Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft
File: dX-f3qNQp2a7mMYE07nCeRZzIgk.mft (raw, json)
Hash identifier: s5mQkj1HsbjEu0c0UOc0kKmUfJGoROLMeyaPPcosZXw=
Subject key identifier: 9B:2F:17:66:8E:FA:89:C7:91:01:5E:37:3D:A5:E9:0C:0A:27:FE:02
Authority key identifier: 75:7F:9F:DE:A3:50:A7:66:BB:98:C6:04:D3:B9:C2:79:16:73:22:09
Certificate issuer: /CN=757f9fdea350a766bb98c604d3b9c27916732209
Certificate serial: 01961D00098B39C6B7395591D2B437320D0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dX-f3qNQp2a7mMYE07nCeRZzIgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft
Manifest number: 14E4
Signing time: Thu 10 Apr 2025 00:01:03 +0000
Manifest this update: Thu 10 Apr 2025 00:01:03 +0000
Manifest next update: Fri 11 Apr 2025 00:01:03 +0000
Files and hashes: 1: bXLXdbvFGFR0FszgHn84rVBOGio.roa (hash: nmNBpS+PbDPDefHKYKNVtxbPVQnu+QoIycRrjJFcsBw=)
2: dX-f3qNQp2a7mMYE07nCeRZzIgk.crl (hash: aZUzzl+aDgb4MMfejf8MpKuTKJyi64fLHa4EGQAr/HQ=)
3: hKQ8LLa9--B-K86xayaw0kpiYWg.roa (hash: d0JIaOsBs7E/BdBAQ915qmU5N9B7n1lC3k/0IYxFCFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dX-f3qNQp2a7mMYE07nCeRZzIgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 23:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1d:00:09:8b:39:c6:b7:39:55:91:d2:b4:37:32:0d:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=757f9fdea350a766bb98c604d3b9c27916732209
Validity
Not Before: Apr 10 00:01:03 2025 GMT
Not After : Apr 11 00:01:03 2025 GMT
Subject: CN=9b2f17668efa89c791015e373da5e90c0a27fe02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:75:ca:32:8a:aa:ce:af:87:a0:83:d0:5c:2d:
fb:fe:22:2b:94:09:3c:70:39:68:48:a4:06:d2:fd:
f4:d2:02:d6:59:34:25:0c:58:6d:3d:20:3c:4d:52:
41:e4:bb:66:22:62:69:eb:06:5d:80:b8:d9:ff:b6:
11:f5:16:1f:6a:80:b9:b8:6f:f8:ff:ca:47:14:bd:
1c:0c:f0:2e:f2:74:3a:94:e2:c4:6b:8c:2c:09:61:
18:44:3d:0c:7c:6c:63:d5:e4:33:f2:6f:ce:b8:2f:
e6:ff:92:ac:9d:8f:cc:4d:f3:a6:2b:1e:16:fe:c6:
f7:5d:52:9e:c2:e6:9b:4a:c3:78:5c:9a:e6:8c:56:
b0:30:96:ce:d4:17:36:45:6c:bf:f4:a7:62:9a:4a:
42:99:16:6e:f3:a8:67:f0:dd:61:59:e2:ea:65:f7:
b7:d6:28:fe:09:f0:da:06:81:48:aa:ff:b0:1b:f3:
bb:5f:8d:86:df:23:66:ab:8d:48:9e:a3:78:da:84:
fe:e4:e2:ad:87:2b:14:4e:4e:c4:f4:3f:ce:55:3f:
75:da:86:01:4d:41:18:ca:08:12:c5:60:e7:bf:45:
56:a3:12:3d:83:80:a2:28:f0:dc:65:71:9d:34:c9:
bc:ac:b0:48:16:ff:e0:40:76:ed:e3:4c:17:4e:cd:
35:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:2F:17:66:8E:FA:89:C7:91:01:5E:37:3D:A5:E9:0C:0A:27:FE:02
X509v3 Authority Key Identifier:
keyid:75:7F:9F:DE:A3:50:A7:66:BB:98:C6:04:D3:B9:C2:79:16:73:22:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dX-f3qNQp2a7mMYE07nCeRZzIgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:bb:77:6c:21:fc:a7:d7:fa:2f:e5:dd:8b:58:d9:9e:25:68:
18:b2:9b:43:8b:56:9a:88:9e:67:5c:72:a8:dd:9d:52:21:0c:
73:01:0b:ed:3a:95:91:33:71:65:ca:09:ac:d9:9e:f9:7d:3a:
ff:2b:07:f3:57:97:6c:b4:aa:d1:c0:79:a3:7d:7b:3d:62:07:
a5:95:9c:ec:20:74:04:18:4b:1f:e7:95:01:dc:5b:02:f0:ce:
bb:ea:39:f6:42:04:22:27:36:11:7f:a9:ec:52:94:11:5d:bd:
36:3c:f7:4f:bd:c8:61:f0:91:1f:3f:6f:c3:e2:4e:5e:a3:29:
b2:6c:4e:ae:c7:7f:c2:23:fd:07:bd:20:12:3b:ad:a4:d7:0f:
42:15:96:34:10:84:4b:c4:b5:91:38:03:fa:65:77:f5:67:00:
12:97:4e:95:3f:0b:4a:ff:ba:5b:34:f2:52:0a:db:97:4f:07:
e1:4b:35:63:a3:05:4d:30:c2:5d:8c:ba:ee:fa:0a:10:be:03:
7a:6a:34:8d:66:dd:3d:b5:90:bc:f6:51:71:07:8b:c8:9a:cf:
72:ba:3d:84:4e:8b:ab:1e:6d:a2:5f:03:de:1f:01:78:04:3c:
87:16:1e:a9:13:20:09:c2:3c:7d:a6:42:b0:77:12:7f:6f:da:
fa:c7:b4:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 05:02:38 2025 by rpki-client