Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/047dec-d844-467a-a01a-fc03ef794718/1/rsr5Su3_76Q2a8or65GZLB2zTMw.mft
File: rsr5Su3_76Q2a8or65GZLB2zTMw.mft (raw, json)
Hash identifier: Qy6C/iwCOW8yF/21P2HYrcxOPell68DBfXmap5zv0uI=
Subject key identifier: BF:DA:8F:88:D3:D1:5B:9C:D0:40:9C:B7:C7:37:BC:D3:A7:31:8D:76
Authority key identifier: AE:CA:F9:4A:ED:FF:EF:A4:36:6B:CA:2B:EB:91:99:2C:1D:B3:4C:CC
Certificate issuer: /CN=aecaf94aedffefa4366bca2beb91992c1db34ccc
Certificate serial: 0196127D4359638B53AE0A837A3A589F04A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rsr5Su3_76Q2a8or65GZLB2zTMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/047dec-d844-467a-a01a-fc03ef794718/1/rsr5Su3_76Q2a8or65GZLB2zTMw.mft
Manifest number: 0873
Signing time: Mon 07 Apr 2025 23:02:01 +0000
Manifest this update: Mon 07 Apr 2025 23:02:01 +0000
Manifest next update: Tue 08 Apr 2025 23:02:01 +0000
Files and hashes: 1: rsr5Su3_76Q2a8or65GZLB2zTMw.crl (hash: fCzEBeMc168+3h5Og9wnNBfpqdp8Af0L9DXyVPDskhE=)
2: ycsxAxwfvi_ZHCMIh-H72E7BXeY.roa (hash: 5XrkDdaM3UebECdsSy+x2CvwywLxmUspYKKtB6gwnm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/047dec-d844-467a-a01a-fc03ef794718/1/rsr5Su3_76Q2a8or65GZLB2zTMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/047dec-d844-467a-a01a-fc03ef794718/1/rsr5Su3_76Q2a8or65GZLB2zTMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rsr5Su3_76Q2a8or65GZLB2zTMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:12:7d:43:59:63:8b:53:ae:0a:83:7a:3a:58:9f:04:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aecaf94aedffefa4366bca2beb91992c1db34ccc
Validity
Not Before: Apr 7 23:02:01 2025 GMT
Not After : Apr 8 23:02:01 2025 GMT
Subject: CN=bfda8f88d3d15b9cd0409cb7c737bcd3a7318d76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a7:ce:70:3c:93:c8:9b:b7:26:a8:43:d8:f3:
b7:18:83:27:f5:62:e2:64:1f:95:97:46:95:fe:04:
0f:4a:41:fd:23:f4:08:6a:78:fb:fe:8f:ca:ea:ed:
a7:2f:6e:a5:9c:c4:69:1a:38:e0:9e:9a:09:12:aa:
4f:91:99:c4:d4:26:33:8e:3b:51:62:ad:2e:89:85:
0e:b3:7f:cf:2b:25:80:c6:03:e1:c4:f4:e9:0c:5d:
d8:c3:e3:76:a7:80:45:92:ff:ed:3d:22:a0:69:ab:
78:9b:f6:73:9c:f3:13:97:fe:03:6d:18:4f:b2:9e:
73:0b:0a:a7:b9:62:48:28:e9:b0:ed:e0:8c:ba:27:
ec:35:9f:2e:a3:e1:c6:de:c1:d4:5e:0f:0b:09:e3:
6b:6f:ac:3f:dd:90:7a:61:13:39:5c:b6:12:59:81:
15:ae:93:01:9b:5c:ba:39:ec:40:11:c9:a3:86:40:
ef:be:73:ca:aa:30:4f:8a:17:d6:77:1a:48:22:46:
de:28:2c:76:9f:c4:60:d3:f3:7e:01:0c:1f:8a:b6:
59:7c:f3:60:03:9f:76:dd:2a:2a:14:65:bc:34:9d:
e8:e2:85:36:0b:33:ee:8f:58:cc:68:02:1f:0e:41:
73:27:33:06:6c:11:f2:06:8b:11:8c:14:87:ac:49:
f3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:DA:8F:88:D3:D1:5B:9C:D0:40:9C:B7:C7:37:BC:D3:A7:31:8D:76
X509v3 Authority Key Identifier:
keyid:AE:CA:F9:4A:ED:FF:EF:A4:36:6B:CA:2B:EB:91:99:2C:1D:B3:4C:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rsr5Su3_76Q2a8or65GZLB2zTMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/047dec-d844-467a-a01a-fc03ef794718/1/rsr5Su3_76Q2a8or65GZLB2zTMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/047dec-d844-467a-a01a-fc03ef794718/1/rsr5Su3_76Q2a8or65GZLB2zTMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:73:86:28:0d:cb:f4:7c:4f:5c:87:85:a4:f9:0a:24:3e:c3:
af:b2:99:91:82:52:a9:d5:b5:24:1c:10:31:d1:36:e7:f6:32:
a6:2a:28:46:c1:6f:39:e8:9f:8f:09:10:b0:89:a5:86:a3:22:
a0:b3:af:51:29:04:39:16:f1:ff:76:21:01:ec:f8:ed:4f:a2:
48:42:2f:59:dc:83:53:82:3f:75:67:c5:16:cb:9a:45:5c:e9:
ea:70:18:46:39:df:65:e6:fc:98:ad:6a:07:f5:c8:41:31:7e:
85:2c:95:3d:28:0c:a1:ca:3e:40:6e:47:58:f1:13:f8:46:e5:
6c:e3:70:ce:79:14:e2:05:8f:63:2b:5e:7c:81:61:d8:0e:5c:
0b:88:20:74:77:02:f1:01:b1:78:05:d9:88:6e:4a:db:38:4e:
7b:89:99:e2:33:d8:11:13:a5:46:86:e4:cb:ad:66:a3:96:a3:
62:84:3e:52:2f:d5:c8:fa:1d:2b:c1:05:0d:62:1c:c2:78:d2:
fc:b1:48:8e:80:31:7f:13:7d:66:51:b3:c7:7f:80:71:75:3b:
8a:af:12:7e:99:1b:ba:97:60:f6:52:d7:8b:c8:96:48:08:7d:
7a:70:fd:dc:e0:00:66:af:50:5f:1f:24:a1:be:af:68:03:f7:
2f:c1:a9:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:11:28 2025 by rpki-client