Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.mft
File: mSuGCVzlWNLpYYcopEIoonvpCY8.mft (raw, json)
Hash identifier: hlLZdDwu/uGNivs+agnn2ybzFAeBrXrkH1mrIn/Skwo=
Subject key identifier: 06:D2:7B:8B:04:A7:8E:0D:D4:1A:D7:00:BC:03:B7:F7:FD:C9:8B:5B
Authority key identifier: 99:2B:86:09:5C:E5:58:D2:E9:61:87:28:A4:42:28:A2:7B:E9:09:8F
Certificate issuer: /CN=992b86095ce558d2e9618728a44228a27be9098f
Certificate serial: 019646699D27E4EF5FB0B5B36718ACF3E014
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.mft
Manifest number: 151E
Signing time: Fri 18 Apr 2025 01:00:48 +0000
Manifest this update: Fri 18 Apr 2025 01:00:48 +0000
Manifest next update: Sat 19 Apr 2025 01:00:48 +0000
Files and hashes: 1: BlYJMM4ls15zJ30iXM_Rv84I-d4.roa (hash: MRyw1DsxxSYF8y5F3ROkLuVWefJpMb00uWwfBxmnsGk=)
2: e2BcAV15shqdiU98OktC9_gXkUU.roa (hash: rZS4+9XjUiv9YzxM45CHUYZIhLrSaA9eZkuie33ePcg=)
3: mSuGCVzlWNLpYYcopEIoonvpCY8.crl (hash: aT7+Z9nj9TvQ+PGn18poMHHxsoXcKhg6NjfTeLBwA9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 18:56:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:46:69:9d:27:e4:ef:5f:b0:b5:b3:67:18:ac:f3:e0:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=992b86095ce558d2e9618728a44228a27be9098f
Validity
Not Before: Apr 18 01:00:48 2025 GMT
Not After : Apr 19 01:00:48 2025 GMT
Subject: CN=06d27b8b04a78e0dd41ad700bc03b7f7fdc98b5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d1:90:9a:d4:4c:2e:50:a7:b1:d4:83:33:15:
0d:2c:4c:73:53:87:c1:f1:26:2b:78:5c:c8:6a:48:
30:92:bd:03:1b:4b:09:de:81:cf:af:44:79:56:7b:
24:05:f4:84:7d:6f:90:71:b2:f9:ef:2b:5b:ba:ab:
5c:07:c7:12:9e:6d:15:b8:29:91:ee:8c:2c:f4:64:
b8:05:37:65:89:05:c6:97:3d:98:5e:49:c5:70:7d:
51:c1:b5:bc:b5:22:30:43:81:09:4d:84:c4:6a:38:
16:2b:e0:ff:34:a7:26:6f:96:4a:2f:a3:6f:f8:04:
f6:af:ae:58:af:29:7a:ec:13:bb:66:b4:5e:06:4c:
56:a5:c3:72:46:f9:64:7b:51:7e:b1:c9:88:77:d2:
b6:14:2f:51:7f:c0:e3:f4:f2:64:f3:7b:87:19:86:
2f:5c:e3:ec:49:95:5e:61:a1:af:c6:88:50:9e:10:
14:37:4a:10:c5:1d:e4:0e:51:55:47:1b:42:1d:2b:
c4:be:a3:2c:10:16:71:49:6b:12:c4:5b:0d:bc:80:
84:f6:1e:7b:e5:ab:6b:72:9f:1f:b3:37:5d:1d:a9:
2e:6c:bb:00:de:c1:3a:a7:b6:1d:a0:e8:cb:ba:ee:
77:7a:f3:dd:5f:e4:1a:9e:1a:fa:88:47:c3:af:18:
7d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:D2:7B:8B:04:A7:8E:0D:D4:1A:D7:00:BC:03:B7:F7:FD:C9:8B:5B
X509v3 Authority Key Identifier:
keyid:99:2B:86:09:5C:E5:58:D2:E9:61:87:28:A4:42:28:A2:7B:E9:09:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:8e:9c:f2:d5:89:2f:5d:82:7b:a3:22:11:71:a1:65:a0:ba:
f9:7d:26:4c:e3:58:e9:a8:76:e5:77:78:8f:1e:69:69:b1:50:
c5:ad:21:06:eb:7e:36:4e:5d:f6:7f:ef:ee:37:ca:c6:f2:66:
ed:9d:e8:7f:06:f9:05:45:97:9d:8d:9d:51:c9:0b:7d:3f:9e:
99:05:72:3f:9a:81:7c:8c:e4:ab:c4:59:c3:bf:c7:5c:eb:2b:
f7:ba:ed:8e:d1:1a:14:99:c0:93:0c:6b:91:81:a6:7f:b7:89:
a8:d3:3a:bc:89:8f:32:13:4e:3b:ae:d3:75:57:ca:29:27:ea:
35:0f:cb:d3:28:e2:3d:1e:99:f2:0c:f3:75:3f:6d:66:ea:68:
31:67:91:3f:7b:9f:9d:48:9b:69:bc:2c:9e:14:5a:29:98:26:
49:21:26:f1:76:4f:8f:c1:d3:ab:26:b7:db:3f:6b:17:01:77:
5f:22:70:37:ed:f9:54:84:03:6f:ae:22:b4:d3:69:74:f8:9a:
bb:81:fe:b7:c5:ad:10:91:f1:8d:6e:5a:c5:e4:a6:79:c4:66:
b9:c8:43:2f:8a:f3:63:ba:28:08:bd:14:dd:02:30:27:7f:9a:
40:f0:88:11:ad:9a:53:5a:fe:d8:3e:9d:31:16:d8:a4:63:05:
ca:a4:2d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 04:01:33 2025 by rpki-client