Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.mft
File: b95EDBTZdmUDy1yRuVC4EGLRECk.mft (raw, json)
Hash identifier: tWTH4OPy0nMtzCRDzlHa5+48ng0wxPGFy6hTF/aXbEk=
Subject key identifier: 4C:7A:FE:41:38:55:0E:B8:82:34:A6:F4:7C:AF:9C:0C:99:FF:CA:42
Authority key identifier: 6F:DE:44:0C:14:D9:76:65:03:CB:5C:91:B9:50:B8:10:62:D1:10:29
Certificate issuer: /CN=6fde440c14d9766503cb5c91b950b81062d11029
Certificate serial: 0196507F589637CD4F305FA818622743A945
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b95EDBTZdmUDy1yRuVC4EGLRECk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.mft
Manifest number: 0909
Signing time: Sun 20 Apr 2025 00:00:45 +0000
Manifest this update: Sun 20 Apr 2025 00:00:45 +0000
Manifest next update: Mon 21 Apr 2025 00:00:45 +0000
Files and hashes: 1: 8dQ0OiRLtZPhu3GEjEb_mugx5KE.roa (hash: 89OURcYF/hYXZlt3wuPoB9EB6Vna11HJsZwd0rNl1Eo=)
2: b95EDBTZdmUDy1yRuVC4EGLRECk.crl (hash: tbqxsObTpttCeZastXt6fTTSSg/+Y0OxtOUBNP4PC80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.mft
rsync://rpki.ripe.net/repository/DEFAULT/b95EDBTZdmUDy1yRuVC4EGLRECk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:7f:58:96:37:cd:4f:30:5f:a8:18:62:27:43:a9:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fde440c14d9766503cb5c91b950b81062d11029
Validity
Not Before: Apr 20 00:00:45 2025 GMT
Not After : Apr 21 00:00:45 2025 GMT
Subject: CN=4c7afe4138550eb88234a6f47caf9c0c99ffca42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:49:ce:b4:4d:47:3b:22:9c:41:95:1b:02:67:
df:39:5c:2c:76:a0:9c:2f:d2:60:b8:5c:e1:e1:62:
9b:36:93:28:bf:ef:ad:63:9b:1a:fb:ba:4b:90:46:
fe:a5:7a:8f:c3:17:11:f7:3f:87:25:64:c5:61:eb:
e7:2f:42:d6:ef:af:5f:3f:53:90:db:91:e7:12:0e:
bb:9f:9f:c6:63:e9:7e:a4:b3:62:c7:2f:c7:88:32:
ec:49:b1:16:05:69:0f:ed:62:71:79:54:b0:dc:ee:
0d:69:95:b2:5e:d7:39:f3:ee:e1:23:fb:a0:74:5d:
1e:45:3e:0b:a1:1d:a9:42:6b:04:0d:1d:0a:5d:f5:
1f:52:84:25:f3:32:81:44:58:86:6a:e9:c6:46:49:
a6:e4:b4:50:c0:b4:37:55:9c:b7:02:a3:fc:73:90:
bc:43:13:09:04:f1:c3:3c:39:f1:f3:47:d6:d4:ff:
35:f1:71:fe:82:76:c3:13:f9:d3:3d:40:a6:53:6e:
77:fe:36:44:b1:1b:67:50:a7:1d:0e:7b:d5:73:e3:
98:ba:2d:77:23:8f:85:18:c6:b2:cf:db:c7:e6:dc:
06:cf:75:c1:71:9a:70:32:d2:42:36:8a:44:e0:a3:
18:d7:77:94:b6:f7:77:e1:51:c3:f9:83:96:e8:fe:
a2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:7A:FE:41:38:55:0E:B8:82:34:A6:F4:7C:AF:9C:0C:99:FF:CA:42
X509v3 Authority Key Identifier:
keyid:6F:DE:44:0C:14:D9:76:65:03:CB:5C:91:B9:50:B8:10:62:D1:10:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b95EDBTZdmUDy1yRuVC4EGLRECk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:80:77:da:1c:f0:0a:70:d4:43:f1:e0:39:cb:b4:54:bb:e4:
2e:da:32:21:8a:88:1f:5e:64:55:6e:be:dc:63:83:6c:20:02:
80:2f:91:86:8f:fb:20:65:cd:8d:48:8e:8d:c2:3c:78:5a:ce:
80:f8:45:74:79:f2:b5:6a:fd:5e:e7:93:c2:34:4c:88:f3:18:
23:77:bb:58:5e:3d:cd:2b:6d:f8:98:c8:71:22:62:d1:b0:9b:
55:de:06:e8:ef:f7:f7:f4:bd:37:d3:a3:e5:a7:b5:00:d6:d4:
d3:be:d1:d8:da:35:d4:ed:c6:64:ce:7b:d7:66:f8:0e:a5:3c:
1b:28:4d:f2:ad:78:64:d6:cf:8c:81:9e:18:c1:21:06:e7:e0:
5b:82:29:64:16:12:28:b7:e9:19:ed:41:39:13:e0:23:ca:c9:
3d:8d:5e:18:64:2d:51:30:5f:96:eb:3b:20:28:21:3e:7e:11:
80:fb:aa:ab:76:2f:1d:6b:2a:40:fc:90:e3:d0:74:ff:b2:75:
7d:57:cf:80:fd:0f:97:72:3e:4a:2e:6a:9a:03:a8:c4:5e:df:
3a:5b:52:f6:94:67:9a:d0:02:e3:9d:64:47:46:49:6b:f9:dd:
d6:65:a2:af:08:ef:88:bc:0a:bc:01:1c:3d:c6:4b:47:b2:46:
6e:5a:ac:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:32:20 2025 by rpki-client