Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.mft
File: M7psC8yhbGhdx7myfxmbQrS-7uk.mft (raw, json)
Hash identifier: elszwNHZlS40nmvsSdVpAesiM7EbGoteXyEiBHPa+Q0=
Subject key identifier: 2B:B9:43:10:E6:9A:60:43:23:03:15:C5:0F:18:C2:09:81:BC:4A:AB
Authority key identifier: 33:BA:6C:0B:CC:A1:6C:68:5D:C7:B9:B2:7F:19:9B:42:B4:BE:EE:E9
Certificate issuer: /CN=33ba6c0bcca16c685dc7b9b27f199b42b4beeee9
Certificate serial: 0196132146988F1CDBDBD904C4B2781F5D8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7psC8yhbGhdx7myfxmbQrS-7uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.mft
Manifest number: 0C39
Signing time: Tue 08 Apr 2025 02:01:09 +0000
Manifest this update: Tue 08 Apr 2025 02:01:09 +0000
Manifest next update: Wed 09 Apr 2025 02:01:09 +0000
Files and hashes: 1: M7psC8yhbGhdx7myfxmbQrS-7uk.crl (hash: 1D3mda3Reyz7uj+ovYdB4iah2lYn0CuAEVFJ2SHMSX8=)
2: YsLZoqZw6u24llC00PtDDR7Qp3Q.roa (hash: xyGbGlbgzc0VPKZXK9Mhkv3PJ7Wng5W2DCI8eLTmYC0=)
3: kPhGzXODbRD6DaiKt_1D_SiuRQ8.roa (hash: 9eEDMcEOBSRwouzuH08DzSkvaYWRY3j//V52rGTuy7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/M7psC8yhbGhdx7myfxmbQrS-7uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 02:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:13:21:46:98:8f:1c:db:db:d9:04:c4:b2:78:1f:5d:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33ba6c0bcca16c685dc7b9b27f199b42b4beeee9
Validity
Not Before: Apr 8 02:01:09 2025 GMT
Not After : Apr 9 02:01:09 2025 GMT
Subject: CN=2bb94310e69a6043230315c50f18c20981bc4aab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:73:53:c3:4a:13:11:e4:ec:50:0f:b3:86:26:
bc:84:f8:7d:bd:ef:31:5c:fd:d9:54:07:fb:a9:c2:
30:6c:71:b8:f5:be:c0:8a:bc:97:d6:5f:70:d1:03:
fa:36:2f:4f:90:7e:63:82:28:d7:f0:fc:5b:0a:c2:
e6:ea:80:f3:b4:54:36:0a:74:95:cc:eb:52:a0:d2:
24:57:af:19:fd:4d:e2:b8:98:fb:9f:67:ba:52:92:
40:7c:14:6b:c0:6b:c0:9d:5d:dd:8f:50:79:14:6b:
04:b7:36:90:21:21:a7:d7:a9:ff:c6:7c:c8:81:6d:
c5:38:49:9b:23:e7:8a:66:17:f2:ef:a3:3a:3d:3f:
ad:e1:06:db:ef:4d:da:51:e4:7d:6f:a4:64:6e:29:
97:42:7c:be:d1:50:0e:6a:6e:28:fb:ce:1e:85:cb:
bb:0c:99:eb:13:a3:ab:3a:f8:5a:88:79:2c:1b:f3:
c4:78:99:43:27:c2:0d:cf:df:83:79:e0:19:f4:12:
c3:71:95:17:5e:4d:53:81:6f:9c:ee:86:59:11:57:
ad:46:ab:d2:55:da:10:39:13:b4:d6:3c:b7:1c:6a:
ee:e9:fa:47:2d:b7:d4:94:42:5d:dc:04:1e:13:91:
11:b1:1c:3b:49:a4:20:cc:fa:ba:5f:f2:12:6d:d1:
2a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B9:43:10:E6:9A:60:43:23:03:15:C5:0F:18:C2:09:81:BC:4A:AB
X509v3 Authority Key Identifier:
keyid:33:BA:6C:0B:CC:A1:6C:68:5D:C7:B9:B2:7F:19:9B:42:B4:BE:EE:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7psC8yhbGhdx7myfxmbQrS-7uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:2b:cd:78:0c:9b:08:3e:37:96:dc:43:65:4f:38:b6:62:22:
4c:59:4b:12:3a:c7:3c:e9:10:0b:97:3a:87:70:e2:b0:d8:df:
bd:44:35:29:c3:62:7b:6d:fe:a1:24:c1:2a:f9:eb:68:cc:17:
4c:34:33:b0:cd:28:4b:d3:eb:dd:78:a0:71:2c:6c:28:ac:e6:
77:3c:60:bc:78:09:41:00:d0:92:79:f4:3c:ac:1f:ed:c7:dd:
f3:23:f7:57:1d:2e:5c:9c:ea:33:03:e9:d4:5a:6c:e1:26:5f:
1b:22:23:0f:18:fe:65:89:44:ac:5f:cc:57:e6:be:d8:63:af:
d1:31:2e:29:0a:2e:8f:68:74:a5:ff:5f:c2:ad:9c:bb:83:1b:
a6:2e:4c:86:5e:3e:b9:b7:57:5a:45:08:6f:4b:42:d8:e1:24:
aa:b3:c2:ee:79:e5:95:1c:d4:cf:a8:a0:67:07:9a:01:fa:1f:
7e:b3:ed:d1:c2:10:0c:f7:39:ab:67:c0:91:a4:c9:9f:2c:6b:
3d:b2:39:7b:c4:10:6e:98:ab:ef:99:71:f9:95:c7:ef:c2:46:
03:32:e7:4d:d9:cf:c7:c7:e2:bf:92:72:93:07:a2:d7:c4:dc:
1d:e8:f8:69:2f:89:17:63:da:ed:80:2f:4f:7a:4e:b6:24:9f:
32:23:33:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:27:38 2025 by rpki-client