Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.mft
File: CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.mft (raw, json)
Hash identifier: 7DLXjXiocU0bWlxzQSq23a7QRgyILCWOzwLr5eJADF8=
Subject key identifier: 92:AF:42:08:A3:27:E3:EF:70:28:73:7C:3F:E6:5B:18:19:5C:E1:CF
Authority key identifier: 09:B4:BF:37:F3:9E:EC:62:98:2C:4B:63:70:9F:AB:5D:14:6C:73:73
Certificate issuer: /CN=09b4bf37f39eec62982c4b63709fab5d146c7373
Certificate serial: 01967F45EED4C506492044D3A49D421719B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.mft
Manifest number: 1513
Signing time: Tue 29 Apr 2025 02:00:11 +0000
Manifest this update: Tue 29 Apr 2025 02:00:11 +0000
Manifest next update: Wed 30 Apr 2025 02:00:11 +0000
Files and hashes: 1: CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.crl (hash: 0w0IP7bappt/efXIcBm2BCBytT7T0TpUGWkkHcMZfwU=)
2: UmI6d2m9R3iczzZVeRe1gk47NKM.roa (hash: RX415hlrT0LruVY1Id4UgU7KARGGjtNq2cWbFexDoVY=)
3: kKi1E3PbMMVFH7DkXfoL7bN1Y8Y.roa (hash: KU0qbsM0A1KDDa+DQi187g2Fd0zrIojzhDbTUg8nXDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:45:ee:d4:c5:06:49:20:44:d3:a4:9d:42:17:19:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09b4bf37f39eec62982c4b63709fab5d146c7373
Validity
Not Before: Apr 29 02:00:11 2025 GMT
Not After : Apr 30 02:00:11 2025 GMT
Subject: CN=92af4208a327e3ef7028737c3fe65b18195ce1cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:49:2d:83:70:86:53:a3:d4:85:7a:f0:06:37:
8c:ba:3b:1a:e9:c6:6f:0f:1b:e5:ed:f9:81:94:b7:
8d:fc:6e:80:86:10:c1:aa:5a:45:b4:e5:d8:f7:50:
a4:a2:da:22:67:94:6c:b2:f1:94:2b:d2:e9:74:55:
fe:c3:f5:da:79:79:ef:0c:c9:63:0a:4a:02:b0:4b:
f7:4d:65:f0:2f:47:00:eb:08:3f:4c:3c:f9:5f:f5:
b7:d7:f2:25:49:9d:ed:8e:17:e4:bc:77:15:3a:98:
20:26:9a:54:6d:72:d1:e0:3a:9f:81:ca:6d:e5:33:
3f:9f:8b:e9:78:b6:b7:02:bf:3e:2c:64:f9:8e:80:
c6:8f:6d:a6:98:b1:96:99:b4:e7:50:fe:8b:af:50:
7a:91:43:9c:63:18:f4:6d:51:e3:d2:13:88:e2:91:
fd:81:50:46:b0:d5:80:b2:8b:5a:e6:24:1a:fc:aa:
eb:c0:7c:fa:6d:ac:f2:e0:9d:c1:f4:22:7a:da:31:
eb:a3:ec:41:11:b9:85:85:b9:d6:a0:45:78:42:63:
6f:f5:65:e3:22:62:c2:9b:22:1d:c8:04:53:65:5c:
92:86:17:ab:0a:6a:be:53:c5:96:a8:38:ec:29:bf:
b4:be:c4:67:2d:c7:a6:09:8e:ae:8a:36:59:99:05:
9d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:AF:42:08:A3:27:E3:EF:70:28:73:7C:3F:E6:5B:18:19:5C:E1:CF
X509v3 Authority Key Identifier:
keyid:09:B4:BF:37:F3:9E:EC:62:98:2C:4B:63:70:9F:AB:5D:14:6C:73:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:e6:24:df:49:0a:36:59:e9:ec:18:f0:ac:91:ef:8a:da:89:
78:74:db:35:f1:48:8e:95:0e:0f:dc:36:91:67:c6:8c:d6:e5:
83:e6:e4:86:0f:0e:21:3a:60:3f:fc:a4:2b:74:2e:c9:a9:87:
2d:fa:2c:4a:b7:36:05:4d:00:ac:ed:59:54:39:09:10:d3:91:
f0:82:43:56:f2:2e:0b:38:72:e2:45:3e:21:68:e1:5a:67:8b:
9b:56:a3:04:c1:ba:96:e3:17:ad:01:d2:57:a2:d9:2b:b7:98:
70:a8:22:e7:48:a2:4f:43:70:ee:a9:fb:be:61:28:c4:ec:00:
56:2f:c2:b8:d6:dd:6d:88:fa:82:8f:05:2e:e6:2a:0e:4b:9a:
aa:39:c2:cc:8d:a4:22:66:90:4e:0a:68:f6:f6:85:7f:8f:b0:
5b:fa:7c:8d:1a:0b:64:5b:5c:0b:82:be:2d:1f:30:cf:47:39:
46:fb:3d:ba:df:95:cc:e2:80:09:58:d1:0d:6f:6d:71:b5:d2:
a5:c7:29:02:b6:4f:ac:4c:0e:49:c2:67:ee:56:dc:02:ea:2c:
d6:40:31:5b:49:43:94:4f:22:24:0b:4e:91:76:1e:75:37:3d:
43:0f:79:32:0e:bd:e6:c8:03:60:ff:7e:e8:09:c2:81:ac:4e:
b2:e1:37:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:16:05 2025 by rpki-client