Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft
File: p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft (raw, json)
Hash identifier: nwkd1hUZtXwl+PRD/xgbzd7X1LGlUZW7gi+9bsgB5jE=
Subject key identifier: 27:FC:6F:95:E6:A8:66:D9:80:CC:E0:A6:75:AA:04:5A:2F:29:55:76
Authority key identifier: A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3
Certificate issuer: /CN=a7d78de0234e6f99701592f536e45f5f5594eec3
Certificate serial: 019654932559491E6C580E9F926A1A7B34D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft
Manifest number: 1503
Signing time: Sun 20 Apr 2025 19:00:51 +0000
Manifest this update: Sun 20 Apr 2025 19:00:51 +0000
Manifest next update: Mon 21 Apr 2025 19:00:51 +0000
Files and hashes: 1: DpBq14ju-sMiK3daEy8ixQQfVTk.roa (hash: i+DQu9MJOrZ5CdMAuj/sQPS/Zyr6reglqbrHWvbkyx4=)
2: DqUoj4sK_ahE1s2i6xM85mI1I6k.roa (hash: ghiG8Oanf8lruQ8GxgH5btsaEet/0QjBhkR1Sn2dFKg=)
3: Fnl-4WGHpZ5LXFARfr2ATzp8vLk.roa (hash: ux6nyEJd1cHyE1av/8nhZIQD47mVZkeQGG+DrMwKlok=)
4: bDPZ2IR6ImcRHKaCKb1DFYZSPeU.roa (hash: C/oWZRw0Dl261ZToD4X2GP0Mb4nYzslAlII1IzygPX8=)
5: jG76lLUgQYaSZsB__7tXEnh7-_I.roa (hash: fSIH28hM1SyCenkx+Z6chI8MtQGu7VXq7U7d1upY0CQ=)
6: lipPE0ZW42V7IEiCduQOBOaBQRM.roa (hash: nPRnjF3dKcW3adjgIBLS/OZJ6pE6pjg9DlJLpdzKt78=)
7: ma5oVolydUxkukW1x1dx0oRVMTk.roa (hash: vE8qPyFhzLzPBn/Dd5S1DZU12rMMyEbmBmsnKLuenBI=)
8: p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl (hash: GLhqVRJnA5sqa6UEuP8SfAKnL5gSsRxnz50dJJ56TUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft
rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 19:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:93:25:59:49:1e:6c:58:0e:9f:92:6a:1a:7b:34:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7d78de0234e6f99701592f536e45f5f5594eec3
Validity
Not Before: Apr 20 19:00:51 2025 GMT
Not After : Apr 21 19:00:51 2025 GMT
Subject: CN=27fc6f95e6a866d980cce0a675aa045a2f295576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ae:ed:10:a2:5a:12:37:78:1b:5a:2e:67:09:
b4:57:c5:9b:3e:74:de:4a:e2:50:ae:2f:8e:08:ef:
22:33:3a:46:49:26:28:05:85:70:31:4b:5b:05:8c:
d4:d3:48:8b:d3:db:18:cb:3d:6c:26:0c:c6:83:c1:
42:55:19:a0:08:d9:a4:41:94:0e:38:9f:6f:f8:04:
74:e0:ef:95:fc:80:1e:8a:a8:ea:b6:53:ae:6c:f5:
17:bc:0f:32:cb:d8:b5:7e:67:19:cc:8b:1a:38:7c:
d9:9f:82:32:b1:a1:93:6c:00:10:9d:b8:21:74:76:
64:9a:da:76:7b:3a:4a:7d:9b:85:67:ab:24:fe:06:
b3:d7:61:0e:43:d7:5c:b3:ad:81:89:38:6a:29:35:
74:87:c5:23:72:fc:5e:d2:b5:19:1c:2e:83:ed:5c:
e6:6e:f1:c8:b8:82:c6:b2:07:36:8e:e5:23:84:c8:
7f:3c:91:f1:ab:2e:58:08:32:7c:43:ae:a4:37:5c:
0f:22:c9:f0:c9:47:de:e3:65:ed:35:53:21:2b:e5:
f6:d0:57:37:a2:90:00:b8:fc:57:1e:ab:08:88:e5:
3e:88:a1:15:cf:2e:9b:2d:44:a6:7c:9d:63:a9:11:
cc:d4:d0:e7:2d:08:35:37:fe:54:3e:c9:33:48:68:
7a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:FC:6F:95:E6:A8:66:D9:80:CC:E0:A6:75:AA:04:5A:2F:29:55:76
X509v3 Authority Key Identifier:
keyid:A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:48:4f:a4:41:eb:45:f6:3b:24:fa:52:ce:35:0a:11:f1:dc:
bb:53:20:c9:3e:2c:ab:c2:f0:fd:0b:3a:a7:8f:88:80:95:55:
04:78:ba:48:0e:0d:cc:b7:dd:b7:64:9d:88:a9:f2:e7:9d:b1:
f9:93:e9:fe:92:b6:c9:10:2d:5b:26:82:10:33:d4:fa:c8:f2:
c9:30:de:d6:09:33:2c:a5:25:e1:61:01:7e:de:38:81:a1:2e:
3d:82:3e:0e:cd:f1:6a:f2:6b:c3:1d:d8:7b:fc:4b:d4:71:99:
cd:27:0f:50:59:e8:5f:f9:f7:00:69:d9:e5:48:a8:0f:a0:85:
23:5c:4e:46:f4:30:8c:0f:5b:3e:e7:e1:98:e2:9e:2e:60:cc:
32:0f:7e:c4:b0:41:ea:83:39:c4:e9:07:c8:00:35:93:c2:72:
84:1e:3f:60:00:fd:79:5c:35:0c:31:84:8c:4c:23:1f:c3:ca:
8b:52:66:bc:ee:ae:5c:71:81:44:1a:2d:7f:0d:06:f9:3a:07:
c6:79:b8:9a:f6:c8:ab:36:60:bf:fd:3d:19:69:d2:11:71:57:
0c:84:f5:f7:e3:2f:b9:42:53:83:c0:56:78:24:84:61:8a:de:
8c:6e:78:f8:35:0a:9b:fe:e2:37:61:55:9e:da:0f:47:d2:f7:
d2:9b:53:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:40:55 2025 by rpki-client