Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/f8d3da-30e7-43b3-a9ed-43428a86f8e8/1/V9ChyazkChsBcJn_Y-Tgh-scvds.mft
File: V9ChyazkChsBcJn_Y-Tgh-scvds.mft (raw, json)
Hash identifier: E1IuIfgML0Q4gZZC3oD81HPZRGLxLINtbFv2rSn+96Y=
Subject key identifier: 78:67:37:83:8F:C5:1B:CF:8E:BF:D7:DE:5A:F8:89:D4:39:F5:84:A3
Authority key identifier: 57:D0:A1:C9:AC:E4:0A:1B:01:70:99:FF:63:E4:E0:87:EB:1C:BD:DB
Certificate issuer: /CN=57d0a1c9ace40a1b017099ff63e4e087eb1cbddb
Certificate serial: 01964EFE971617894F869611BD0BFB2B696D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V9ChyazkChsBcJn_Y-Tgh-scvds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/f8d3da-30e7-43b3-a9ed-43428a86f8e8/1/V9ChyazkChsBcJn_Y-Tgh-scvds.mft
Manifest number: 039A
Signing time: Sat 19 Apr 2025 17:00:29 +0000
Manifest this update: Sat 19 Apr 2025 17:00:29 +0000
Manifest next update: Sun 20 Apr 2025 17:00:29 +0000
Files and hashes: 1: V9ChyazkChsBcJn_Y-Tgh-scvds.crl (hash: 9K8kg0hNoMVN9nz3wf7qCVLWX680MTGa58o14pPnUrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/f8d3da-30e7-43b3-a9ed-43428a86f8e8/1/V9ChyazkChsBcJn_Y-Tgh-scvds.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/f8d3da-30e7-43b3-a9ed-43428a86f8e8/1/V9ChyazkChsBcJn_Y-Tgh-scvds.mft
rsync://rpki.ripe.net/repository/DEFAULT/V9ChyazkChsBcJn_Y-Tgh-scvds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 17:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:fe:97:16:17:89:4f:86:96:11:bd:0b:fb:2b:69:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57d0a1c9ace40a1b017099ff63e4e087eb1cbddb
Validity
Not Before: Apr 19 17:00:29 2025 GMT
Not After : Apr 20 17:00:29 2025 GMT
Subject: CN=786737838fc51bcf8ebfd7de5af889d439f584a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:42:b3:f7:56:47:b9:91:cb:70:0b:9e:3c:2d:
17:ab:bb:90:ec:8b:53:2a:bd:d1:f1:67:57:d1:3f:
9e:87:85:1c:d1:fb:f8:27:c7:41:70:d8:4e:e9:2a:
b7:e6:38:ee:d9:77:e1:d8:1f:91:70:e7:7b:f9:cc:
cf:90:fb:bc:05:0b:be:be:5e:6f:2a:1d:82:36:84:
24:17:ed:5b:18:00:0b:67:80:b4:91:08:6a:c9:51:
cb:85:fe:bb:49:70:2b:5c:1b:be:a5:be:42:27:4d:
eb:99:5a:bb:1c:18:2e:73:b5:24:77:36:04:77:c1:
21:6b:9f:95:be:10:6a:26:44:e0:4f:3a:64:f1:a9:
91:f9:83:95:09:7c:69:95:fc:23:6a:4d:12:82:8a:
6f:cb:9b:2b:32:a3:2f:6c:bd:d1:b2:35:0b:ed:a3:
e6:af:72:40:02:fb:18:ad:1f:cc:81:af:2a:12:64:
3d:36:c7:2c:6b:2e:29:a4:b6:12:ea:54:24:2c:41:
ab:1d:2b:ee:2e:de:bf:b9:92:09:08:23:df:6f:1d:
4c:69:8c:64:91:7a:24:6e:a7:46:b8:82:c1:fe:5f:
c5:96:8b:c9:91:2c:62:f5:0c:db:8e:db:af:fa:da:
7a:d6:fc:2a:db:43:42:d4:d6:09:27:fd:a6:e9:7b:
86:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:67:37:83:8F:C5:1B:CF:8E:BF:D7:DE:5A:F8:89:D4:39:F5:84:A3
X509v3 Authority Key Identifier:
keyid:57:D0:A1:C9:AC:E4:0A:1B:01:70:99:FF:63:E4:E0:87:EB:1C:BD:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9ChyazkChsBcJn_Y-Tgh-scvds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/f8d3da-30e7-43b3-a9ed-43428a86f8e8/1/V9ChyazkChsBcJn_Y-Tgh-scvds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/f8d3da-30e7-43b3-a9ed-43428a86f8e8/1/V9ChyazkChsBcJn_Y-Tgh-scvds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:92:bf:95:6d:e5:55:e4:d7:ef:8c:25:c2:9d:a7:90:74:73:
c8:24:63:13:de:aa:f5:02:ef:a6:f0:b7:b1:9f:41:68:9c:6a:
40:26:fb:1a:34:a2:3d:b8:1b:80:12:24:e1:de:3b:f2:06:8b:
87:fe:c8:30:fa:89:94:3c:04:ea:4c:04:73:4c:9a:76:83:1c:
21:9e:a3:43:1c:d0:2f:41:de:76:1b:ac:9e:3c:21:1b:0d:63:
12:9f:44:c6:d6:48:8c:65:ee:0a:24:83:17:da:9e:be:10:8c:
00:7a:cc:23:17:0e:6e:a6:3f:b7:a5:fc:29:78:67:86:65:df:
25:af:1d:d1:57:1f:64:3a:f9:ee:b7:81:2d:76:cc:55:5b:30:
85:a6:5f:7e:37:fe:ea:17:be:e8:e0:cc:e0:0d:f3:8e:23:fc:
73:92:74:3d:71:ee:c0:49:e7:72:fd:8e:4b:e0:23:ea:51:bb:
15:fd:aa:25:81:ad:e1:7f:75:11:d2:89:4b:6f:14:c4:7f:e4:
3d:cb:b7:66:57:3b:b9:11:3a:f6:3d:0e:e7:49:55:5b:b2:8e:
81:b6:fd:9f:df:8b:f1:93:96:32:75:b1:22:ce:c3:71:98:0c:
ce:39:c5:74:9c:bf:20:e9:47:b6:43:be:b1:21:57:a4:df:a3:
fa:04:0a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:15:22 2025 by rpki-client