Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.mft
File: t09j_Q3Bl-Uq0nInbEDT7kux15k.mft (raw, json)
Hash identifier: SyuUgNzSlozcvJCP/rrPca90jhPHdO7uR4wNzsXTT2U=
Subject key identifier: BF:8B:0F:C6:C5:EC:D0:8B:5B:15:15:C9:7E:7A:FA:59:C3:B8:07:D0
Authority key identifier: B7:4F:63:FD:0D:C1:97:E5:2A:D2:72:27:6C:40:D3:EE:4B:B1:D7:99
Certificate issuer: /CN=b74f63fd0dc197e52ad272276c40d3ee4bb1d799
Certificate serial: 01967FB45CD6482C3D1DB33DB710DEA7BA7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t09j_Q3Bl-Uq0nInbEDT7kux15k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.mft
Manifest number: 12B7
Signing time: Tue 29 Apr 2025 04:00:48 +0000
Manifest this update: Tue 29 Apr 2025 04:00:48 +0000
Manifest next update: Wed 30 Apr 2025 04:00:48 +0000
Files and hashes: 1: CTtxM-1YJnI7s2CeXEI8bJGchw8.roa (hash: m3vS1eOhVy8HVysz20rw/64QS2NyFhJNMyCoI4Eqes4=)
2: t09j_Q3Bl-Uq0nInbEDT7kux15k.crl (hash: M53469BkgaebJxoG4QPuXMVAue80dkvR25Ly6WH41zg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.mft
rsync://rpki.ripe.net/repository/DEFAULT/t09j_Q3Bl-Uq0nInbEDT7kux15k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:b4:5c:d6:48:2c:3d:1d:b3:3d:b7:10:de:a7:ba:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b74f63fd0dc197e52ad272276c40d3ee4bb1d799
Validity
Not Before: Apr 29 04:00:48 2025 GMT
Not After : Apr 30 04:00:48 2025 GMT
Subject: CN=bf8b0fc6c5ecd08b5b1515c97e7afa59c3b807d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:03:ea:a2:ff:82:17:14:dc:d6:25:f1:4e:3e:
f2:6d:20:51:eb:c3:39:09:10:3e:cb:1b:84:80:18:
d2:fd:ca:97:be:ae:fa:39:16:26:ca:5a:b1:b3:24:
70:ef:28:e4:aa:f8:3b:31:a3:37:43:aa:88:3d:44:
a0:0b:3d:d1:08:71:48:bf:e4:5a:f2:10:14:0f:b0:
c6:13:78:04:67:9a:4a:a4:8f:c9:28:b0:5a:f5:96:
6b:10:b7:84:ad:3a:a6:e1:fc:fe:70:19:04:da:8c:
32:36:19:5e:e2:90:38:8e:ed:f5:5a:7c:9c:bb:52:
de:9f:3f:b9:cd:00:ac:07:ab:34:04:5d:1b:d0:94:
da:9b:11:35:41:8f:e0:32:6d:f4:2c:37:a0:f1:6b:
f5:f7:ee:d5:a9:03:55:8e:1a:7b:dc:cb:2f:26:f7:
e4:3e:45:be:08:d5:13:0f:87:90:e2:52:72:6f:e5:
15:22:23:26:c9:8b:83:c7:68:09:7e:55:24:c2:77:
3f:dd:7b:48:e0:df:e8:05:d3:ff:41:75:c3:02:9b:
84:75:c7:11:5f:6c:55:b1:94:fd:aa:cb:12:bc:9f:
fa:df:40:fc:4d:3f:03:0f:c7:83:9e:46:5d:ab:da:
f6:57:28:e3:d7:cc:73:99:1a:19:41:fa:48:8c:fc:
95:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:8B:0F:C6:C5:EC:D0:8B:5B:15:15:C9:7E:7A:FA:59:C3:B8:07:D0
X509v3 Authority Key Identifier:
keyid:B7:4F:63:FD:0D:C1:97:E5:2A:D2:72:27:6C:40:D3:EE:4B:B1:D7:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t09j_Q3Bl-Uq0nInbEDT7kux15k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:18:e8:f9:56:75:27:a1:80:ec:73:b0:ae:05:9d:6b:6e:73:
75:10:8d:95:c2:e2:a8:5e:14:a3:d2:e1:56:9a:08:9c:5b:b2:
56:cf:75:f1:aa:3e:ee:86:de:0d:3e:20:6f:99:55:27:04:1d:
2f:37:8c:84:a0:93:d3:82:24:84:f4:1a:f6:b8:71:06:45:1c:
f0:04:74:be:e4:c0:33:ac:ee:9f:59:77:6b:62:d9:0a:c0:c8:
e1:23:5c:d5:be:ec:10:10:fc:33:6c:a1:24:54:f1:87:f2:d1:
e1:43:ce:48:cf:4e:9d:4d:45:45:06:0f:17:9c:e7:09:15:47:
66:b0:30:43:64:d5:73:52:16:2e:e5:27:76:10:f6:32:10:30:
2b:df:cc:be:2b:0b:22:b4:3c:63:24:eb:a4:7a:f1:06:83:ac:
5c:4d:95:38:a1:74:3a:a1:fd:ac:dc:81:76:2d:4e:3e:e1:b5:
32:84:a2:4f:8f:91:53:fd:26:1a:fb:f6:f7:d5:c4:6a:32:79:
4a:bb:ef:46:7d:d5:3a:b3:78:a4:08:ed:d6:ef:ad:fc:f3:5e:
7b:d2:a3:64:06:52:b7:89:0f:f5:58:a9:ab:5b:2f:31:5b:04:
4e:1b:7f:06:2c:08:d4:79:31:0a:93:74:b0:e4:b5:7b:0a:9b:
00:eb:08:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:09:31 2025 by rpki-client