Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.mft
File: CxsxjlBXocEDQWB83d2ttG1xq_U.mft (raw, json)
Hash identifier: ISOfVmg0H8x7xB9QEoO7PvtjXBZVBfb3/ELjQn8+6Zg=
Subject key identifier: 09:B2:9F:1F:03:B0:D7:B9:5A:00:9F:08:62:F9:F7:B3:99:EE:BE:88
Authority key identifier: 0B:1B:31:8E:50:57:A1:C1:03:41:60:7C:DD:DD:AD:B4:6D:71:AB:F5
Certificate issuer: /CN=0b1b318e5057a1c10341607cddddadb46d71abf5
Certificate serial: 019678D66A2FC6E1AAA0C0424667F89155BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxsxjlBXocEDQWB83d2ttG1xq_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.mft
Manifest number: 1512
Signing time: Sun 27 Apr 2025 20:00:39 +0000
Manifest this update: Sun 27 Apr 2025 20:00:39 +0000
Manifest next update: Mon 28 Apr 2025 20:00:39 +0000
Files and hashes: 1: CxsxjlBXocEDQWB83d2ttG1xq_U.crl (hash: KFqnN/Wv3M5Dj2084Kc4IN+Ks76v+PsybrFLnglf5AI=)
2: bQ7_HzmWbxe1bpqsnmG8t2z9J54.roa (hash: uTKgZb6MWbd79qCA3p5te2MUGcoD6xRmcaj1CluWZYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/CxsxjlBXocEDQWB83d2ttG1xq_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:d6:6a:2f:c6:e1:aa:a0:c0:42:46:67:f8:91:55:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1b318e5057a1c10341607cddddadb46d71abf5
Validity
Not Before: Apr 27 20:00:39 2025 GMT
Not After : Apr 28 20:00:39 2025 GMT
Subject: CN=09b29f1f03b0d7b95a009f0862f9f7b399eebe88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cb:89:0a:29:86:c7:72:c5:73:94:f7:14:ff:
11:ef:e8:e4:36:d3:cd:49:ee:95:64:7a:27:9c:cf:
71:4d:ba:e5:da:91:1d:d9:47:69:fc:5b:a9:aa:e5:
7b:af:cd:ec:6a:9b:2d:9b:7e:b0:a8:37:74:42:85:
c6:e0:40:d1:4c:c9:89:4e:7a:c0:96:23:ca:9f:17:
76:ba:6c:e7:ce:53:4f:fc:bd:ce:b5:09:f8:e0:d3:
35:e5:48:13:de:f1:01:c5:52:c3:6f:bc:3e:88:4a:
e8:77:29:a0:c0:95:ac:46:9c:67:78:ec:ba:8d:33:
36:ec:e5:7c:0c:b8:f4:42:fe:00:cf:53:f9:7e:fe:
a3:ab:86:bd:8a:24:2d:e3:cd:65:1a:d6:66:59:49:
21:ed:08:7c:16:96:eb:20:36:0f:aa:25:45:fe:ad:
69:b1:ba:61:51:9a:e4:9c:18:4f:a8:29:5f:60:fa:
7a:82:99:23:f0:ce:3c:6b:e6:fa:ba:0b:4b:6f:1d:
fd:c0:8f:5d:d4:f6:d9:2e:0b:4b:f9:4c:81:28:4e:
64:1b:29:51:7f:f5:23:df:c6:26:a9:09:7c:7f:14:
e0:46:02:8e:e3:35:82:82:f5:f6:90:95:70:89:b0:
2e:e9:8c:e8:ad:02:fd:15:f8:1a:5a:9e:08:f5:81:
ee:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B2:9F:1F:03:B0:D7:B9:5A:00:9F:08:62:F9:F7:B3:99:EE:BE:88
X509v3 Authority Key Identifier:
keyid:0B:1B:31:8E:50:57:A1:C1:03:41:60:7C:DD:DD:AD:B4:6D:71:AB:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxsxjlBXocEDQWB83d2ttG1xq_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:76:25:44:dd:12:29:d4:b0:66:92:b8:da:3c:1d:76:5a:5c:
95:4f:7b:8b:b1:19:e7:13:b2:3c:b5:45:f7:2c:10:7d:fb:35:
ce:6f:fd:a6:85:20:98:15:a8:39:54:ba:cd:d1:ba:5a:2b:04:
28:aa:b8:95:2e:ae:ff:6e:3a:42:09:b3:99:b9:03:4b:0a:f2:
38:7b:df:a1:9e:62:78:c8:53:cf:88:c7:30:10:ef:70:4a:69:
73:4e:41:b9:6d:95:a4:ac:ec:db:fb:bd:07:f2:7c:9e:ad:f0:
ad:f6:3d:d8:4d:a1:b9:06:b4:80:24:22:df:aa:30:fb:87:08:
74:ea:24:10:06:d3:ff:7c:56:ad:5e:6e:91:05:87:75:3f:4c:
fd:07:c0:8c:9e:ab:5a:b1:c4:b0:01:0c:78:9b:38:53:f4:e3:
2a:c1:5b:1b:e3:e3:77:2e:bd:1c:bc:61:62:7b:da:bc:66:70:
f3:1a:88:00:f0:79:85:22:95:3a:0b:77:60:ea:84:fa:f1:f6:
71:0e:da:6b:81:15:33:aa:1d:2b:6c:7a:18:24:64:ed:82:fe:
68:36:df:b3:a7:be:8f:fa:df:cc:41:c4:41:b9:e9:29:36:6d:
1f:21:9b:5f:cb:61:3c:02:c5:b1:82:94:cb:a1:d4:e1:7d:cb:
72:72:b6:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:38:51 2025 by rpki-client