Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.mft
File: maYtMHOoLahlQqz8Nvb8ueZqBbs.mft (raw, json)
Hash identifier: nDTXxwlMOpgto8V21VNqLpzegFvC/aQ/8JPSG7svhgY=
Subject key identifier: 40:9A:1C:F5:93:05:D1:CA:4B:60:14:B4:AB:85:5A:47:E4:49:D9:F9
Authority key identifier: 99:A6:2D:30:73:A8:2D:A8:65:42:AC:FC:36:F6:FC:B9:E6:6A:05:BB
Certificate issuer: /CN=99a62d3073a82da86542acfc36f6fcb9e66a05bb
Certificate serial: 0196526DCBBE7B3D42FA280D477917B64007
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maYtMHOoLahlQqz8Nvb8ueZqBbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.mft
Manifest number: 0C11
Signing time: Sun 20 Apr 2025 09:00:49 +0000
Manifest this update: Sun 20 Apr 2025 09:00:49 +0000
Manifest next update: Mon 21 Apr 2025 09:00:49 +0000
Files and hashes: 1: maYtMHOoLahlQqz8Nvb8ueZqBbs.crl (hash: ICAbfKEA4CnCIVBOrDWYMllZXskt4eymF982B7bDKoQ=)
2: sEp92JJOOutIpHjLS3hTbE4CMc4.roa (hash: zayIaTeW8P15HaHDoVK2CtiggZ6Pbixqm/OKP7D4RHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/maYtMHOoLahlQqz8Nvb8ueZqBbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:6d:cb:be:7b:3d:42:fa:28:0d:47:79:17:b6:40:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a62d3073a82da86542acfc36f6fcb9e66a05bb
Validity
Not Before: Apr 20 09:00:49 2025 GMT
Not After : Apr 21 09:00:49 2025 GMT
Subject: CN=409a1cf59305d1ca4b6014b4ab855a47e449d9f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f9:26:18:fd:3f:8d:7b:26:56:ad:cb:8d:77:
e7:01:61:57:97:1b:1d:fd:31:1c:62:9e:f7:68:82:
1f:38:a5:b0:c1:62:c8:65:ec:78:c0:14:b2:a5:cf:
04:74:b9:de:e6:54:8f:b7:97:df:81:5c:39:8b:40:
26:72:78:81:5d:98:3f:86:6a:d8:d7:19:d9:4a:c5:
72:3b:d8:18:0d:61:01:1a:ae:9f:ae:eb:1e:f5:86:
bf:08:5f:75:f2:e3:4d:e4:cb:e6:fe:e6:43:72:9b:
34:70:2f:08:c8:4a:4e:c9:27:69:40:f7:29:a4:2d:
d8:60:17:cb:88:75:87:0d:a6:4c:2c:54:97:80:fa:
04:6c:96:a8:3b:0a:1e:d0:d8:13:25:71:1c:c4:97:
7b:07:15:2d:8f:bc:02:66:f1:64:c8:71:0e:3d:69:
97:44:80:31:bd:ff:d9:49:d8:25:15:9f:ee:3e:51:
45:88:c2:a6:cd:1d:67:c5:d0:8c:18:d7:84:f9:8a:
c6:ee:f8:14:30:53:c9:2d:f3:f9:a3:7f:25:05:66:
91:6c:c8:3f:f8:d8:7d:6d:de:c7:33:b8:cc:d2:f1:
4e:6b:38:89:ef:9e:95:01:6a:be:78:cb:e2:00:73:
3b:bb:28:8e:0c:1a:0e:4a:96:a4:bc:6e:45:c3:0b:
01:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:9A:1C:F5:93:05:D1:CA:4B:60:14:B4:AB:85:5A:47:E4:49:D9:F9
X509v3 Authority Key Identifier:
keyid:99:A6:2D:30:73:A8:2D:A8:65:42:AC:FC:36:F6:FC:B9:E6:6A:05:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maYtMHOoLahlQqz8Nvb8ueZqBbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:0b:3c:55:44:b8:a6:24:a8:c2:3f:88:ec:48:9e:06:fc:12:
e2:9c:a1:b6:89:21:40:0f:2c:c1:c4:fb:5c:5f:ea:ca:8d:55:
be:b4:40:be:bb:40:5d:9b:40:83:4c:f3:8f:ce:cb:36:50:a8:
28:d3:11:83:2f:49:35:cc:b6:cc:85:f4:ce:fd:6b:8b:ad:3e:
28:44:6f:58:39:0a:1e:2d:90:1d:4f:1c:78:74:91:77:05:29:
a2:76:44:c8:f3:1d:12:ae:65:5d:4b:64:3b:9f:41:42:b1:9d:
19:13:21:e3:62:42:f5:20:37:5d:58:99:f3:85:52:ce:05:99:
e8:75:95:57:d9:94:5a:50:92:f7:0e:c1:cc:c8:cb:08:3d:b5:
d0:49:76:c0:bc:1b:1a:cc:fa:41:48:b3:6f:b6:2a:88:5d:fd:
ce:70:67:2c:25:94:eb:47:b5:87:0b:67:c7:5c:ed:2b:ba:71:
e4:1a:15:24:08:bf:83:1e:b0:92:83:fe:3e:81:78:ce:f7:0a:
7b:48:8d:3f:ce:49:3b:91:c5:c2:53:37:b0:68:ee:21:be:78:
5d:58:3a:b4:4e:18:7e:86:f4:18:d1:de:af:52:21:f1:90:84:
77:b3:a3:70:a6:a1:12:9f:7f:21:7a:ae:74:18:a2:50:45:27:
4a:47:ec:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:52:18 2025 by rpki-client