Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft
File: cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft (raw, json)
Hash identifier: 5qb3hCXilEAVfkLs0nrlegIY/0JgM13a4KSQIYMvjng=
Subject key identifier: A8:6E:61:99:EC:82:9C:1A:89:4C:C1:CE:D6:5A:1C:77:A9:B5:65:BD
Authority key identifier: 71:2F:F1:1D:D0:C6:6C:E6:7F:E0:F1:D7:49:C0:90:9E:F3:41:8D:29
Certificate issuer: /CN=712ff11dd0c66ce67fe0f1d749c0909ef3418d29
Certificate serial: 0196790D5E72C066D9DE0460526723DB7B82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cS_xHdDGbOZ_4PHXScCQnvNBjSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft
Manifest number: 092B
Signing time: Sun 27 Apr 2025 21:00:41 +0000
Manifest this update: Sun 27 Apr 2025 21:00:41 +0000
Manifest next update: Mon 28 Apr 2025 21:00:41 +0000
Files and hashes: 1: cS_xHdDGbOZ_4PHXScCQnvNBjSk.crl (hash: JTSlTJ+7OnCBls9Cu9eP97RL7eNOteXqXaIlVCvq2Xs=)
2: rs9tHLr8zyXOfjLVtvASmrQRyII.roa (hash: TPmV5eCt75VU6HkVEIxwqSqz2UP53y06YcldQPwtkco=)
3: yrE5IOAO5wezku-a_RJR7TB3CkA.roa (hash: 7HAAXilZN5MLFA2Yt1+6x9clHUzDWGtePYkFTFw0/Hk=)
4: zX3z-Ivq7H5_KU4k1lIkOCnGhd0.roa (hash: 0LyNXWO0Wf/6GO5a+bSTGSO0K4OEPsxkW9pcYGNMQq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cS_xHdDGbOZ_4PHXScCQnvNBjSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:0d:5e:72:c0:66:d9:de:04:60:52:67:23:db:7b:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712ff11dd0c66ce67fe0f1d749c0909ef3418d29
Validity
Not Before: Apr 27 21:00:41 2025 GMT
Not After : Apr 28 21:00:41 2025 GMT
Subject: CN=a86e6199ec829c1a894cc1ced65a1c77a9b565bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d4:4d:ec:57:5b:e4:b5:49:87:98:67:c6:ab:
72:9b:a9:fc:a6:02:4c:9c:3c:f3:38:2f:11:ef:de:
fb:91:9c:64:b9:61:b6:d7:53:67:32:cf:c5:36:37:
48:38:c7:82:06:40:96:7f:30:75:15:32:31:52:a4:
3a:fd:d5:92:43:ae:66:20:26:6a:c0:8b:dc:85:69:
93:ea:04:fe:8a:a4:9f:5f:53:23:6a:bc:06:7e:f0:
d2:61:2d:d3:ea:bb:16:36:4f:7d:23:b0:51:50:d3:
df:cb:12:fd:4e:1e:4a:6c:75:ef:8f:9f:3e:08:0d:
7b:ba:cd:68:12:6b:7a:e4:67:07:f9:04:5a:47:b2:
e3:c4:73:7d:80:ec:d6:f9:7c:9d:07:76:46:15:71:
d9:a8:b4:ab:4c:cc:71:ba:2e:ed:d3:b5:3e:cf:36:
b5:65:8b:25:ee:8e:64:3a:fd:61:4d:fb:6d:b2:2a:
7f:e3:a9:ac:1e:4e:f0:b5:17:ed:57:f2:74:3d:22:
91:1b:6b:92:3e:62:7b:44:58:2d:ad:06:64:91:e1:
54:19:29:15:e4:29:bc:3f:e4:52:e2:f4:03:6c:11:
f9:c5:95:6b:bf:13:20:fe:6a:ee:4a:8e:00:e6:1a:
33:ba:a3:38:64:1c:c1:78:d2:bf:1e:5c:53:30:fa:
92:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:6E:61:99:EC:82:9C:1A:89:4C:C1:CE:D6:5A:1C:77:A9:B5:65:BD
X509v3 Authority Key Identifier:
keyid:71:2F:F1:1D:D0:C6:6C:E6:7F:E0:F1:D7:49:C0:90:9E:F3:41:8D:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS_xHdDGbOZ_4PHXScCQnvNBjSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:aa:8e:d5:60:9d:b0:34:61:3d:ac:ef:f2:f9:8d:97:ea:31:
c0:bf:b0:75:53:2e:f9:2b:e0:56:23:05:05:71:78:5a:ba:0d:
bb:d6:76:fe:aa:90:08:c7:c7:1b:a2:c4:77:a4:e7:ac:45:87:
3c:d2:92:ef:62:53:4b:a2:82:a2:0f:71:30:c7:b0:cd:d8:cd:
7b:5e:0d:4f:13:16:dd:46:9d:8f:a0:d0:63:d7:f7:0c:ea:14:
db:22:31:3d:5a:e3:d0:38:b9:68:73:f6:91:fe:47:c4:c6:e4:
25:68:4c:c3:ea:37:9b:a0:f4:2f:1e:79:33:58:74:4d:da:04:
65:a5:56:fe:bd:cd:82:16:78:4f:7f:17:04:ba:50:9f:00:95:
e8:c6:a2:21:c7:9b:21:9f:2a:3f:66:69:e3:1a:bd:b6:de:a3:
04:91:e6:5e:3f:bd:7e:ce:99:09:c0:69:6c:71:08:6a:8f:99:
15:ec:b4:55:54:2a:0c:25:44:af:74:78:06:94:1f:77:78:be:
d5:2b:8b:da:a4:d8:81:b4:ca:64:6a:ea:e9:89:5e:25:63:e8:
88:04:26:13:ad:8c:73:e3:43:88:1e:0c:c6:3f:14:19:02:7d:
74:bf:b3:cf:52:5c:2d:d3:24:18:56:58:53:b4:d2:0a:9b:86:
45:34:32:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:29:56 2025 by rpki-client