Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/71cb0c-3be0-4a9e-9b82-7d68366b59b7/1/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.mft
File: h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.mft (raw, json)
Hash identifier: kORmGzHjWx3dFwyjSwUUF85B6g8wbA9TzaSGp8GnZ0o=
Subject key identifier: DA:A9:5C:5F:CB:0D:C0:4E:3B:A0:2B:9A:90:C6:38:6C:43:E2:3B:2F
Authority key identifier: 87:B9:31:37:53:BC:09:31:AF:43:93:DB:DA:00:9B:0F:F4:5E:C7:C2
Certificate issuer: /CN=87b9313753bc0931af4393dbda009b0ff45ec7c2
Certificate serial: 01958CCEA82F759DA6CFD9A998FF9E7C80EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/71cb0c-3be0-4a9e-9b82-7d68366b59b7/1/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.mft
Manifest number: 0960
Signing time: Thu 13 Mar 2025 00:01:48 +0000
Manifest this update: Thu 13 Mar 2025 00:01:48 +0000
Manifest next update: Fri 14 Mar 2025 00:01:48 +0000
Files and hashes: 1: 0nY8WimC5lB0bql9f3U9kRi_8I4.roa (hash: 8StTkkNbb/yW2jlpCIQh00ucmFvEjZPmIDJRuFhboiI=)
2: h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.crl (hash: 0qXJqFrFNJZLhgUfnOwvXFaDnJp3wao5bM8m2KKGV0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/71cb0c-3be0-4a9e-9b82-7d68366b59b7/1/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/71cb0c-3be0-4a9e-9b82-7d68366b59b7/1/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:ce:a8:2f:75:9d:a6:cf:d9:a9:98:ff:9e:7c:80:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87b9313753bc0931af4393dbda009b0ff45ec7c2
Validity
Not Before: Mar 13 00:01:48 2025 GMT
Not After : Mar 14 00:01:48 2025 GMT
Subject: CN=daa95c5fcb0dc04e3ba02b9a90c6386c43e23b2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8b:eb:c0:5d:d4:d2:6f:e7:45:9e:ed:28:46:
6f:0d:ce:cd:1d:62:f8:4e:24:d8:9a:e0:d2:49:2a:
00:00:07:db:d0:f3:a5:8d:eb:1f:dc:64:5e:c6:1e:
34:a1:fd:e4:3b:c7:c2:a9:d2:ad:a7:c9:7c:04:92:
bf:db:ba:35:6a:d6:1c:ed:9e:41:10:d8:e9:4c:6e:
ad:bf:49:8b:65:11:cd:98:84:e8:59:73:56:92:2b:
54:04:c9:07:f0:b9:b3:0c:ea:84:67:54:fc:f7:80:
d7:ce:1c:11:df:db:f5:0c:75:08:18:02:2f:bb:e6:
06:a0:ee:59:ea:24:99:0c:ca:e5:5c:99:e5:47:9c:
13:bb:b8:a8:d7:27:92:b7:34:40:71:ab:ba:65:55:
a7:90:d5:60:d4:c1:d8:cb:e4:5f:eb:11:c9:c3:e6:
ae:61:08:67:71:89:89:79:1b:3f:94:e5:0c:b1:19:
71:a7:a6:a4:2f:d1:e0:17:96:d8:34:05:d7:de:95:
92:08:2b:c7:d7:c6:db:8e:23:d9:d8:3a:08:77:4f:
18:f5:a4:3f:f0:0f:69:76:e8:fc:93:97:d3:50:80:
77:51:65:01:15:2e:1b:1a:8d:c6:30:d5:c6:4c:90:
74:52:7c:d3:71:d9:53:a7:6a:69:ec:da:c8:5e:c4:
38:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:A9:5C:5F:CB:0D:C0:4E:3B:A0:2B:9A:90:C6:38:6C:43:E2:3B:2F
X509v3 Authority Key Identifier:
keyid:87:B9:31:37:53:BC:09:31:AF:43:93:DB:DA:00:9B:0F:F4:5E:C7:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/71cb0c-3be0-4a9e-9b82-7d68366b59b7/1/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/71cb0c-3be0-4a9e-9b82-7d68366b59b7/1/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:11:3f:a7:e5:86:2d:9a:51:51:08:b0:b8:e5:fe:16:5c:25:
f5:5b:db:f1:87:22:ec:0d:11:fe:53:83:3d:ef:c6:f5:bb:75:
28:cf:5b:5d:2b:db:0c:c3:7a:6e:8c:ab:80:6d:f8:76:9a:99:
f1:9f:0b:e6:8b:98:ce:5d:c2:03:e8:4d:c9:60:9b:c6:27:a7:
ac:6d:9e:db:6d:e9:16:db:77:e4:9a:c8:d6:92:6d:e2:38:c8:
9e:b4:ab:4c:83:92:b8:c3:10:e6:c0:f0:27:7c:96:c8:8e:76:
a1:7b:08:ae:36:90:75:08:9f:82:82:35:c0:4c:cf:b6:46:9e:
ba:e0:ff:90:7c:ff:98:95:c8:b8:78:56:e3:a5:d4:7f:e0:7f:
e1:f7:1e:ae:dd:be:33:6e:1d:ad:0c:09:85:cf:68:cd:d9:0c:
81:6f:43:de:b6:55:84:90:f2:69:08:ce:a8:1e:64:b3:7f:39:
2a:b8:bc:be:86:3d:98:c8:a0:ed:85:57:8b:af:68:0c:00:b8:
0d:24:51:a2:69:9b:77:ce:f2:c4:91:24:46:b1:e5:04:de:97:
43:02:50:91:af:3b:bb:42:12:6d:22:74:5c:3c:05:71:58:62:
22:70:03:43:9b:63:ad:67:f5:7c:6f:7b:e7:7b:8c:8b:02:5f:
85:fd:ec:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:41:03 2025 by rpki-client