Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
File: mFS9ioY6MYlcxsuSLzAIs_CKra4.mft (raw, json)
Hash identifier: ImPIN5hdHdYVsIbUCP44D4W0e57CcM6AmmimCfW0DRU=
Subject key identifier: 02:D2:1E:B7:DC:56:7D:0A:46:A2:98:E2:D2:69:EA:83:1A:DD:E4:B2
Authority key identifier: 98:54:BD:8A:86:3A:31:89:5C:C6:CB:92:2F:30:08:B3:F0:8A:AD:AE
Certificate issuer: /CN=9854bd8a863a31895cc6cb922f3008b3f08aadae
Certificate serial: 01964DB54BE9968DC7E5381D1D014B70ED54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
Manifest number: 148A
Signing time: Sat 19 Apr 2025 11:00:49 +0000
Manifest this update: Sat 19 Apr 2025 11:00:49 +0000
Manifest next update: Sun 20 Apr 2025 11:00:49 +0000
Files and hashes: 1: 7Q18JYmAuxaMa6IHufbofG2Nif4.roa (hash: SgEEylWwu8UHfA3f6YmbRxIxeIe/WWwb7mO+pnXONBI=)
2: mFS9ioY6MYlcxsuSLzAIs_CKra4.crl (hash: kA+7K4hyY8HSkKQfncoWq1C6Lj95mxeQCXCRfMIqYX8=)
3: zzW0oiISqz8GtZ1LDC69YbNiON4.roa (hash: qDXsu9oGWoasH8gnG9BaDFXmdIAxeKxrhPwrD6gYHG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:b5:4b:e9:96:8d:c7:e5:38:1d:1d:01:4b:70:ed:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9854bd8a863a31895cc6cb922f3008b3f08aadae
Validity
Not Before: Apr 19 11:00:49 2025 GMT
Not After : Apr 20 11:00:49 2025 GMT
Subject: CN=02d21eb7dc567d0a46a298e2d269ea831adde4b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c5:3d:b6:7b:c8:94:d1:41:6c:e2:f9:c5:e8:
7f:8b:42:88:72:d7:60:0c:e6:c9:69:66:c4:5f:66:
93:57:f7:b4:31:b9:39:cb:d8:66:ed:fd:f3:fd:fb:
06:97:91:6a:d8:35:d2:37:f8:ff:5e:3f:07:67:f2:
cf:c9:f6:db:12:c8:56:6e:ef:8c:fb:35:d5:16:0b:
03:9f:ac:c4:0f:a3:c0:33:8e:e2:d7:3d:ef:ff:68:
c0:c9:68:06:b1:c9:c7:10:3f:28:18:bb:eb:4c:d2:
03:54:ed:49:87:ae:f4:d0:0f:2a:52:36:9b:f9:d8:
a9:39:c9:2c:c3:f6:87:65:c1:8c:2e:cc:d2:b3:36:
e1:15:58:68:45:37:d1:7f:09:75:6b:17:84:ff:65:
ff:b8:70:60:b7:3a:1b:72:c9:9f:99:44:1c:60:b8:
2e:0c:9e:a1:c8:c1:95:20:3f:f1:8a:8c:a3:91:51:
49:df:ab:62:c1:18:e0:70:63:79:5e:c1:dc:af:2e:
de:36:a5:d9:b5:86:f2:aa:75:b3:8b:84:eb:14:56:
01:f2:07:91:ac:e2:d6:c1:60:3d:ce:44:0a:61:6f:
db:21:14:13:68:c0:64:0c:6f:e7:53:22:49:dd:ad:
e1:8e:82:76:23:f1:d8:12:28:0b:34:83:64:8f:fd:
e7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:D2:1E:B7:DC:56:7D:0A:46:A2:98:E2:D2:69:EA:83:1A:DD:E4:B2
X509v3 Authority Key Identifier:
keyid:98:54:BD:8A:86:3A:31:89:5C:C6:CB:92:2F:30:08:B3:F0:8A:AD:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:c0:f1:e1:06:bd:62:9a:41:36:e8:8e:fd:47:c6:37:50:41:
e3:f7:27:8b:eb:5c:c7:27:27:bb:34:aa:11:ad:9e:37:ff:b4:
31:41:3a:43:01:b8:e5:50:f0:e0:4c:db:1e:b2:65:a1:41:fa:
d2:7d:ad:a0:07:01:27:f7:30:eb:f2:0f:d4:18:42:2f:3b:90:
26:c1:48:4a:10:f9:db:3e:6b:97:14:56:cc:2f:69:9b:9f:76:
c7:d5:34:1c:bb:ea:e1:0d:49:d5:95:af:0d:2f:66:bc:be:d3:
bb:eb:8a:2d:2c:ac:99:8d:4d:46:18:46:ac:ce:af:cd:a5:ea:
e1:d1:9e:3b:58:5f:f1:39:49:28:6a:16:4b:a6:2a:60:9c:af:
37:12:93:a2:15:75:e2:e9:50:bf:3d:84:5e:67:f6:05:e3:ab:
a6:3d:2d:8f:c6:26:eb:b1:19:88:3d:d5:3a:b4:79:a4:e1:c3:
7a:08:be:a1:6e:e5:7d:70:2a:1d:29:e3:66:27:50:a1:f8:bd:
c6:ec:96:af:91:cf:46:95:72:d2:1d:60:84:2c:18:f9:26:eb:
3d:b4:d5:72:9c:67:bc:a7:0f:40:0f:56:6f:61:5a:be:8d:5f:
ca:76:78:c3:f7:77:84:42:60:05:3c:9d:6b:fe:a9:57:51:14:
09:e7:6f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:40:01 2025 by rpki-client