Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/RhIHo-7ytE-OJzG3sKx9FxbjVcU.mft
File: RhIHo-7ytE-OJzG3sKx9FxbjVcU.mft (raw, json)
Hash identifier: Ikca+rcFJ/8WV441zYAcJWzpZsGBMQwi4vYdEmYVuoQ=
Subject key identifier: AA:09:42:5E:2C:5B:DD:39:50:3D:CC:EC:59:01:49:2F:26:5F:D2:E7
Authority key identifier: 46:12:07:A3:EE:F2:B4:4F:8E:27:31:B7:B0:AC:7D:17:16:E3:55:C5
Certificate issuer: /CN=461207a3eef2b44f8e2731b7b0ac7d1716e355c5
Certificate serial: 01958EF3B382880604D0CB09A5BBEB27857C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RhIHo-7ytE-OJzG3sKx9FxbjVcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/RhIHo-7ytE-OJzG3sKx9FxbjVcU.mft
Manifest number: 112F
Signing time: Thu 13 Mar 2025 10:01:30 +0000
Manifest this update: Thu 13 Mar 2025 10:01:30 +0000
Manifest next update: Fri 14 Mar 2025 10:01:30 +0000
Files and hashes: 1: RhIHo-7ytE-OJzG3sKx9FxbjVcU.crl (hash: 7FvSmjYtZThmj73v644EXAd0dKSB76MQKAtN0KHTzLk=)
2: Y5Fkdf8lCYdQD9ZGIAjVuUbledE.roa (hash: JnnOlLV8xwOOoN+r0LJHTPSQEB+QaVe9fn2jfA8Y6mA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/RhIHo-7ytE-OJzG3sKx9FxbjVcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/RhIHo-7ytE-OJzG3sKx9FxbjVcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RhIHo-7ytE-OJzG3sKx9FxbjVcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 10:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8e:f3:b3:82:88:06:04:d0:cb:09:a5:bb:eb:27:85:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=461207a3eef2b44f8e2731b7b0ac7d1716e355c5
Validity
Not Before: Mar 13 10:01:30 2025 GMT
Not After : Mar 14 10:01:30 2025 GMT
Subject: CN=aa09425e2c5bdd39503dccec5901492f265fd2e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a7:cf:97:fe:05:10:95:e2:71:4f:63:50:46:
dc:b7:07:30:12:2f:5d:7e:04:5c:7d:33:96:61:cf:
c5:26:d4:7d:00:32:a1:3f:67:bd:5d:c2:1d:c6:fa:
ba:7c:5c:7c:12:7a:43:73:d0:95:5f:48:9e:42:3d:
60:c4:d6:99:39:12:08:2c:05:d8:5e:ab:90:2c:8a:
87:31:2d:9f:00:2d:b0:5d:79:08:bf:d2:32:81:e7:
dd:15:03:e4:25:dd:a5:62:6e:01:15:ca:d9:7f:86:
1a:21:f0:57:8d:22:bc:09:9b:a0:70:92:2d:aa:2d:
50:bb:86:d7:f5:9a:fd:32:1a:45:ff:9b:56:2f:05:
f3:be:77:54:16:7a:55:12:26:75:5e:28:31:2e:c7:
31:0f:d6:c9:4e:75:28:d1:98:2c:c0:09:4e:4e:6c:
d0:d4:4d:bf:3b:84:e1:d9:d1:13:f8:aa:62:08:57:
60:69:84:1b:4d:a6:8f:91:39:b2:6c:6f:3d:43:63:
20:d0:35:0a:38:86:c3:fa:87:a4:be:4a:7a:0f:f4:
29:0d:99:71:63:e8:03:5d:60:fc:5e:24:f5:1a:ee:
9d:eb:53:a8:90:b3:b5:f4:14:39:55:22:a7:8f:98:
c8:bc:f9:e9:77:f5:ba:26:96:38:94:e3:dd:d2:e1:
01:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:09:42:5E:2C:5B:DD:39:50:3D:CC:EC:59:01:49:2F:26:5F:D2:E7
X509v3 Authority Key Identifier:
keyid:46:12:07:A3:EE:F2:B4:4F:8E:27:31:B7:B0:AC:7D:17:16:E3:55:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RhIHo-7ytE-OJzG3sKx9FxbjVcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/RhIHo-7ytE-OJzG3sKx9FxbjVcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/RhIHo-7ytE-OJzG3sKx9FxbjVcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:a6:9c:5f:94:45:5c:b5:95:20:de:46:e2:a5:d0:55:14:7e:
1a:df:ab:56:eb:6a:aa:d9:ee:41:15:dc:6e:4f:7d:11:20:de:
d0:8b:d7:cb:c9:bf:92:8a:5c:38:81:7f:a9:c2:61:01:45:c3:
24:76:92:06:94:02:30:2d:f8:3d:b4:21:37:47:58:fd:36:19:
be:79:7c:67:ad:36:86:fc:b6:e0:04:c0:7e:fb:59:58:04:93:
03:4c:76:ca:eb:87:b8:5d:4d:b0:72:1a:a6:90:a6:ac:d9:ce:
bb:d9:da:d6:85:fe:16:98:13:67:9d:02:ec:38:18:0a:e8:c8:
ac:1b:af:9a:23:6d:69:9b:36:b3:2c:73:b1:df:ad:9f:85:25:
65:06:7b:98:29:d4:e0:f8:e0:07:15:3f:7a:df:0a:da:f9:3a:
76:9d:9c:e9:24:05:26:85:e6:3d:c4:9f:c6:ef:93:b5:49:3b:
17:1a:22:da:36:57:29:65:c8:11:c5:f3:d6:6d:8c:19:5d:50:
40:7c:c3:38:62:7c:83:e1:6e:6f:25:a8:0c:c3:45:1b:93:fb:
a5:f1:58:b7:37:35:4c:c2:4a:11:a2:85:f1:6c:01:7a:06:fa:
03:da:2c:a8:65:7a:3c:a5:e2:07:6e:09:df:34:fd:b0:ea:4d:
02:3d:1c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:46:15 2025 by rpki-client