Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft
File: Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft (raw, json)
Hash identifier: SlHuW6d1vTiQMQBozP9AJ2le+Zr61LtXvLhS5tO6aZQ=
Subject key identifier: F6:1F:92:06:F2:50:E2:EC:47:EA:51:B5:A7:E6:E1:0D:74:35:A9:9C
Authority key identifier: 4A:97:BC:50:4F:30:75:FB:4F:39:23:64:08:C1:C2:D5:47:B4:4C:26
Certificate issuer: /CN=4a97bc504f3075fb4f39236408c1c2d547b44c26
Certificate serial: 01967F0F6494290D0099EEAEC763FF43B62D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Spe8UE8wdftPOSNkCMHC1Ue0TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft
Manifest number: 0921
Signing time: Tue 29 Apr 2025 01:00:37 +0000
Manifest this update: Tue 29 Apr 2025 01:00:37 +0000
Manifest next update: Wed 30 Apr 2025 01:00:37 +0000
Files and hashes: 1: 63RWpTzYaUMklcl62HBy6xUd3L4.roa (hash: Un1n3GmyQj6VVqYhoRSHcYh85a7qnY1jg5MCSUwKUTc=)
2: Spe8UE8wdftPOSNkCMHC1Ue0TCY.crl (hash: 4vbx2MLBC1+riQj8ArhUNcf6B+y8sPsyTBTCsBhw6+Y=)
3: XoKGaT2Y4cimov2MwIZbMUFcNik.roa (hash: nUamhX6MnewzR6j8dYV1oqge5T4xxq+U39rAZAcBMTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Spe8UE8wdftPOSNkCMHC1Ue0TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:0f:64:94:29:0d:00:99:ee:ae:c7:63:ff:43:b6:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a97bc504f3075fb4f39236408c1c2d547b44c26
Validity
Not Before: Apr 29 01:00:37 2025 GMT
Not After : Apr 30 01:00:37 2025 GMT
Subject: CN=f61f9206f250e2ec47ea51b5a7e6e10d7435a99c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ec:1c:67:13:c1:fc:c9:6c:3d:4d:50:e3:bf:
1e:f2:46:d9:61:09:fa:81:0e:8b:bd:29:57:52:79:
e0:cd:d1:3c:00:f0:67:76:12:ec:29:3a:ea:0b:bc:
f1:92:bb:74:7c:c6:38:90:5c:82:90:ce:6c:9d:6d:
8a:fb:f3:74:c8:c6:44:8e:c8:00:64:7e:c1:92:d2:
92:79:a2:9a:17:86:cf:f3:2d:31:ce:76:b0:1e:a8:
eb:69:0c:78:d4:ae:23:69:f2:e2:fe:85:bf:74:c8:
2a:99:e7:a2:aa:5b:2b:0f:cd:9f:ec:4e:55:56:d8:
c2:b8:9f:b3:20:93:22:b7:75:8d:37:7f:9e:7f:b8:
4f:0b:fc:c1:9d:ab:10:42:56:49:00:70:a6:33:6a:
be:ae:6c:2e:3a:d9:42:85:d9:be:e3:8d:f9:85:d4:
ff:ad:18:66:53:00:2b:e3:d5:01:b5:35:fe:a1:04:
44:a3:15:8a:f0:1f:aa:17:4d:d1:fc:fa:3e:34:34:
44:be:8a:cf:32:16:e6:36:73:85:c9:f3:52:f2:5d:
14:4e:83:a4:70:5f:ff:8a:66:20:c3:de:98:ee:28:
73:82:3f:7f:89:ce:dc:e7:ec:94:b6:10:49:90:6c:
db:a7:9a:2f:bb:3c:ea:c7:ad:28:dc:5a:a0:b2:1d:
fc:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:1F:92:06:F2:50:E2:EC:47:EA:51:B5:A7:E6:E1:0D:74:35:A9:9C
X509v3 Authority Key Identifier:
keyid:4A:97:BC:50:4F:30:75:FB:4F:39:23:64:08:C1:C2:D5:47:B4:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Spe8UE8wdftPOSNkCMHC1Ue0TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:fd:cb:5d:6a:7d:cf:fb:bd:31:ac:44:f0:ca:03:65:2c:1e:
19:a0:83:3b:5f:64:5e:3e:bc:79:44:12:34:0e:79:be:a0:6c:
dc:63:5c:83:fa:2f:0a:c6:0a:83:d7:7b:9a:e7:70:40:38:8c:
c6:dd:0b:07:6b:43:60:6d:e8:74:e4:03:6f:6c:b3:32:d7:43:
06:8f:e3:48:42:89:e1:df:a0:af:a9:b9:f6:20:de:a4:19:03:
69:70:10:68:09:3d:9a:ac:29:d0:b4:68:52:90:06:aa:aa:d8:
f1:a8:48:02:99:bc:70:5b:59:20:05:e4:e1:66:5a:72:72:e4:
69:c9:66:e4:70:b7:b3:4a:9c:77:8b:5f:94:68:c1:8c:e5:e0:
c3:59:2d:0b:0e:1d:c9:4b:a6:e5:d7:c7:96:6b:99:17:51:52:
3b:21:26:7e:2a:82:4d:46:e1:50:b2:bb:82:ec:e0:4c:e3:d7:
e0:18:0b:28:5e:75:1d:3b:45:ce:f8:8e:88:25:29:35:c6:88:
ad:3e:7c:b2:99:b1:ae:5a:96:ab:e8:6d:9a:86:dc:49:e4:cb:
89:77:d0:cd:26:4a:2c:30:fe:62:da:41:86:34:8d:9c:08:15:
67:b4:da:6e:a3:90:da:d1:39:44:b6:76:33:1f:f0:8c:6f:4e:
a4:6f:30:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:47:16 2025 by rpki-client