Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft
File: ie36QUlE0BCsae5b-yJ3OySyfvs.mft (raw, json)
Hash identifier: GA0g5zjfCjZL/pV2o1O1hljAeJTbIPIPscUL9g1rA4U=
Subject key identifier: D9:C3:9D:97:59:66:05:29:3F:7D:32:F7:A8:59:0E:0C:7C:72:9B:5A
Authority key identifier: 89:ED:FA:41:49:44:D0:10:AC:69:EE:5B:FB:22:77:3B:24:B2:7E:FB
Certificate issuer: /CN=89edfa414944d010ac69ee5bfb22773b24b27efb
Certificate serial: 01964D1079FB6F6C367F7BA0A20B0B132B77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ie36QUlE0BCsae5b-yJ3OySyfvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft
Manifest number: 0969
Signing time: Sat 19 Apr 2025 08:00:47 +0000
Manifest this update: Sat 19 Apr 2025 08:00:47 +0000
Manifest next update: Sun 20 Apr 2025 08:00:47 +0000
Files and hashes: 1: 9WfLA6QHajuACG9zKGXgXI_fnBU.roa (hash: aTvWSmVYrhk52fn4L1rzEuUOw3+xRp2a5jHVVtBFY4o=)
2: JY9LzlIgT9I57_KE7zrrGS7E8Qk.roa (hash: pG1i5yA4B+HIYkYc64ggfa0dVvkWYyImVKQY1Fkl/ng=)
3: ie36QUlE0BCsae5b-yJ3OySyfvs.crl (hash: mwhtTEe7bkUKSDgK5k6LyvnrnouKC/SBKHPDB6K9EU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ie36QUlE0BCsae5b-yJ3OySyfvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:10:79:fb:6f:6c:36:7f:7b:a0:a2:0b:0b:13:2b:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89edfa414944d010ac69ee5bfb22773b24b27efb
Validity
Not Before: Apr 19 08:00:47 2025 GMT
Not After : Apr 20 08:00:47 2025 GMT
Subject: CN=d9c39d97596605293f7d32f7a8590e0c7c729b5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c8:43:7e:81:2b:6e:43:1b:04:28:10:96:b9:
f7:3f:d1:f2:a4:99:aa:55:fd:2e:de:df:d3:c1:2b:
94:47:64:68:f6:43:fa:ba:e1:11:60:1c:f8:4b:52:
64:1f:a1:31:83:11:53:44:6c:72:d1:aa:8f:02:4d:
a6:76:99:db:bd:21:58:24:8f:9b:ea:b5:e1:a8:12:
1b:f7:c9:89:1a:ec:67:61:65:08:39:2a:4e:e6:29:
4e:9e:fd:4e:a9:dd:9e:aa:26:99:d5:6d:48:59:53:
2a:d1:43:ce:55:32:a2:85:62:be:ff:8d:bf:be:cc:
62:ac:7e:0a:e4:69:01:5a:d7:b3:70:3c:94:bb:a6:
6c:a3:b4:1a:c8:f1:65:49:5c:91:0c:fe:d8:00:9b:
fc:54:ee:73:ac:1d:49:a1:34:bd:f1:5b:dc:01:32:
28:c5:ce:66:f2:ef:01:ae:7f:f2:69:d3:f3:71:a4:
54:ea:39:38:c5:f4:70:53:27:a3:ba:bc:2d:d2:49:
20:ad:90:99:be:c7:13:e4:8a:21:a3:ee:40:dd:9f:
e3:34:d6:35:22:7b:60:da:b1:4f:83:60:db:61:a5:
76:44:e1:28:35:3d:44:4f:8a:57:2d:cd:3d:d8:1e:
f4:7f:08:7b:1c:82:19:3d:65:d7:1c:2f:b7:76:6d:
19:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:C3:9D:97:59:66:05:29:3F:7D:32:F7:A8:59:0E:0C:7C:72:9B:5A
X509v3 Authority Key Identifier:
keyid:89:ED:FA:41:49:44:D0:10:AC:69:EE:5B:FB:22:77:3B:24:B2:7E:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ie36QUlE0BCsae5b-yJ3OySyfvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:79:5a:65:2d:cc:5a:2c:69:b6:48:9c:61:d8:45:b5:33:15:
f2:4b:d2:c4:52:ad:3e:f9:e7:d8:77:07:b2:71:e1:38:9d:2e:
e8:44:0a:cb:e1:44:66:79:2d:96:71:3f:35:5e:ca:92:58:00:
cc:23:34:eb:b7:a6:91:65:b8:57:47:22:4b:84:9a:69:f6:4b:
cb:5e:dc:49:64:ef:3f:d5:a2:0c:a7:bb:c7:e7:c4:c1:09:a6:
11:a2:ac:8e:6a:de:d2:91:98:21:a0:45:59:ce:c1:88:b0:8d:
98:f4:cb:fe:b9:c1:c7:99:78:0f:e6:7e:b8:56:e7:00:cd:61:
ec:c0:46:97:42:8a:63:ca:2e:50:af:db:8b:87:3b:e2:f5:12:
fe:33:63:c6:80:7c:52:6b:64:ef:3d:9a:4d:fd:b0:df:b9:da:
e7:92:b2:28:28:b1:e8:4c:de:38:75:f4:c9:dc:0e:92:59:e9:
cf:71:23:fb:3f:4d:70:a8:6e:61:44:14:2b:c4:9b:78:a8:0c:
86:04:72:8a:da:9f:66:d7:20:e3:30:08:84:83:f6:6c:1f:93:
59:b9:2c:90:f6:46:2b:84:5c:6d:fb:3e:36:fa:13:3f:9e:e0:
8a:22:7b:2b:d5:ca:15:48:14:04:4c:72:ec:9c:ed:31:1e:31:
4b:14:f3:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 10:38:02 2025 by rpki-client