
d4:70:77:64:a7:a6:c6:b8:f7:4a:c8:3d:28:b2:9f:20:58:59:
f4:c5:d8:6f:a2:02:92:97:62:5f:c2:4d:d7:0a:a4:37:9b:f6:
fc:8c:7f:f8:19:78:ed:b2:c7:bb:6c:88:60:84:50:91:99:17:
7e:f8:3c:65:a0:6d:3b:ca:39:c7:4d:bc:b2:0b:33:a1:cf:09:
37:b0:9c:d2:ea:4a:bc:d9:04:65:76:a4:86:fb:9b:b2:d2:78:
11:69:ee:71:22:5c:9d:c3:bb:9e:65:9e:99:6b:ef:9f:2d:71:
1a:ea:2c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 20:36:54 2025 by rpki-client