Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/3f0083-59d7-433a-905a-47b1bdf8d530/1/sTlxv-p41qpbSe1aw1x3tqMKCJQ.mft
File: sTlxv-p41qpbSe1aw1x3tqMKCJQ.mft (raw, json)
Hash identifier: Cs+KSkw2CCxdVM8o9Andz9DMwvTGtBouCh60f+CNC38=
Subject key identifier: 0B:F5:E7:13:96:31:B5:24:53:BD:5C:6C:A1:47:00:1A:C8:ED:82:78
Authority key identifier: B1:39:71:BF:EA:78:D6:AA:5B:49:ED:5A:C3:5C:77:B6:A3:0A:08:94
Certificate issuer: /CN=b13971bfea78d6aa5b49ed5ac35c77b6a30a0894
Certificate serial: 01968B4B495E474A474677B0E211F927ED93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sTlxv-p41qpbSe1aw1x3tqMKCJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/3f0083-59d7-433a-905a-47b1bdf8d530/1/sTlxv-p41qpbSe1aw1x3tqMKCJQ.mft
Manifest number: 09FE
Signing time: Thu 01 May 2025 10:01:29 +0000
Manifest this update: Thu 01 May 2025 10:01:29 +0000
Manifest next update: Fri 02 May 2025 10:01:29 +0000
Files and hashes: 1: Ewu_L9NGAMIn9J1bD2mKPYHfLN0.roa (hash: MPg//qxTuFJeVfIte2bOUUVJ5G8w+mQ6T68mV0V7xWY=)
2: sTlxv-p41qpbSe1aw1x3tqMKCJQ.crl (hash: Dqwi20cWpbxRXeWo4/LitULJ5XcM7U+2f66nwBPbELc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/3f0083-59d7-433a-905a-47b1bdf8d530/1/sTlxv-p41qpbSe1aw1x3tqMKCJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/3f0083-59d7-433a-905a-47b1bdf8d530/1/sTlxv-p41qpbSe1aw1x3tqMKCJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sTlxv-p41qpbSe1aw1x3tqMKCJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:4b:49:5e:47:4a:47:46:77:b0:e2:11:f9:27:ed:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b13971bfea78d6aa5b49ed5ac35c77b6a30a0894
Validity
Not Before: May 1 10:01:29 2025 GMT
Not After : May 2 10:01:29 2025 GMT
Subject: CN=0bf5e7139631b52453bd5c6ca147001ac8ed8278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5e:84:c8:63:1b:c5:05:49:e0:7d:41:06:ee:
f4:bf:15:a7:3f:cd:23:4c:de:96:00:a0:33:40:30:
78:7b:0f:5d:51:42:28:51:de:81:2c:2c:ec:88:5e:
5c:5d:67:9d:e4:23:30:1f:35:9b:3f:7d:f7:5f:02:
e9:d7:b8:ed:13:2a:1b:1f:10:8c:cb:7b:78:23:24:
68:d3:f4:c9:83:2b:0c:f4:34:4e:d1:6b:47:b1:0c:
d0:06:f2:69:70:5f:d4:aa:f0:79:6f:ef:92:ac:66:
c0:bc:51:43:47:ec:ca:1e:80:c1:ce:27:83:e2:30:
c5:68:0f:65:99:8c:c7:3f:64:90:c4:1d:18:fc:60:
b5:85:a4:3c:a5:38:4e:e9:53:4a:93:f9:66:a2:5b:
bf:9c:5d:32:13:a0:6f:5a:c6:0a:1d:82:e4:68:b4:
db:bd:49:80:07:e2:4f:72:60:68:0e:ba:53:80:c5:
1e:e2:86:f8:a8:8e:6b:0b:b0:db:2c:0a:f2:b5:65:
e5:6b:0d:63:92:11:0e:ca:3b:90:2d:cd:c5:58:1a:
aa:7f:8e:4b:61:5a:1b:49:a4:be:28:ef:fe:d1:ab:
2f:3f:ea:1b:45:8a:7b:a8:2e:01:7a:04:78:05:04:
0c:48:df:54:84:59:20:ef:20:41:c2:2e:62:37:dd:
b3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:F5:E7:13:96:31:B5:24:53:BD:5C:6C:A1:47:00:1A:C8:ED:82:78
X509v3 Authority Key Identifier:
keyid:B1:39:71:BF:EA:78:D6:AA:5B:49:ED:5A:C3:5C:77:B6:A3:0A:08:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sTlxv-p41qpbSe1aw1x3tqMKCJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/3f0083-59d7-433a-905a-47b1bdf8d530/1/sTlxv-p41qpbSe1aw1x3tqMKCJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/3f0083-59d7-433a-905a-47b1bdf8d530/1/sTlxv-p41qpbSe1aw1x3tqMKCJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:c8:41:6e:28:e6:27:01:52:89:0f:a3:3d:ab:c8:5e:40:fc:
b7:d3:6a:21:90:1b:98:a8:70:70:95:2d:d2:7b:3f:fb:8e:b9:
c5:d4:59:0e:4b:34:43:58:64:c4:c2:cf:f4:0e:37:39:f7:f2:
91:e0:af:be:51:99:35:46:02:b8:3c:5a:66:8a:8e:d6:83:e0:
45:f1:dd:9b:4a:f8:f6:a9:d3:4e:85:b6:63:88:be:db:ac:71:
5a:c3:a9:20:cc:b6:da:0d:be:04:ce:04:89:9e:96:32:54:0b:
85:8d:80:bb:4c:0c:2d:cb:c3:10:9e:ad:e0:1f:cc:a9:36:f1:
0e:c9:45:61:c3:89:8a:88:19:1f:58:35:16:c4:68:88:d5:05:
82:6e:55:9e:1f:4d:7d:c4:91:63:1c:e9:3f:a3:f4:5c:b7:39:
74:9c:98:ed:76:fe:52:00:6f:e4:b1:ba:57:2c:17:f9:f0:52:
26:35:2a:ee:70:9a:0a:1e:e4:77:4f:f9:92:11:eb:6b:c0:03:
76:dd:52:06:06:b6:22:a5:e3:84:3d:ba:0c:b4:14:2b:98:f4:
e4:24:91:8a:2b:c6:1d:fb:e0:d0:af:4b:5a:65:21:b2:df:21:
29:28:2c:aa:cb:8c:7b:50:44:d5:62:59:1a:f6:da:83:39:db:
9f:f0:a0:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 17:24:35 2025 by rpki-client