Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
File: p9ha3isNTsHKCSqOJwPBkgDHLzI.mft (raw, json)
Hash identifier: Yz+FfNzNiMqUm9F/A4JyR1TDudcxCtQ+ti6RSOTvZUk=
Subject key identifier: 12:26:B1:FB:15:BF:8E:7E:FE:57:9D:AA:37:F9:D7:D3:7C:1A:73:4C
Authority key identifier: A7:D8:5A:DE:2B:0D:4E:C1:CA:09:2A:8E:27:03:C1:92:00:C7:2F:32
Certificate issuer: /CN=a7d85ade2b0d4ec1ca092a8e2703c19200c72f32
Certificate serial: 019657938F5465B8B58B581C08F81DDA5151
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
Manifest number: 0D70
Signing time: Mon 21 Apr 2025 09:00:10 +0000
Manifest this update: Mon 21 Apr 2025 09:00:10 +0000
Manifest next update: Tue 22 Apr 2025 09:00:10 +0000
Files and hashes: 1: UFy4W10oicxgmbeQ9Qsjx3EgCQo.roa (hash: duZf8h2S3aFjJNNyhBun9TsZgrWqDeY96HLWVCbzObE=)
2: V78L3J5oIjHVBChvXIOgu9Ohs78.roa (hash: CdwTBRVREg2srUT+l5SA7LltUlSHpLsaVjkjqAH9C7o=)
3: p9ha3isNTsHKCSqOJwPBkgDHLzI.crl (hash: yqDQBWzbYfW7F3jykkn2b7W+6v0N6gEQc1uTgzqk0ng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:93:8f:54:65:b8:b5:8b:58:1c:08:f8:1d:da:51:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7d85ade2b0d4ec1ca092a8e2703c19200c72f32
Validity
Not Before: Apr 21 09:00:10 2025 GMT
Not After : Apr 22 09:00:10 2025 GMT
Subject: CN=1226b1fb15bf8e7efe579daa37f9d7d37c1a734c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d9:81:93:2b:b3:d9:a7:cb:66:9d:00:9e:f8:
0c:8c:4d:12:e9:c3:72:9f:16:99:79:8b:3b:2a:bc:
6a:10:f9:be:7a:b9:45:bf:8b:f9:2a:07:6f:07:9f:
99:42:e5:7c:48:83:9e:5b:7d:63:86:7f:1c:74:69:
5d:60:74:14:ae:f7:93:80:53:0d:fa:44:eb:b0:ab:
4e:63:a7:d9:31:b0:9d:23:56:4b:5d:99:19:8c:b9:
4b:24:ea:f5:7e:d6:db:f9:ee:8b:d1:fd:a8:a7:ca:
52:27:6e:81:b7:74:09:33:e4:42:e9:19:54:c7:2a:
d7:78:b9:cc:d8:cf:3f:1b:9a:ec:ae:1c:ca:18:e4:
a4:de:63:41:b7:b0:38:21:ab:8e:9b:d7:8c:db:d4:
73:74:61:41:63:27:3f:b9:fd:49:97:f8:49:b8:da:
3d:e4:8f:60:c4:67:74:d1:2a:a8:4e:0d:d4:56:60:
d6:92:74:e4:19:6c:47:be:bc:99:35:f9:b7:b8:14:
e7:29:9c:e4:89:67:fc:cc:74:fd:6f:4a:34:e1:c9:
52:2b:df:5a:a0:41:68:24:56:7a:2e:4b:8c:19:55:
a0:59:92:c2:41:fb:e7:0a:2a:84:b0:ed:15:54:3e:
5c:9d:f1:2c:d1:66:27:bb:02:bd:e8:2e:04:cc:6f:
cf:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:26:B1:FB:15:BF:8E:7E:FE:57:9D:AA:37:F9:D7:D3:7C:1A:73:4C
X509v3 Authority Key Identifier:
keyid:A7:D8:5A:DE:2B:0D:4E:C1:CA:09:2A:8E:27:03:C1:92:00:C7:2F:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:41:b1:bb:1e:87:62:f4:b8:66:f4:ba:b5:dc:21:d3:9a:51:
89:af:83:d9:69:43:fd:fd:7f:ad:a1:02:b4:f4:6d:be:65:12:
21:95:d8:92:cd:15:ba:64:33:11:df:e4:1b:d3:df:02:e3:fd:
f4:4a:86:ff:a7:79:3f:34:4d:69:7c:2b:c7:8d:02:c4:1c:2d:
a9:82:13:60:7c:fc:69:36:75:29:aa:de:63:41:d0:1c:b7:d0:
99:0a:72:c3:16:f6:18:54:b7:dc:41:ac:a3:20:9a:85:4b:57:
4d:66:e8:58:40:d2:67:5d:74:c2:2c:11:7f:7a:02:f9:35:b3:
2c:a9:13:5e:2e:5a:50:d4:1b:6c:fb:89:43:8e:46:ba:b5:4d:
96:71:57:5a:97:03:07:0e:27:e1:b9:69:8a:b8:ec:e5:e7:30:
c4:b6:88:2b:57:3e:d2:e7:b6:5c:57:70:0d:42:f6:dc:aa:83:
6a:1d:4d:f7:69:c0:b1:3e:2b:51:87:e9:1c:0f:30:23:76:e0:
d6:b4:8d:81:a5:de:82:91:e9:da:3c:fe:76:b0:46:9b:df:a0:
4c:fd:dd:77:07:38:e6:a5:c5:f2:39:ef:6c:70:13:0c:b8:01:
11:42:64:3f:fe:b6:0f:13:e8:56:07:d0:c6:54:bf:8c:6b:60:
e5:5e:25:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:03:43 2025 by rpki-client