Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.mft
File: S9Kz8xprCl18Bpijd5alHXsMtqQ.mft (raw, json)
Hash identifier: bN25kC+RiCsh8z7aCj+T2ye1z0EWnb53+/DEKQiT1VQ=
Subject key identifier: 41:B7:40:40:4E:17:9A:E5:F8:EC:FF:EA:86:E8:C2:05:12:3E:59:10
Authority key identifier: 4B:D2:B3:F3:1A:6B:0A:5D:7C:06:98:A3:77:96:A5:1D:7B:0C:B6:A4
Certificate issuer: /CN=4bd2b3f31a6b0a5d7c0698a37796a51d7b0cb6a4
Certificate serial: 01965492C60CA97341F2E96C2CAB6C1FAB01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9Kz8xprCl18Bpijd5alHXsMtqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.mft
Manifest number: 14FF
Signing time: Sun 20 Apr 2025 19:00:27 +0000
Manifest this update: Sun 20 Apr 2025 19:00:27 +0000
Manifest next update: Mon 21 Apr 2025 19:00:27 +0000
Files and hashes: 1: Rdx8XfheQK9SaYz_CldryphH9T8.roa (hash: y/tJ0RmbT3dmGd7x3jwaVo6j1E4t/44CEGiNjsjlces=)
2: S9Kz8xprCl18Bpijd5alHXsMtqQ.crl (hash: qrWsSdfAIMU/9aTEwtGxlZ8Fm6cSvh5sWabVKlQHFks=)
3: fUKc1eWdHmKeTh30S5pWd_dRf4M.roa (hash: GDoe187PYSy+m1pOUWwfwziOM1L2+4EiEEfpzL06VQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/S9Kz8xprCl18Bpijd5alHXsMtqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:92:c6:0c:a9:73:41:f2:e9:6c:2c:ab:6c:1f:ab:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bd2b3f31a6b0a5d7c0698a37796a51d7b0cb6a4
Validity
Not Before: Apr 20 19:00:27 2025 GMT
Not After : Apr 21 19:00:27 2025 GMT
Subject: CN=41b740404e179ae5f8ecffea86e8c205123e5910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b7:c7:fe:2c:c6:11:ae:b4:75:a8:e7:62:4a:
d0:10:33:d0:17:64:62:0f:0b:58:d4:ce:d5:8b:7e:
9d:51:86:bd:5f:23:c8:76:90:1b:3d:d8:5b:e7:7b:
67:2b:b3:6a:18:23:e5:7a:be:59:ec:fc:06:78:ca:
c9:e7:de:0c:67:91:86:5a:55:82:a8:bb:bd:c2:b1:
6d:52:66:5c:0e:fb:e0:f6:e3:a3:df:df:00:fb:f5:
09:ee:d8:f3:7f:c2:82:74:dd:2f:f8:db:51:82:80:
76:cd:99:12:de:15:2c:08:3f:3a:8e:f9:c2:bd:03:
9e:57:a4:4e:49:04:8d:43:fb:70:57:ed:ae:d4:f9:
53:9b:b1:76:3a:28:fd:0f:e2:84:1e:74:6a:cd:41:
29:59:54:4b:0e:27:16:05:4b:76:15:de:d7:5d:fc:
ef:47:2f:f5:8e:a1:e6:b8:fb:75:1b:fe:a1:70:3a:
3a:4e:92:91:2c:5c:44:42:3b:5c:77:a6:e2:5c:2f:
57:4b:da:43:ad:79:4f:7e:08:ba:7a:19:88:2a:50:
ac:f3:aa:fc:1b:25:fc:52:dc:cf:ee:43:26:a7:51:
86:46:a6:15:27:47:34:08:24:74:5a:1c:48:e2:e2:
8e:75:da:5d:bb:10:7d:a7:1e:2c:5f:28:a6:4e:fd:
3c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:B7:40:40:4E:17:9A:E5:F8:EC:FF:EA:86:E8:C2:05:12:3E:59:10
X509v3 Authority Key Identifier:
keyid:4B:D2:B3:F3:1A:6B:0A:5D:7C:06:98:A3:77:96:A5:1D:7B:0C:B6:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9Kz8xprCl18Bpijd5alHXsMtqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:3e:2a:14:de:02:c0:c6:13:6d:81:e4:a5:a2:af:99:5f:83:
db:69:56:a2:3d:b6:82:31:f1:8e:ef:82:b1:e7:4f:5e:b6:2c:
59:b4:54:e3:71:1e:69:69:07:2a:3e:02:aa:f4:db:9c:9a:0a:
9c:55:bc:94:61:0d:6c:26:f6:a1:c7:c8:62:1e:c0:21:78:a8:
47:94:e7:5d:15:10:25:9e:b8:17:05:31:d5:3f:5e:31:44:0e:
04:89:e1:66:9d:d0:74:44:92:75:c8:0b:8f:a1:ba:e0:4a:09:
c0:b6:c2:4a:f0:92:7d:89:cf:25:2d:40:c9:50:ed:3a:7d:f9:
17:39:1e:db:72:6d:80:80:64:e6:de:74:bb:73:60:b5:73:d8:
78:63:82:ed:ba:b5:62:59:6c:39:22:e9:6c:c1:60:4e:9e:e3:
d1:dc:d5:b9:f7:92:83:7a:74:16:73:56:71:bd:25:98:fb:ec:
4f:ba:c8:1b:16:c3:8a:0b:00:14:f1:92:37:db:37:16:0c:97:
d3:b4:84:85:1d:25:56:a8:1c:0d:43:b5:70:84:10:80:bc:a1:
20:24:af:71:e2:72:d9:b8:eb:44:f2:99:13:5f:58:19:82:b2:
fb:59:a7:a3:56:1c:3b:46:81:af:bc:05:01:35:13:2c:e8:11:
9c:07:c5:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:03:55 2025 by rpki-client