Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.mft
File: maYtMHOoLahlQqz8Nvb8ueZqBbs.mft (raw, json)
Hash identifier: 4psfQl4sWud2SoIvsnTiZNkJsnHUhxXWkBt9t3A9jhM=
Subject key identifier: 86:87:83:99:38:B4:3C:2B:74:EE:11:E7:7F:73:F8:28:2A:A5:D8:00
Authority key identifier: 99:A6:2D:30:73:A8:2D:A8:65:42:AC:FC:36:F6:FC:B9:E6:6A:05:BB
Certificate issuer: /CN=99a62d3073a82da86542acfc36f6fcb9e66a05bb
Certificate serial: 01967530B90D4AF9301D7C5DBFEE9847D685
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maYtMHOoLahlQqz8Nvb8ueZqBbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.mft
Manifest number: 0C23
Signing time: Sun 27 Apr 2025 03:00:49 +0000
Manifest this update: Sun 27 Apr 2025 03:00:49 +0000
Manifest next update: Mon 28 Apr 2025 03:00:49 +0000
Files and hashes: 1: maYtMHOoLahlQqz8Nvb8ueZqBbs.crl (hash: 4dX7AbCp8mZoIXCTkoKYAW73cTwLjZxqcIDylxszAGE=)
2: sEp92JJOOutIpHjLS3hTbE4CMc4.roa (hash: zayIaTeW8P15HaHDoVK2CtiggZ6Pbixqm/OKP7D4RHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/maYtMHOoLahlQqz8Nvb8ueZqBbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:30:b9:0d:4a:f9:30:1d:7c:5d:bf:ee:98:47:d6:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a62d3073a82da86542acfc36f6fcb9e66a05bb
Validity
Not Before: Apr 27 03:00:49 2025 GMT
Not After : Apr 28 03:00:49 2025 GMT
Subject: CN=8687839938b43c2b74ee11e77f73f8282aa5d800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:59:e5:3b:b7:06:34:89:a9:c6:79:41:35:32:
bc:08:0d:f9:4e:bd:3d:f9:fc:13:91:2d:65:7c:51:
c2:0b:03:52:70:28:e6:00:d7:d4:4b:9d:bb:25:eb:
1c:73:f6:3b:04:de:b3:a7:ad:86:4d:4b:ab:6c:bf:
d0:44:5b:3b:cc:94:8c:cb:47:03:e4:55:48:ef:87:
0d:ad:bf:fc:0d:e7:f0:af:fb:6c:18:31:07:f2:ea:
af:60:5f:31:eb:83:29:cc:93:a5:50:bf:3a:8b:46:
a5:d5:4f:5a:80:23:fc:b4:29:75:12:ca:c6:67:1e:
73:c9:ac:ee:43:c2:4a:60:60:33:6a:3f:e5:6a:f6:
f8:9c:d7:ce:c4:bd:d5:17:cf:b0:87:d9:9c:59:f1:
a5:86:7c:9e:a5:ee:5e:6f:b1:88:41:d6:2d:07:a1:
0d:89:0c:08:ac:95:55:26:2a:d6:df:d7:1a:cb:e8:
ef:d3:f6:92:54:f2:35:33:97:6c:2d:13:f6:63:42:
fe:cc:6f:16:d3:7e:85:53:ce:e0:6e:75:da:0c:b8:
a6:e4:3c:08:f9:7e:64:49:34:01:6f:ea:c7:61:3b:
81:6a:2a:de:56:f5:81:d4:24:aa:a2:7e:60:a7:8d:
81:50:22:72:5f:c7:61:27:da:c2:a1:cf:f0:c8:24:
62:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:87:83:99:38:B4:3C:2B:74:EE:11:E7:7F:73:F8:28:2A:A5:D8:00
X509v3 Authority Key Identifier:
keyid:99:A6:2D:30:73:A8:2D:A8:65:42:AC:FC:36:F6:FC:B9:E6:6A:05:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maYtMHOoLahlQqz8Nvb8ueZqBbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:5e:24:57:73:5c:5a:83:83:1c:6b:98:35:b2:2e:2d:02:64:
39:34:a8:4e:4b:9f:37:29:3c:6e:7d:57:2c:bd:d5:8d:55:4c:
78:cd:fc:d3:65:e7:8d:cd:a6:cd:8a:35:6c:93:cf:d7:73:b7:
5a:1f:18:bb:4f:51:1e:c6:ab:4a:dd:58:a9:fb:69:b0:8e:20:
dd:32:5c:58:92:00:7e:28:1f:6d:57:44:cd:34:43:1a:d7:c7:
a4:d8:f8:80:e8:94:c0:ff:e2:a5:60:dc:b0:41:7b:1f:6e:6f:
fc:51:76:fb:6a:7f:44:53:54:a8:fc:63:2d:52:dc:92:9e:41:
84:d0:91:d1:d5:1d:4e:c2:bb:64:8e:bf:ef:6a:1f:76:e0:74:
50:b5:f8:fa:ec:49:3e:c3:62:99:f2:60:dc:96:e3:16:fc:d7:
92:4a:d4:a7:39:3a:89:0c:46:a7:85:b3:af:91:f3:47:7c:99:
11:ec:16:ef:3a:79:31:62:bb:37:a5:09:00:67:e6:89:7d:fc:
da:27:ae:f6:78:9d:55:7f:ba:3a:25:2f:59:4c:41:85:ad:7c:
47:8b:1f:26:7b:89:5b:90:5b:5f:fa:e5:eb:af:99:82:60:6e:
be:37:02:b0:90:d1:52:7a:4f:b6:f6:ef:cf:0c:03:22:01:31:
e8:7d:ae:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:10:09 2025 by rpki-client