Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.mft
File: hX9MEi5PjGAfIcXIaHFtRgidheE.mft (raw, json)
Hash identifier: L/7zkdfQZ1RrPlHCX7RY9uFQ6r3fGcO6u6kzJWhm0J4=
Subject key identifier: 7C:47:A7:39:15:1D:7E:6F:06:0C:B4:8B:8C:5E:19:2D:25:04:34:47
Authority key identifier: 85:7F:4C:12:2E:4F:8C:60:1F:21:C5:C8:68:71:6D:46:08:9D:85:E1
Certificate issuer: /CN=857f4c122e4f8c601f21c5c868716d46089d85e1
Certificate serial: 019686920837CBDF3314347A45A0131C48CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hX9MEi5PjGAfIcXIaHFtRgidheE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.mft
Manifest number: 09DF
Signing time: Wed 30 Apr 2025 12:00:39 +0000
Manifest this update: Wed 30 Apr 2025 12:00:39 +0000
Manifest next update: Thu 01 May 2025 12:00:39 +0000
Files and hashes: 1: hX9MEi5PjGAfIcXIaHFtRgidheE.crl (hash: +tRVI4DLCp0pmVaNEOyWYSqmFIIQ9lzOi/ldL+9awlQ=)
2: wypxlBc1J8Bpx8wsCukzLkT7CzM.roa (hash: VSR04yRc8P3tg6W5nBtOO4BrNXPIDW2s4T0F9VJBzcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hX9MEi5PjGAfIcXIaHFtRgidheE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:92:08:37:cb:df:33:14:34:7a:45:a0:13:1c:48:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=857f4c122e4f8c601f21c5c868716d46089d85e1
Validity
Not Before: Apr 30 12:00:39 2025 GMT
Not After : May 1 12:00:39 2025 GMT
Subject: CN=7c47a739151d7e6f060cb48b8c5e192d25043447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:20:dc:71:32:0b:5f:6b:e7:ff:eb:6d:ca:6d:
c6:ce:c8:43:96:82:7d:8a:56:46:99:f4:d9:41:33:
e4:49:bc:03:82:d2:06:90:2b:30:6d:5c:b1:c1:4b:
ae:ff:72:99:ad:7a:4b:34:4e:3d:9a:cb:f1:ca:c2:
19:9a:b9:71:3c:4a:60:24:5b:f3:4b:27:a7:6b:4a:
a3:9e:f1:27:f6:69:aa:2d:5c:d7:a5:a2:54:72:b6:
f8:26:ca:4b:e2:1e:87:62:24:af:5c:5c:d1:48:49:
35:95:84:61:5f:02:56:1c:4c:f2:71:3e:4b:b3:99:
06:95:6e:3b:fa:7d:ab:ff:25:bd:60:f5:aa:95:2e:
f8:46:3b:ce:6f:94:64:64:ed:b3:37:72:8f:ea:cf:
78:4a:2f:65:54:45:fe:57:fc:5d:a5:d9:1e:41:5a:
9a:06:8f:f5:a6:01:2d:30:53:b9:02:dc:e4:e5:11:
17:b8:34:c7:1e:29:f3:10:d3:86:52:d3:49:10:bc:
c9:90:04:fa:33:d1:83:b8:11:6a:aa:b7:9f:47:50:
b2:c6:10:8e:18:75:b9:b4:a0:ec:0a:85:29:74:5e:
b9:09:cc:3d:85:29:52:18:c1:18:79:54:42:7f:a5:
1c:e4:64:8b:23:7a:f6:f9:e0:d3:7a:e7:68:dd:73:
13:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:47:A7:39:15:1D:7E:6F:06:0C:B4:8B:8C:5E:19:2D:25:04:34:47
X509v3 Authority Key Identifier:
keyid:85:7F:4C:12:2E:4F:8C:60:1F:21:C5:C8:68:71:6D:46:08:9D:85:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hX9MEi5PjGAfIcXIaHFtRgidheE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:3d:b0:64:d4:d5:68:c3:aa:89:75:00:4d:ac:80:64:32:7a:
49:9a:4b:3d:3d:ba:99:f4:ec:37:4e:fc:0c:dd:1d:0a:92:a4:
29:87:79:82:7e:53:77:a7:f3:68:ff:f0:fb:4f:30:b3:61:0a:
16:a9:43:d6:7b:c7:5a:9c:8c:47:3e:cc:f5:48:b0:6a:b4:85:
c9:fe:e1:51:d4:10:ee:bb:27:31:93:a5:38:17:89:a8:c3:95:
39:cd:7c:dc:17:65:a5:9e:34:4d:83:4f:7a:ea:fe:37:4b:a6:
81:0a:8a:ca:ef:22:23:f0:1c:b4:8a:a8:c4:c0:bf:75:46:b0:
fe:d0:2a:38:cd:dc:36:6b:b4:3b:8c:65:7b:ec:33:c2:d5:ab:
bb:26:0d:f5:ff:b5:12:fc:3e:5c:2a:fe:98:bc:fe:ae:99:61:
48:d2:f5:9e:85:ac:39:22:e5:e2:db:8a:24:68:04:d9:78:9d:
79:35:12:c2:e7:15:ab:ec:18:38:8f:6b:c1:f9:2e:4d:20:02:
5b:44:4d:fe:97:c0:e1:4e:b9:2b:68:32:74:b0:d1:87:75:f1:
47:86:62:8f:b7:66:74:ee:0b:57:c5:cb:35:b9:0b:e8:94:76:
9a:d6:42:3f:f6:1b:e5:b5:bf:b0:ff:69:47:f4:77:41:be:03:
2b:8c:b4:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 14:00:13 2025 by rpki-client