Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.mft
File: 0627YSN4H_DjVBNEaseTHP9KSQ0.mft (raw, json)
Hash identifier: 7YgQkA9q1kISb9c2VjH7Swz39QOGVg5O15YShYBusfE=
Subject key identifier: 11:2F:86:D4:96:50:8E:4B:D3:DA:F8:CC:31:09:B3:C2:40:CE:30:53
Authority key identifier: D3:AD:BB:61:23:78:1F:F0:E3:54:13:44:6A:C7:93:1C:FF:4A:49:0D
Certificate issuer: /CN=d3adbb6123781ff0e35413446ac7931cff4a490d
Certificate serial: 019675303CFB6F1ADED21F2DE260D9ECCA31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0627YSN4H_DjVBNEaseTHP9KSQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.mft
Manifest number: 150F
Signing time: Sun 27 Apr 2025 03:00:17 +0000
Manifest this update: Sun 27 Apr 2025 03:00:17 +0000
Manifest next update: Mon 28 Apr 2025 03:00:17 +0000
Files and hashes: 1: 0627YSN4H_DjVBNEaseTHP9KSQ0.crl (hash: dOOIRyAj36Pq1pYsLlavdVDVyAEZUA/f6vwegu0aNZU=)
2: yWi1Y-nakOmyfRqesRZIzBZCSpo.roa (hash: XIYZfLdl8kZlRiSAj90PT17pvRJ8h9U9zRjI6i+BCkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0627YSN4H_DjVBNEaseTHP9KSQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:30:3c:fb:6f:1a:de:d2:1f:2d:e2:60:d9:ec:ca:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3adbb6123781ff0e35413446ac7931cff4a490d
Validity
Not Before: Apr 27 03:00:17 2025 GMT
Not After : Apr 28 03:00:17 2025 GMT
Subject: CN=112f86d496508e4bd3daf8cc3109b3c240ce3053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:84:b4:f3:95:69:f1:51:1b:5c:dd:92:2d:0d:
e0:84:62:5d:b2:07:38:fa:5e:30:d3:46:d2:8f:89:
b6:b7:1f:7d:ed:9a:ed:8f:5c:db:75:4c:2c:81:1f:
7a:5b:78:75:fc:ea:24:a3:40:10:ac:00:69:33:89:
70:96:9f:2d:08:03:0e:5c:e5:1d:fd:e2:02:ef:63:
d9:34:23:63:2e:45:c8:24:03:ea:3d:d9:78:25:c2:
0c:8e:33:c6:42:e1:d1:49:b1:3a:af:18:6b:89:09:
80:72:6c:69:17:ce:d0:24:69:31:a7:50:17:fc:b3:
bc:f8:d6:04:2b:74:35:64:d6:35:fe:22:0d:3b:ae:
1e:bf:42:01:37:ca:fb:9f:5e:48:69:dc:44:55:03:
34:e2:49:c7:2e:c9:8b:8a:62:15:85:7d:f9:97:be:
de:6e:01:34:d3:7b:4a:9f:25:a6:0c:3b:85:77:86:
52:11:a4:7a:d6:a6:fd:54:b2:a2:ff:13:f8:3b:3b:
62:9e:aa:f0:45:45:42:76:81:5a:e6:9d:0f:ca:84:
29:03:67:6f:c4:1b:5b:4e:b6:88:8e:16:d9:32:9d:
d9:df:98:b8:a9:b6:da:c5:73:cc:33:36:50:c8:c9:
70:4a:32:fc:fb:c6:88:eb:54:20:28:43:61:d4:85:
9a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:2F:86:D4:96:50:8E:4B:D3:DA:F8:CC:31:09:B3:C2:40:CE:30:53
X509v3 Authority Key Identifier:
keyid:D3:AD:BB:61:23:78:1F:F0:E3:54:13:44:6A:C7:93:1C:FF:4A:49:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0627YSN4H_DjVBNEaseTHP9KSQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:eb:7f:66:b6:73:fb:88:af:ba:7d:63:f3:de:d1:ee:f7:fb:
5a:e7:81:d0:65:ac:0a:dc:58:ee:0a:40:ce:7a:c2:89:5c:a7:
a6:e5:ed:85:64:c9:60:97:6a:23:1d:cb:27:68:f3:5c:bc:68:
60:49:fa:82:84:f5:e4:c5:b8:9c:56:d5:ea:0e:1d:91:c6:81:
05:3c:74:ba:08:76:0b:9d:a7:f3:48:ff:79:0f:bc:a1:12:2b:
0a:c3:30:2f:85:ca:42:64:05:0e:87:a9:27:e5:69:15:fe:c4:
5f:9e:91:83:2b:5e:89:14:d7:7f:dd:b0:75:ab:a1:58:4b:5e:
94:7f:89:02:8c:c3:a9:5b:86:95:21:b1:7d:7d:d0:04:54:89:
7d:76:92:a5:7f:15:c4:82:27:cd:b5:04:c6:3d:70:c6:d0:8b:
08:c7:cb:42:e8:df:2e:8e:af:62:b4:cf:b4:03:f3:c3:37:39:
b1:32:91:3e:15:b4:1f:8d:1f:3e:74:93:07:74:a0:b4:f7:83:
46:06:b6:42:4f:5a:bf:d5:41:f5:03:32:a1:65:d0:07:d8:7c:
ec:38:b7:f4:c3:96:eb:02:1d:d1:0b:86:48:35:8b:fa:84:7e:
c3:c8:9c:ad:f6:88:42:08:88:3e:47:56:00:fd:a4:e3:d9:7c:
6e:0f:88:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:27:31 2025 by rpki-client