Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.mft
File: pH9wjDSl5x2vPS5UuZq3Twae-As.mft (raw, json)
Hash identifier: 4G9Ez/1p5gZsHlDC72hj7LgeY3zqPuAb37WYx8lnTrs=
Subject key identifier: 0D:32:EE:CA:F6:BB:9D:9D:F7:C1:1F:E1:D0:91:BE:BD:E7:63:88:1D
Authority key identifier: A4:7F:70:8C:34:A5:E7:1D:AF:3D:2E:54:B9:9A:B7:4F:06:9E:F8:0B
Certificate issuer: /CN=a47f708c34a5e71daf3d2e54b99ab74f069ef80b
Certificate serial: 01964E22DE1CEA4644D958F933E15CEEA607
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pH9wjDSl5x2vPS5UuZq3Twae-As.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.mft
Manifest number: 0A94
Signing time: Sat 19 Apr 2025 13:00:30 +0000
Manifest this update: Sat 19 Apr 2025 13:00:30 +0000
Manifest next update: Sun 20 Apr 2025 13:00:30 +0000
Files and hashes: 1: 6y2PxXoNf17k752-h-Vh6181ybg.roa (hash: /D4LWQIJRMeiTsLLzqJFb6QygqeaBkt1FMx26cAAcmk=)
2: Uxq2zaQ3C0F2KaVo_-rxCUMMpzU.roa (hash: VbEHRBQ6CnI3V57/ypd9YP2tAsM8cgW+F1+a7XG3s5Q=)
3: pH9wjDSl5x2vPS5UuZq3Twae-As.crl (hash: xXXZPsLKpGFGCVsKLHsRBwuD5pgNH8xqGtY08Q3GiYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.mft
rsync://rpki.ripe.net/repository/DEFAULT/pH9wjDSl5x2vPS5UuZq3Twae-As.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:22:de:1c:ea:46:44:d9:58:f9:33:e1:5c:ee:a6:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a47f708c34a5e71daf3d2e54b99ab74f069ef80b
Validity
Not Before: Apr 19 13:00:30 2025 GMT
Not After : Apr 20 13:00:30 2025 GMT
Subject: CN=0d32eecaf6bb9d9df7c11fe1d091bebde763881d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:37:7f:24:8a:81:0b:92:bf:ab:0b:b7:c5:d7:
3f:90:8b:7e:d1:d6:15:80:25:ba:31:1d:83:cc:a6:
5d:d1:8b:6b:22:70:9c:f3:f8:10:4f:e1:88:63:09:
59:d3:1a:33:1b:bc:12:29:a0:b3:3b:c2:a8:78:62:
65:de:2f:7f:9f:c8:5a:ff:68:78:48:ba:62:50:9f:
50:b4:ac:ef:f1:f1:ba:52:e0:ae:4b:c5:d2:4d:ee:
1c:ec:0f:dd:47:f5:0d:a0:56:b9:57:c3:13:ec:81:
34:11:5b:09:d0:18:70:2d:80:35:f9:7a:e1:02:09:
2b:84:fc:fb:03:4a:20:76:e8:81:9e:31:7e:7c:81:
75:05:44:e4:eb:22:80:7b:1a:a2:de:68:03:52:18:
66:de:43:5a:5d:5b:e9:b0:22:62:93:94:87:74:20:
31:bc:2b:a8:b2:46:6c:10:49:c5:bd:54:ba:34:f2:
1e:dd:bf:32:8f:6c:29:6d:26:d7:bc:45:3f:60:33:
c1:6f:12:29:6b:49:f7:7b:02:15:4b:ce:03:e2:4d:
d9:d0:35:1c:09:2d:c9:f2:f9:ce:6b:04:c0:e6:2f:
75:36:60:96:2e:5e:08:54:3d:4e:aa:dc:37:eb:73:
a8:3f:97:c8:6c:2a:d5:1a:ac:c6:3f:c5:22:8b:68:
db:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:32:EE:CA:F6:BB:9D:9D:F7:C1:1F:E1:D0:91:BE:BD:E7:63:88:1D
X509v3 Authority Key Identifier:
keyid:A4:7F:70:8C:34:A5:E7:1D:AF:3D:2E:54:B9:9A:B7:4F:06:9E:F8:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pH9wjDSl5x2vPS5UuZq3Twae-As.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:15:eb:a8:5a:28:20:4a:e2:47:91:1b:9d:08:44:43:d6:9e:
73:f6:68:61:58:a3:21:c0:1d:1b:43:48:1e:02:a2:b4:fc:02:
d2:d0:19:f1:fd:61:55:66:c8:82:8a:93:d9:ba:25:be:5a:7e:
30:67:8c:e5:e4:d1:ba:54:2c:5a:eb:e1:37:a7:52:52:db:66:
b3:d9:cb:ae:6f:67:43:41:32:4f:12:6a:26:e4:09:4a:62:15:
e3:fe:8c:d6:70:4c:b4:7b:df:8f:a5:3d:7f:31:3d:bb:30:b5:
fc:79:e1:a6:c0:29:67:3c:49:f9:da:31:9e:c8:b5:62:a7:8a:
96:53:3e:ee:42:42:b0:4c:f5:c3:c1:39:2f:66:64:05:80:31:
62:f2:b6:9c:fc:07:b0:0f:cf:73:c5:10:72:b1:a3:79:b3:f4:
e8:03:2b:35:45:9c:6d:61:81:bd:88:64:9a:3c:48:4c:91:09:
38:d0:ad:8d:62:86:37:0f:43:dc:d8:7d:87:44:aa:c8:76:a5:
9d:28:a2:c2:21:1b:13:4f:48:e3:43:0e:d8:b8:61:1f:e4:e8:
2e:86:38:0e:ac:6a:78:96:fc:07:02:7d:07:5c:e1:a0:35:71:
94:14:e5:d6:23:9b:73:35:af:43:0a:8d:38:5e:bf:70:0e:f5:
81:12:61:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:28:36 2025 by rpki-client