Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
File: U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft (raw, json)
Hash identifier: JYBCwy7NzweU9/UfARD/oWGf0pLDTiFBBbDzyuf7EJ4=
Subject key identifier: 3F:21:8F:EC:93:B5:F5:E2:8C:75:E1:18:5D:42:E4:F4:F7:17:A2:1C
Authority key identifier: 53:57:61:91:3F:57:5C:41:1C:99:23:22:EB:B0:6C:D2:F3:7F:02:A2
Certificate issuer: /CN=535761913f575c411c992322ebb06cd2f37f02a2
Certificate serial: 01965BDF35E76459A83B058D34B90D574E68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
Manifest number: 1503
Signing time: Tue 22 Apr 2025 05:01:17 +0000
Manifest this update: Tue 22 Apr 2025 05:01:17 +0000
Manifest next update: Wed 23 Apr 2025 05:01:17 +0000
Files and hashes: 1: 9jLVpGilYmQEGxg1WpK2yNt9KVk.roa (hash: z5eyd/uvSVUU4CsN83uQVJdluniXFQjAaunOHdc2Khs=)
2: U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl (hash: cE6M1CwZ0ZEpcr0Wl3tXjxOh7ZSiu47spfMVoopE3EM=)
3: bjlUEqaZF5EwCSDk_Sxf_mEHztc.roa (hash: RU5KJnOEEBCQibHDxtY5+aLGfLDV7MxXDGkjvgxmqg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:df:35:e7:64:59:a8:3b:05:8d:34:b9:0d:57:4e:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535761913f575c411c992322ebb06cd2f37f02a2
Validity
Not Before: Apr 22 05:01:17 2025 GMT
Not After : Apr 23 05:01:17 2025 GMT
Subject: CN=3f218fec93b5f5e28c75e1185d42e4f4f717a21c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bc:b3:6f:9a:f7:d0:25:ce:38:67:4a:60:66:
20:9c:8b:68:50:11:ed:46:d3:40:88:b3:4d:12:38:
c0:be:91:a8:8e:b3:98:82:27:14:b3:d7:6d:08:e6:
d6:f9:14:6e:07:42:8b:5a:ca:ff:d4:2d:19:b6:c6:
89:0c:35:9a:1f:69:70:85:7b:bb:4e:dd:5b:03:3c:
3b:2b:33:53:3e:88:d9:c3:63:5e:4f:26:dd:83:db:
0f:3e:cd:21:41:ae:a8:06:38:5f:fa:73:c9:78:ba:
d2:f0:c6:47:0b:ee:dc:6b:88:2c:87:d2:23:10:36:
53:34:b7:d2:13:bc:99:bb:3e:63:fa:74:f0:04:ad:
1c:f6:c3:57:2e:50:d1:6b:ae:7d:5f:ae:b6:e7:98:
c8:f8:53:39:0f:2c:f1:5f:60:58:bd:4f:79:e3:f0:
80:15:c0:e6:15:29:6c:ba:fa:6a:65:a6:fb:0e:86:
90:8b:e5:eb:a8:6a:c9:70:e1:58:19:a4:a6:6d:1f:
d2:50:83:78:77:34:e1:ec:cc:c4:bc:ba:ec:d8:d9:
c8:72:91:bf:0f:4f:7b:8b:8c:19:66:61:9b:fe:2e:
30:ba:b6:20:85:31:5e:36:89:99:1a:a0:8d:87:fd:
40:de:eb:e3:47:46:8d:b7:e1:3f:d2:d3:09:a1:6b:
8e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:21:8F:EC:93:B5:F5:E2:8C:75:E1:18:5D:42:E4:F4:F7:17:A2:1C
X509v3 Authority Key Identifier:
keyid:53:57:61:91:3F:57:5C:41:1C:99:23:22:EB:B0:6C:D2:F3:7F:02:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:b3:78:c8:23:57:cf:0a:43:51:62:df:7f:80:b7:d8:67:88:
4f:35:e5:1b:5c:24:b9:b1:c4:f7:37:f6:28:0a:3f:3c:59:dc:
1d:01:81:19:92:c6:90:05:a0:b8:87:a3:bb:1e:e6:98:f1:cd:
5d:bb:9b:fe:b0:76:e8:3b:60:a6:cd:3e:94:b5:8b:a2:bd:34:
d9:65:42:09:95:e3:c8:9d:d5:de:2f:73:ae:d1:9a:b5:51:98:
bb:2a:63:ea:e4:a1:23:28:a7:af:2c:b7:bd:81:80:94:0c:fa:
13:c6:4c:50:d9:5b:50:6f:4b:10:f8:21:49:65:28:73:d2:09:
6c:c8:18:e2:c0:85:72:72:8e:8a:eb:b3:f7:85:6b:9e:da:3e:
3c:e2:25:6b:db:c8:4b:0b:b2:bf:a4:ab:c0:82:50:eb:0d:a9:
21:c1:61:32:c0:05:93:ae:3c:66:ee:5f:dc:56:e4:f3:7a:16:
83:10:7a:d8:dd:d4:d6:22:48:49:8d:dc:8d:53:ab:2c:4e:39:
59:3a:b1:0b:99:af:ec:5f:02:1c:b1:ce:4b:5d:da:f8:df:46:
ed:15:06:a0:97:7c:e6:17:44:f4:6d:14:93:82:73:9c:83:b5:
73:d5:25:51:d9:f7:bb:7a:c9:16:c5:45:d9:a6:93:50:ff:88:
a6:30:9b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:19:28 2025 by rpki-client