Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.mft
File: 435f8SPqfS6DzidSDJh9A35knQM.mft (raw, json)
Hash identifier: LXwvVJ3UutTnypVKHZEkNrZEQm3F31A1BQZRnlOGxxs=
Subject key identifier: 93:5D:30:77:3C:FA:54:91:F1:85:63:2C:FC:8B:B6:93:09:1E:70:11
Authority key identifier: E3:7E:5F:F1:23:EA:7D:2E:83:CE:27:52:0C:98:7D:03:7E:64:9D:03
Certificate issuer: /CN=e37e5ff123ea7d2e83ce27520c987d037e649d03
Certificate serial: 0196447B8AED2B9D7DFD4C0AA7FDD558F081
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/435f8SPqfS6DzidSDJh9A35knQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.mft
Manifest number: 0F98
Signing time: Thu 17 Apr 2025 16:01:09 +0000
Manifest this update: Thu 17 Apr 2025 16:01:09 +0000
Manifest next update: Fri 18 Apr 2025 16:01:09 +0000
Files and hashes: 1: 435f8SPqfS6DzidSDJh9A35knQM.crl (hash: EyE5eSbTZ27AVPS3GfmlFbTUdqupNEsqdO54CZNYT20=)
2: tCjXyqFlakOJKQogp8h2votSD1A.roa (hash: m/O4S6Sl2dQY6fRE2qRWrRG8qwZhPhRAmDPSjwX0exE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/435f8SPqfS6DzidSDJh9A35knQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:7b:8a:ed:2b:9d:7d:fd:4c:0a:a7:fd:d5:58:f0:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e37e5ff123ea7d2e83ce27520c987d037e649d03
Validity
Not Before: Apr 17 16:01:09 2025 GMT
Not After : Apr 18 16:01:09 2025 GMT
Subject: CN=935d30773cfa5491f185632cfc8bb693091e7011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:47:f6:4b:29:66:3c:b1:f1:86:d6:8c:0e:d2:
a7:ef:ce:69:a0:7b:ae:13:b6:d7:38:c3:75:72:da:
cb:62:9e:32:95:38:58:3a:ea:8f:16:70:ec:62:89:
34:ac:9e:ad:c7:b2:a7:a2:3a:89:e4:25:c0:e6:b2:
af:58:39:d1:b9:65:15:6d:2c:83:87:05:09:b6:96:
19:59:df:22:8c:a5:99:5d:9f:fa:68:52:11:4b:99:
28:9c:16:49:2c:20:54:c7:17:c3:f8:9c:1e:15:d0:
63:cd:67:de:05:83:a4:52:ba:71:79:42:18:77:34:
0b:0e:80:e7:2e:b1:64:aa:ff:46:c6:22:69:c5:f9:
b9:6b:ae:ac:ec:ac:cd:37:66:21:f3:24:c9:0f:7e:
be:dc:28:2e:25:f7:c0:b4:33:22:78:dc:12:e1:1b:
0b:e3:0f:35:77:10:dd:ad:11:7d:c3:16:fe:dd:e4:
9d:61:27:e1:ed:9e:cd:ae:0e:37:ac:61:ba:0f:ec:
2c:a0:f4:f6:44:e9:a1:04:9f:78:af:27:dc:d9:40:
65:7a:a1:f2:3b:71:23:3f:14:a7:61:d9:36:a4:8c:
60:b9:45:ab:56:75:1b:08:5f:7a:57:25:ca:e3:e4:
5c:fe:2f:7f:05:3a:3c:dc:b9:d4:1c:71:80:d2:08:
f4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:5D:30:77:3C:FA:54:91:F1:85:63:2C:FC:8B:B6:93:09:1E:70:11
X509v3 Authority Key Identifier:
keyid:E3:7E:5F:F1:23:EA:7D:2E:83:CE:27:52:0C:98:7D:03:7E:64:9D:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/435f8SPqfS6DzidSDJh9A35knQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:88:0f:95:9a:5d:30:86:5d:cc:30:b1:35:45:7f:c2:49:1d:
93:a1:d8:58:f0:01:19:05:3c:57:fa:b4:34:a8:d1:82:94:8b:
6a:47:cf:c0:47:90:18:f1:db:23:47:cb:b8:d9:f8:e0:54:b8:
90:d1:96:52:ec:c2:6c:8a:9b:05:a1:cd:6a:99:1e:32:f1:9a:
70:d7:e0:d6:e5:93:f2:71:af:b7:f4:a2:e2:2a:12:e8:04:2b:
39:bc:fe:ed:80:54:3a:17:69:13:3c:46:d4:59:05:11:13:78:
74:a7:e5:d2:5f:16:c2:05:29:fc:4a:aa:34:a0:3e:fe:25:dc:
94:bc:19:e9:07:a0:c3:a7:3f:33:9f:d9:2b:ae:bb:c9:48:46:
3e:13:d6:b0:c1:69:af:64:8e:1e:0f:6f:f2:77:ae:5a:69:b8:
0b:3d:95:c9:59:96:99:d0:62:0c:58:5a:d9:46:dd:55:45:ac:
17:be:d6:01:89:8a:87:d2:9f:8a:b7:5d:16:d8:29:50:02:45:
fc:39:81:f0:50:28:ff:97:55:4b:e6:bf:f4:f1:5c:21:89:ec:
18:bf:cc:a9:30:b6:cc:f0:c1:9f:4b:6d:86:d9:61:49:3e:38:
e4:12:b9:9c:52:64:da:a8:15:97:a3:25:9a:66:cd:c3:a6:d1:
d2:88:74:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 19:53:23 2025 by rpki-client