Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/99U1CD-xQN2rRTq_gh9ds6b0YaQ.mft
File: 99U1CD-xQN2rRTq_gh9ds6b0YaQ.mft (raw, json)
Hash identifier: dBi5Zxxbx4/CVBaMeBH/lQaCDZpYHhEIrbten4XYUrk=
Subject key identifier: B3:BF:39:FE:71:21:8D:A7:9F:C9:95:C8:A5:E8:B9:2B:B4:26:28:57
Authority key identifier: F7:D5:35:08:3F:B1:40:DD:AB:45:3A:BF:82:1F:5D:B3:A6:F4:61:A4
Certificate issuer: /CN=f7d535083fb140ddab453abf821f5db3a6f461a4
Certificate serial: 019655385399E0FD36446954871A4CCFDD9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/99U1CD-xQN2rRTq_gh9ds6b0YaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/99U1CD-xQN2rRTq_gh9ds6b0YaQ.mft
Manifest number: 0C46
Signing time: Sun 20 Apr 2025 22:01:16 +0000
Manifest this update: Sun 20 Apr 2025 22:01:16 +0000
Manifest next update: Mon 21 Apr 2025 22:01:16 +0000
Files and hashes: 1: 99U1CD-xQN2rRTq_gh9ds6b0YaQ.crl (hash: 22ZIA2NfDXtMJJ8OnB+q/cGzyyxL4CT1D7o8djetZlc=)
2: LSE36n14OlFyT2JPffWytn2VECM.roa (hash: aCXHANC+PKr6N/DP0npU9YHvABAfrys/iPm1LqbDFCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/99U1CD-xQN2rRTq_gh9ds6b0YaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/99U1CD-xQN2rRTq_gh9ds6b0YaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/99U1CD-xQN2rRTq_gh9ds6b0YaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:53:99:e0:fd:36:44:69:54:87:1a:4c:cf:dd:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7d535083fb140ddab453abf821f5db3a6f461a4
Validity
Not Before: Apr 20 22:01:16 2025 GMT
Not After : Apr 21 22:01:16 2025 GMT
Subject: CN=b3bf39fe71218da79fc995c8a5e8b92bb4262857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:60:c5:be:95:c6:0b:e2:5b:8b:af:c8:3f:f0:
c6:af:7e:06:e5:e5:08:ec:75:8e:b6:3a:c3:6b:2e:
5c:f8:50:3b:a4:b8:12:e0:7b:60:e9:b1:0c:57:65:
d1:f8:93:74:e0:29:80:8b:1e:77:f6:cd:52:3e:ea:
de:38:8d:c6:ae:2b:0a:8a:0d:30:a2:6d:da:bb:0d:
1c:2e:ec:c2:8c:f6:de:71:0f:0d:d3:6a:66:87:96:
a8:e0:18:aa:32:57:fd:6c:24:42:b2:78:0d:92:e5:
2a:4e:25:a8:23:a3:17:7b:2f:3f:06:85:c2:bc:95:
34:e2:b6:40:2f:84:64:d3:3a:dd:90:e6:f2:c4:1d:
ca:9d:37:d2:7d:ab:00:36:96:09:57:51:35:0e:6a:
e2:0d:5f:3e:29:de:b4:a0:ab:f3:cf:04:f0:84:5d:
b6:f1:40:49:3b:82:80:64:f0:c1:99:80:57:06:96:
0e:38:74:cb:04:8d:0e:90:6d:24:ac:ed:77:88:c5:
4f:8b:73:2c:9b:ca:78:1e:26:02:dd:69:1f:dc:b1:
25:47:6d:1c:ec:15:87:de:d9:84:b7:17:74:f0:54:
62:b4:d6:7a:97:93:19:ed:6e:1c:7c:0d:89:48:d1:
b0:5e:62:25:1b:c6:2e:76:bb:64:e6:a7:8e:33:c9:
93:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:BF:39:FE:71:21:8D:A7:9F:C9:95:C8:A5:E8:B9:2B:B4:26:28:57
X509v3 Authority Key Identifier:
keyid:F7:D5:35:08:3F:B1:40:DD:AB:45:3A:BF:82:1F:5D:B3:A6:F4:61:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/99U1CD-xQN2rRTq_gh9ds6b0YaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/99U1CD-xQN2rRTq_gh9ds6b0YaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/99U1CD-xQN2rRTq_gh9ds6b0YaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:fb:84:c5:b6:82:b8:e1:eb:84:03:27:e9:53:ec:e6:83:2e:
13:be:13:50:39:92:59:21:4d:f0:ee:d5:ad:e9:4f:7f:9c:cd:
e5:33:9e:74:ae:90:71:ab:b9:1e:f7:35:72:38:62:61:3c:be:
7b:1a:52:dd:38:d8:a4:3c:80:93:fb:27:34:70:49:f2:09:0d:
e5:6b:b5:c3:58:b0:b4:30:57:8d:f1:ab:ba:64:72:2d:22:b1:
e8:cb:7f:4f:8b:b1:00:0d:3c:b3:b6:1e:a4:93:dd:40:da:b5:
3b:90:31:b7:47:fe:02:9e:e6:39:b4:12:02:56:79:17:6b:b3:
76:39:91:89:b4:85:6f:0b:a9:57:82:4c:53:17:bf:5a:21:d0:
c8:03:00:fc:cc:a0:60:32:7f:48:e6:8b:b8:c6:b4:c3:2b:39:
a0:1f:29:ae:49:b2:92:02:c6:1c:bd:c1:3e:b1:8c:4c:12:51:
6c:21:af:aa:c3:b7:c4:c0:33:28:8d:e2:68:73:78:91:33:67:
00:57:d4:fc:35:8d:2c:9d:e5:d7:13:3a:01:1b:aa:c5:3e:d4:
58:93:e1:5f:87:ac:05:67:a3:b2:e8:ef:2b:eb:48:ad:4f:ec:
6e:a6:8b:1b:e3:4f:ce:f4:35:73:ad:3f:35:43:6b:41:06:69:
15:50:1b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:47:19 2025 by rpki-client