
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.mft
File: pByW6THu5BuJnWLH24NjNEajxCs.mft (raw, json)
Hash identifier: kXR55qdqiUmTCHDvM21bTBAkbw623O0Mk33w32Xlw0A=
Subject key identifier: 29:09:A4:4E:A0:A6:D9:38:5F:6D:28:D1:3E:AF:34:03:D7:54:1D:49
Authority key identifier: A4:1C:96:E9:31:EE:E4:1B:89:9D:62:C7:DB:83:63:34:46:A3:C4:2B
Certificate issuer: /CN=a41c96e931eee41b899d62c7db83633446a3c42b
Certificate serial: 0196748C0F19FFF325CF79080D160E6BD349
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pByW6THu5BuJnWLH24NjNEajxCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.mft
Manifest number: 150E
Signing time: Sun 27 Apr 2025 00:00:57 +0000
Manifest this update: Sun 27 Apr 2025 00:00:57 +0000
Manifest next update: Mon 28 Apr 2025 00:00:57 +0000
Files and hashes: 1: 9Y_dJTvHqJ6_O2HDQsdb4YPQOPM.roa (hash: C4dGnq5v0d5/X1v0Ow3x2iZJ1sOJLLWISEpoXWZpLas=)
2: pByW6THu5BuJnWLH24NjNEajxCs.crl (hash: ly6A/KgpzjKZ3fkVrgRsJOb8cRZXS8/lYaUVzFaiVDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pByW6THu5BuJnWLH24NjNEajxCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 00:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8c:0f:19:ff:f3:25:cf:79:08:0d:16:0e:6b:d3:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a41c96e931eee41b899d62c7db83633446a3c42b
Validity
Not Before: Apr 27 00:00:57 2025 GMT
Not After : Apr 28 00:00:57 2025 GMT
Subject: CN=2909a44ea0a6d9385f6d28d13eaf3403d7541d49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:78:9e:29:b8:48:83:df:83:c3:db:04:0d:29:
37:29:03:46:63:77:e3:90:ea:39:b4:bc:5e:9b:87:
30:a7:b2:81:ad:9f:df:18:a6:69:72:f3:5a:6b:7b:
40:df:a7:b8:65:65:b0:96:f6:9a:e0:c3:39:ed:91:
ee:57:e0:49:6f:96:2b:4d:2e:8b:ef:e4:58:bc:42:
48:2c:c0:8d:4d:6d:94:a0:8a:c6:6f:a5:a9:23:08:
14:ca:c4:3f:12:36:24:4a:c7:29:4c:49:58:a4:14:
f5:a0:b4:20:4f:5e:5e:ec:d8:80:e3:00:3a:43:b4:
b8:a5:6a:c6:b6:5b:4a:44:29:c9:77:c7:95:49:50:
b1:c7:d2:d8:e5:bc:72:9e:19:91:a2:38:ea:ad:2e:
b5:a7:32:70:ad:b4:09:70:b6:8c:e4:63:b3:b3:78:
6b:55:f3:54:a4:e7:d4:5d:fc:16:ce:8d:9c:79:84:
2b:7b:f3:49:b5:dd:c9:d1:90:97:04:4e:ee:44:2c:
c3:c8:8c:fc:65:eb:18:bd:5d:4d:b9:78:70:ac:0d:
7a:a6:dd:ca:7b:77:26:b0:84:dd:f6:5a:50:cb:17:
7c:c1:9d:d9:88:b6:d7:b2:bf:e9:89:02:c5:9b:a6:
72:5b:ed:7f:a0:c9:4e:74:c5:b0:9a:4d:29:c0:22:
30:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:09:A4:4E:A0:A6:D9:38:5F:6D:28:D1:3E:AF:34:03:D7:54:1D:49
X509v3 Authority Key Identifier:
keyid:A4:1C:96:E9:31:EE:E4:1B:89:9D:62:C7:DB:83:63:34:46:A3:C4:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pByW6THu5BuJnWLH24NjNEajxCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:83:84:fe:06:7d:e5:66:ee:9c:7f:6c:f8:27:0f:df:df:85:
b6:78:cc:3b:42:02:c5:f5:e9:76:83:c8:2c:e7:b1:ca:c9:ff:
f3:47:32:3e:2e:38:27:e0:70:8a:51:8b:da:86:bd:79:a8:fe:
34:b4:27:cc:c6:58:8f:ac:91:87:5e:81:8d:29:b7:45:b6:49:
c8:1d:31:31:69:d7:e5:62:83:3f:47:8f:9e:4c:bc:c9:e4:f5:
15:1d:96:d0:4b:45:7e:07:2a:11:a5:ac:5f:86:5b:8c:ac:3b:
61:5d:1a:5f:17:67:46:a0:8d:db:69:21:8d:5e:47:8c:50:9e:
b8:dc:bd:5a:04:88:59:39:67:b2:9a:17:62:9a:9c:fe:a4:9f:
d8:02:7d:b8:3f:62:09:19:b5:38:69:8d:01:f3:db:d8:cb:0e:
7b:fe:73:00:f2:24:c9:52:aa:83:a6:46:51:b4:72:98:81:23:
e6:6e:0d:21:37:20:0c:d6:b0:b3:63:ae:35:df:36:0e:85:46:
60:ab:e7:db:15:19:d6:bd:03:cb:fe:33:70:29:d3:d6:47:ee:
ba:85:58:7d:fc:96:de:9b:e7:8b:49:b1:11:8b:01:03:ec:ce:
33:f4:7c:a3:2e:b6:a3:0b:b5:8a:06:6e:68:35:62:98:0c:74:
f7:7e:15:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:32:39 2025 by rpki-client