Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.mft
File: sxk4vHICgkRLq9OyazSStFats5c.mft (raw, json)
Hash identifier: arBOXJyreNthpfYZeY4BSh2BE6qvuu8qZQvhqXJ+Zvc=
Subject key identifier: 47:95:15:D8:07:13:6A:37:76:08:BB:19:91:77:1D:74:82:8E:73:98
Authority key identifier: B3:19:38:BC:72:02:82:44:4B:AB:D3:B2:6B:34:92:B4:56:AD:B3:97
Certificate issuer: /CN=b31938bc720282444babd3b26b3492b456adb397
Certificate serial: 01964F6D6417B6B4AC0073C8F7B18955D1FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxk4vHICgkRLq9OyazSStFats5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.mft
Manifest number: 081A
Signing time: Sat 19 Apr 2025 19:01:31 +0000
Manifest this update: Sat 19 Apr 2025 19:01:31 +0000
Manifest next update: Sun 20 Apr 2025 19:01:31 +0000
Files and hashes: 1: mMmymzplWMeJzzgdG7P3tHtpBaQ.roa (hash: /bqXbIc2T1Ug7GTSXeUaRuS3D15TA3H+LDCDm5yP2ts=)
2: sxk4vHICgkRLq9OyazSStFats5c.crl (hash: 5+b0pvPr5/tpwJ16Mc6ENUB+pNKm2IUcpDOeo9lqk3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/sxk4vHICgkRLq9OyazSStFats5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 19:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6d:64:17:b6:b4:ac:00:73:c8:f7:b1:89:55:d1:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b31938bc720282444babd3b26b3492b456adb397
Validity
Not Before: Apr 19 19:01:31 2025 GMT
Not After : Apr 20 19:01:31 2025 GMT
Subject: CN=479515d807136a377608bb1991771d74828e7398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:96:76:94:76:58:99:5b:75:b1:0f:fa:4d:82:
6e:a3:26:21:ee:b6:b5:06:0b:b2:05:0e:ba:df:e5:
50:f4:6e:de:dd:54:eb:b9:98:bb:66:b0:27:c5:47:
26:a6:46:77:97:54:83:83:b7:7e:22:50:57:29:7e:
d3:71:1f:6c:d7:33:25:64:cd:b0:e4:00:84:9d:43:
57:b4:a8:66:e9:37:1c:f5:c5:7a:56:26:bb:d3:80:
fb:7a:44:4d:28:b4:fb:b2:3a:9a:42:e7:6d:fa:9e:
1e:cd:e7:54:39:c1:49:95:71:bb:e6:7c:04:0a:ec:
6c:94:b9:79:fa:e0:eb:b4:f4:70:f5:ef:50:08:9f:
dc:75:fe:55:82:4a:ef:fb:17:c2:44:fe:88:f7:f2:
dc:aa:d5:83:b4:c9:fd:6a:31:27:a6:c6:cb:98:fa:
c5:56:96:dd:8a:08:b3:35:f9:d0:ee:21:2d:f3:6d:
0d:60:9d:27:7f:a9:31:cf:42:a9:96:cb:57:5a:37:
da:16:ea:8d:e2:37:82:3e:fe:13:6c:b3:5e:05:68:
00:67:63:61:2a:41:c4:a2:fd:38:86:f4:83:b6:37:
ed:4a:cc:ec:e5:4b:83:b0:62:96:31:a2:85:86:ab:
40:83:73:c5:6d:65:df:ca:c1:0c:01:f7:db:55:b2:
75:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:95:15:D8:07:13:6A:37:76:08:BB:19:91:77:1D:74:82:8E:73:98
X509v3 Authority Key Identifier:
keyid:B3:19:38:BC:72:02:82:44:4B:AB:D3:B2:6B:34:92:B4:56:AD:B3:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxk4vHICgkRLq9OyazSStFats5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:43:24:b1:bf:07:4a:43:55:f7:d1:81:2c:32:d6:44:11:7c:
e1:6b:0b:b8:4c:55:5d:e8:d9:85:f1:dc:75:03:9b:4b:ea:27:
4f:95:0e:ca:3a:ae:04:b3:9b:7d:23:dd:08:38:d1:f9:96:ac:
6c:36:cb:f3:9e:10:88:ed:82:4d:15:62:27:23:d0:dd:fa:97:
c3:83:f9:b5:0c:b9:07:ad:a9:b2:15:6c:b9:04:80:68:e1:66:
40:42:eb:c4:52:84:9d:1b:c8:0e:66:21:04:9b:93:cb:1c:9e:
60:b3:5d:c9:9b:49:b1:a4:11:69:b1:52:94:75:43:16:2d:6e:
8a:cf:5e:04:a9:26:e3:3c:c7:ab:28:63:47:f6:f8:09:57:72:
3f:44:98:d8:75:44:fa:56:a3:30:c8:e7:97:78:ae:b8:27:0e:
cc:94:81:3e:72:e1:d3:69:61:91:22:5f:86:ad:7c:b6:66:0d:
59:49:80:6f:3b:e5:f9:07:f7:5e:d6:d1:9d:10:41:8b:c1:9f:
01:1b:80:9c:b5:fa:42:aa:71:da:86:6e:0e:ce:60:63:36:b0:
7f:bf:14:39:49:73:d8:94:9c:ea:3a:5d:a7:49:2f:9c:cb:51:
44:12:2f:fa:27:b2:b8:a6:bb:94:e1:96:fa:a2:56:38:f5:ed:
14:3c:ea:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:28:14 2025 by rpki-client