Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.mft
File: mmCuS92dbvum6hHGBzfLoC3PHmA.mft (raw, json)
Hash identifier: T3FLWrPHsmorLj7eEadahB0OTIpdU88wDoMzIw2U5dQ=
Subject key identifier: 64:A3:2E:B5:BE:3C:E8:02:EF:1C:A8:2E:39:68:4C:47:01:8D:DB:FD
Authority key identifier: 9A:60:AE:4B:DD:9D:6E:FB:A6:EA:11:C6:07:37:CB:A0:2D:CF:1E:60
Certificate issuer: /CN=9a60ae4bdd9d6efba6ea11c60737cba02dcf1e60
Certificate serial: 01967642D8837320EB9704A416A1AF55D9F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mmCuS92dbvum6hHGBzfLoC3PHmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.mft
Manifest number: 07D3
Signing time: Sun 27 Apr 2025 08:00:14 +0000
Manifest this update: Sun 27 Apr 2025 08:00:14 +0000
Manifest next update: Mon 28 Apr 2025 08:00:14 +0000
Files and hashes: 1: mmCuS92dbvum6hHGBzfLoC3PHmA.crl (hash: m92siKK6pfHW98uWxQl/DNQE+NcjagwAiL82cblITcs=)
2: u1q93eogqq8ewSFI28D24ujX7vQ.roa (hash: pvm3GrE3J/VbhZBCkLiKY82QF1T8mhNfTTlLlGr7usY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mmCuS92dbvum6hHGBzfLoC3PHmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:42:d8:83:73:20:eb:97:04:a4:16:a1:af:55:d9:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a60ae4bdd9d6efba6ea11c60737cba02dcf1e60
Validity
Not Before: Apr 27 08:00:14 2025 GMT
Not After : Apr 28 08:00:14 2025 GMT
Subject: CN=64a32eb5be3ce802ef1ca82e39684c47018ddbfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e2:69:5a:a5:36:1a:ff:86:64:7f:c8:a7:11:
8f:f6:d0:89:e9:82:d7:4e:69:12:36:dc:51:31:ef:
3e:c0:d6:9a:95:1c:9d:46:4b:d2:44:cd:f4:1b:c9:
72:85:ec:f0:7f:1a:fe:4e:5c:33:c8:c4:46:96:41:
40:a3:9d:66:7d:70:53:2d:ad:e2:3b:c7:8b:fa:db:
ed:f9:07:d1:fc:fc:40:13:41:64:83:e1:d6:58:da:
3c:41:90:5d:5c:8d:a9:b3:25:f1:49:07:2a:c0:2c:
f6:05:0f:ce:9f:c3:d2:47:39:a4:11:95:f1:e7:3a:
62:64:bf:0f:1d:a4:54:ac:92:a7:07:0e:cf:f4:6a:
f5:6e:8a:0f:15:6a:92:4a:d9:3d:7e:49:39:b8:fa:
60:10:8b:a1:f6:70:53:06:50:80:47:85:05:42:7e:
4b:1f:c0:8b:b1:53:c7:45:a2:fd:17:79:06:7a:88:
e3:f4:22:bf:29:52:5b:2f:09:a8:d2:d2:da:82:14:
ec:ab:47:61:6d:8d:d8:85:6e:6e:71:9b:70:c9:3f:
2a:2e:dd:84:65:8e:86:7a:5a:5c:ab:bc:3c:7e:72:
55:eb:47:c5:2b:e1:c3:df:8e:5e:68:6b:bb:a3:e7:
47:23:d6:12:f6:8f:fb:6c:f2:9e:40:5a:29:ed:47:
eb:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:A3:2E:B5:BE:3C:E8:02:EF:1C:A8:2E:39:68:4C:47:01:8D:DB:FD
X509v3 Authority Key Identifier:
keyid:9A:60:AE:4B:DD:9D:6E:FB:A6:EA:11:C6:07:37:CB:A0:2D:CF:1E:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmCuS92dbvum6hHGBzfLoC3PHmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:33:24:25:b2:a2:f5:86:39:8e:7b:cf:4d:df:3f:25:55:5c:
17:26:b4:b6:b1:3d:01:ca:7c:84:d7:7a:ac:9b:eb:93:ab:48:
d4:6f:38:ca:38:ee:36:52:46:ae:2f:80:30:df:9a:85:96:c2:
02:16:bb:e7:7a:9e:71:09:6c:7f:01:a8:ec:d6:48:25:82:bf:
0c:c9:36:15:69:bf:0f:3b:cc:07:b4:d2:39:54:72:13:8c:9c:
d2:71:57:57:00:a0:25:79:a4:c4:51:de:c7:bb:1c:21:85:ff:
e3:99:9b:7d:33:d8:54:c1:0c:e3:b7:5f:cc:7b:ed:67:61:39:
0a:bd:7b:34:be:d4:c7:e1:dd:9b:72:32:65:5c:9a:42:0a:46:
c6:e9:1f:d4:b0:15:42:1d:b2:a1:1a:be:46:be:c6:7e:7d:af:
e0:a8:4b:5a:e4:ff:02:3f:02:a5:26:53:42:72:4c:06:79:0a:
52:63:de:01:7e:71:31:16:c3:65:0f:10:35:67:9b:05:96:fa:
b3:83:65:43:44:a6:aa:77:2f:83:97:82:13:40:e8:7b:25:4e:
40:17:62:21:01:f5:99:ae:97:f7:1a:ed:e1:3f:8c:a8:bd:1b:
66:42:69:ff:0b:45:7e:16:82:73:be:66:bc:e7:21:24:4e:92:
ed:bc:70:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:33:26 2025 by rpki-client