Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.mft
File: 1-eAKvhhKYlt2-NH7zu-Beq9xQVs.mft (raw, json)
Hash identifier: 8S0r+/Wgc+LmRaC7SLqcq4BmyV/ZJEAXtEuJxZqr6w8=
Subject key identifier: 5C:02:7F:C7:66:83:78:1D:7E:24:72:C7:5A:13:C6:8A:71:A6:DD:4B
Authority key identifier: F9:E0:0A:BE:18:4A:62:5B:76:F8:D1:FB:CE:EF:81:7A:AF:71:41:5B
Certificate issuer: /CN=f9e00abe184a625b76f8d1fbceef817aaf71415b
Certificate serial: 0196760CD9C0AA4D3E68662858352E93291B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.mft
Manifest number: 0413
Signing time: Sun 27 Apr 2025 07:01:15 +0000
Manifest this update: Sun 27 Apr 2025 07:01:15 +0000
Manifest next update: Mon 28 Apr 2025 07:01:15 +0000
Files and hashes: 1: 1-eAKvhhKYlt2-NH7zu-Beq9xQVs.crl (hash: /g1Fp/7QxW0M3p5e5o7wHKuohnFO0c4I734MEtsycHI=)
2: 9QHkwH3XoDFhii5_H5-wevfnn0w.roa (hash: vBY1ZnWKVkF95bYClA+BXEDvlx1Nx1rI/kqfnvMGLFw=)
3: NHqj8wB10WSekKQpmh-HseccI8I.roa (hash: L+izevOgWXTJAUEusaUxSyDXId3hMIswTW9GC9CMwnw=)
4: VDPu88hH8S8YAOXUCG9WApGM4Ak.roa (hash: 4CZLCtvGc/kQTFKa66ISm8BXViC73GORAMW68kpOvho=)
5: oQ8sIcgXpXuSUG7cNHtxBRazqc0.roa (hash: AjGNR5wRMBSzjpjmL0iwZdQfVi3IKmsNzSO+kwX6G8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:d9:c0:aa:4d:3e:68:66:28:58:35:2e:93:29:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9e00abe184a625b76f8d1fbceef817aaf71415b
Validity
Not Before: Apr 27 07:01:15 2025 GMT
Not After : Apr 28 07:01:15 2025 GMT
Subject: CN=5c027fc76683781d7e2472c75a13c68a71a6dd4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c7:29:bd:e6:17:31:dc:b2:9e:88:6b:6f:7b:
64:27:74:c0:1d:01:83:0d:3f:1a:8e:a8:59:57:cc:
9a:06:48:e8:99:89:2d:09:5d:37:e2:7e:aa:f0:93:
59:18:9c:be:29:6e:65:74:8b:a0:65:a6:2b:db:39:
2f:6e:0c:fe:df:a0:79:44:7f:38:71:24:b1:f8:32:
fe:05:2f:5d:1e:fa:0e:0c:33:18:19:5a:cc:94:b2:
2f:2c:b6:a4:61:e0:f9:11:9c:5c:31:41:18:aa:50:
4c:1e:1f:04:3f:ab:43:c5:11:a0:9f:6d:dc:9d:9c:
fe:a9:0c:90:fb:6f:ca:af:a2:9a:03:41:ec:ac:e7:
77:61:ed:42:fc:d4:09:1a:c0:ce:2a:be:38:9d:9b:
ca:1f:38:c1:78:40:af:42:3e:1e:61:23:e5:09:73:
c8:7c:83:6f:22:40:c4:3f:fe:ef:f7:0a:1e:8f:31:
f8:4d:5f:4d:6c:e1:b1:f0:f3:9f:b6:22:a5:c7:cb:
5d:75:cd:91:c5:5f:b1:7d:8f:42:4d:34:21:8b:4d:
cd:9b:08:0e:ee:11:32:d7:41:76:e8:21:61:2d:ab:
ee:99:17:4b:a6:57:f0:2b:f9:c0:4c:8a:df:f3:5e:
a6:a7:b8:74:44:29:ac:c5:9d:13:66:23:10:66:81:
dc:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:02:7F:C7:66:83:78:1D:7E:24:72:C7:5A:13:C6:8A:71:A6:DD:4B
X509v3 Authority Key Identifier:
keyid:F9:E0:0A:BE:18:4A:62:5B:76:F8:D1:FB:CE:EF:81:7A:AF:71:41:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:c0:a2:f8:c9:aa:60:1f:cb:5d:09:f4:8b:bb:91:f3:f6:09:
d9:0e:8a:72:14:a7:38:25:48:5b:c2:5a:4d:cc:65:37:ef:7f:
1f:70:0d:33:0b:89:bb:aa:11:b4:0a:a8:d1:8b:56:e4:80:cb:
90:7e:cd:b3:0a:78:58:8c:e5:36:4c:69:0a:3b:80:2b:88:6a:
b2:ea:6b:72:8b:c9:87:b5:9b:34:b0:79:49:05:3f:64:1a:62:
0b:c7:48:0c:99:3a:3e:01:47:da:6f:1f:29:3c:34:25:f9:5b:
6a:04:2d:06:14:cf:fc:35:2b:02:a2:92:2b:07:cf:4f:09:60:
55:5c:26:ce:5e:0c:7f:29:a5:fb:bc:5e:8c:52:5b:9c:b4:73:
c0:7b:22:1f:08:a8:45:1c:71:90:29:6f:d7:78:a2:75:ca:42:
96:a9:d8:a9:17:a5:b2:3e:0b:ef:2f:2b:16:d2:b5:9a:0c:5e:
64:2d:d0:96:0d:e8:5e:28:5e:5e:c7:30:a4:8f:21:10:6b:c5:
85:c0:d4:74:73:85:54:bb:5b:54:08:7e:52:b9:58:64:de:90:
42:3a:5b:b7:40:71:87:51:25:ec:da:46:55:00:89:e2:e8:f6:
92:fb:d3:92:ae:53:ad:58:61:3b:e5:d0:1e:ac:f0:ce:8b:8f:
55:37:6f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:51:40 2025 by rpki-client