Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/f9e9a1-fe52-451a-a154-33f73d9fddb5/1/dHIvFqh8_9eP15BQVoobTJWbEiQ.mft
File: dHIvFqh8_9eP15BQVoobTJWbEiQ.mft (raw, json)
Hash identifier: 8dTc2mqJOCrGMRio0vOQHNG+KmMBK/yDRGgt0TPStCk=
Subject key identifier: 9F:21:0C:6F:8F:32:06:37:7E:0F:E0:7D:66:59:F0:2C:26:72:40:DF
Authority key identifier: 74:72:2F:16:A8:7C:FF:D7:8F:D7:90:50:56:8A:1B:4C:95:9B:12:24
Certificate issuer: /CN=74722f16a87cffd78fd79050568a1b4c959b1224
Certificate serial: 0196759EA040C4150BEAE2C7128F9AFBC5B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHIvFqh8_9eP15BQVoobTJWbEiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/f9e9a1-fe52-451a-a154-33f73d9fddb5/1/dHIvFqh8_9eP15BQVoobTJWbEiQ.mft
Manifest number: 04B4
Signing time: Sun 27 Apr 2025 05:00:52 +0000
Manifest this update: Sun 27 Apr 2025 05:00:52 +0000
Manifest next update: Mon 28 Apr 2025 05:00:52 +0000
Files and hashes: 1: 7ZY1Q8mS5q8z2UfLPJc5K6uKZQo.roa (hash: jj4WM2xy5po+h+orIYLAd72AyCd84wAZcTm4AiOOtow=)
2: dHIvFqh8_9eP15BQVoobTJWbEiQ.crl (hash: zyok5RVwGgzS610jKzwoXETWuyK0gw60zpiNOv9Xgk0=)
3: umqBfoDDAK3jbRiLn4CC-iVGvHg.roa (hash: XnoyZYelLC2MdNI+4AYsdN08BX8Cvr0ms42chjRPStA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/f9e9a1-fe52-451a-a154-33f73d9fddb5/1/dHIvFqh8_9eP15BQVoobTJWbEiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/f9e9a1-fe52-451a-a154-33f73d9fddb5/1/dHIvFqh8_9eP15BQVoobTJWbEiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHIvFqh8_9eP15BQVoobTJWbEiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:a0:40:c4:15:0b:ea:e2:c7:12:8f:9a:fb:c5:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74722f16a87cffd78fd79050568a1b4c959b1224
Validity
Not Before: Apr 27 05:00:52 2025 GMT
Not After : Apr 28 05:00:52 2025 GMT
Subject: CN=9f210c6f8f3206377e0fe07d6659f02c267240df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cd:b4:03:ce:16:93:2a:7d:fd:c7:7f:75:44:
25:70:32:ce:19:83:2c:19:c9:c6:8e:1f:91:11:60:
45:1e:d7:f2:bc:72:6a:7a:54:a1:87:d8:b4:fa:29:
71:17:ea:fe:9b:dd:e6:42:aa:2f:5e:5e:44:09:9c:
7c:69:24:5e:7c:7c:d9:31:2c:49:1f:49:94:f4:e8:
c2:75:3d:c4:de:8f:6f:5b:18:bf:ae:f1:52:0a:85:
04:08:d8:a1:0f:1f:ab:d2:fd:85:62:e0:4a:1e:e8:
d4:6c:a0:77:3e:04:27:b9:00:33:22:04:8c:6b:22:
34:80:9a:08:65:aa:bf:6e:51:33:1f:41:49:91:dc:
db:ca:4c:22:91:65:34:fe:5c:79:78:6e:09:07:18:
a2:a3:8c:a9:49:00:d4:a6:68:d4:18:82:37:7c:39:
35:91:8b:9c:e4:72:28:5a:90:8c:25:d8:48:4e:05:
f6:4e:36:9d:f6:73:75:15:0f:dd:da:1c:5a:23:cd:
23:e4:b6:4a:bd:42:98:6a:8b:58:0f:fc:ea:53:75:
a1:78:f1:59:98:34:fc:0c:fc:80:a6:3c:fb:3d:e5:
4b:7e:8a:84:f1:56:dc:2e:8d:96:8b:e3:4e:ea:c6:
a0:00:dc:36:3a:12:d4:5b:98:d7:d4:4f:f1:cb:72:
dd:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:21:0C:6F:8F:32:06:37:7E:0F:E0:7D:66:59:F0:2C:26:72:40:DF
X509v3 Authority Key Identifier:
keyid:74:72:2F:16:A8:7C:FF:D7:8F:D7:90:50:56:8A:1B:4C:95:9B:12:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHIvFqh8_9eP15BQVoobTJWbEiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f9e9a1-fe52-451a-a154-33f73d9fddb5/1/dHIvFqh8_9eP15BQVoobTJWbEiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f9e9a1-fe52-451a-a154-33f73d9fddb5/1/dHIvFqh8_9eP15BQVoobTJWbEiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:4c:71:10:b9:ad:ae:3c:41:6f:08:79:3e:d4:9c:bc:75:43:
a3:7a:c0:80:d6:df:d3:c2:bd:bd:de:67:fd:0e:0e:bb:8c:22:
0c:53:ff:8e:d3:61:88:5a:a0:64:c6:e2:a8:09:5d:ba:d6:7e:
5c:39:cd:61:f0:cb:2f:09:0c:2e:d8:39:e1:06:b0:40:0d:11:
ff:a2:34:62:96:1d:1d:a2:38:71:2b:ae:7c:b5:21:54:22:b0:
6c:5d:77:2c:0f:fe:15:78:6c:f3:05:f1:38:b9:b6:31:25:f9:
55:7c:b5:20:77:60:23:5d:f9:f0:ab:4e:69:07:e3:e2:f4:3a:
58:bd:dd:59:05:56:14:7f:de:8a:3d:96:3a:bf:fe:7b:0c:1a:
ec:97:17:13:07:1a:78:82:15:8d:b0:77:9f:82:de:70:b3:80:
a8:30:6b:25:a0:39:c3:e2:39:71:15:7e:b2:ff:b3:19:9b:9b:
57:96:e8:ea:72:15:d4:9b:bb:c5:2f:db:ea:13:cf:5f:6b:92:
17:5b:e6:cd:5b:e0:bd:3b:28:be:96:c1:3d:f5:1b:0e:cf:28:
20:14:5a:29:37:c9:b7:7e:7a:3b:cf:5a:61:c6:be:53:fc:d0:
f8:b2:7a:01:ca:8c:42:ec:d5:68:88:98:7e:e3:19:f3:d0:b1:
d3:a7:4c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:30:28 2025 by rpki-client