Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/2c3eee-2189-4469-816b-99b873e5e74a/1/92O3x0pHzua9mbvGKu-DalYCtTE.mft
File: 92O3x0pHzua9mbvGKu-DalYCtTE.mft (raw, json)
Hash identifier: VFnHvhzhwGgNVQNmRfgWtHA/CkCUYU98E/zrijtAnKs=
Subject key identifier: BC:23:3C:D0:80:A0:54:35:60:23:2A:D2:0D:E0:7B:85:0B:EF:F2:A6
Authority key identifier: F7:63:B7:C7:4A:47:CE:E6:BD:99:BB:C6:2A:EF:83:6A:56:02:B5:31
Certificate issuer: /CN=f763b7c74a47cee6bd99bbc62aef836a5602b531
Certificate serial: 01958EF346B8B8C4C474BDC072EBF4F27183
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92O3x0pHzua9mbvGKu-DalYCtTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/2c3eee-2189-4469-816b-99b873e5e74a/1/92O3x0pHzua9mbvGKu-DalYCtTE.mft
Manifest number: 041A
Signing time: Thu 13 Mar 2025 10:01:02 +0000
Manifest this update: Thu 13 Mar 2025 10:01:02 +0000
Manifest next update: Fri 14 Mar 2025 10:01:02 +0000
Files and hashes: 1: 92O3x0pHzua9mbvGKu-DalYCtTE.crl (hash: 0DNSnukDZaWao3qrh9an7U9lrZcRQJgImt3KuQ/o5cs=)
2: wN1wFK2nod8Oc7XWg-Kjf2cevZI.roa (hash: S+MrRK13xZ8FD9NbutVvWutfcwGFlY+gNxR94qjOH3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/2c3eee-2189-4469-816b-99b873e5e74a/1/92O3x0pHzua9mbvGKu-DalYCtTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/2c3eee-2189-4469-816b-99b873e5e74a/1/92O3x0pHzua9mbvGKu-DalYCtTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/92O3x0pHzua9mbvGKu-DalYCtTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 10:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8e:f3:46:b8:b8:c4:c4:74:bd:c0:72:eb:f4:f2:71:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f763b7c74a47cee6bd99bbc62aef836a5602b531
Validity
Not Before: Mar 13 10:01:02 2025 GMT
Not After : Mar 14 10:01:02 2025 GMT
Subject: CN=bc233cd080a0543560232ad20de07b850beff2a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:84:a0:6f:92:69:67:9e:cf:cb:13:07:ea:87:
c6:dd:e4:72:54:a7:e3:c2:7a:16:cd:8c:59:64:67:
3f:ca:f2:29:40:cc:54:0a:82:93:bd:32:13:f8:e4:
b6:53:38:56:65:d6:bc:5b:7d:fb:65:01:a8:ef:f4:
5f:39:fc:c1:34:ba:3d:a2:e0:1d:c5:b2:7e:89:2a:
2c:3c:c1:e7:39:dc:af:ef:23:92:c4:fa:68:db:55:
17:f0:d8:f7:97:af:dd:b3:75:37:8f:87:b7:65:10:
ba:6b:e0:e8:a5:6b:b8:02:50:d0:3f:27:fb:2d:4e:
fc:43:24:15:c0:2c:51:e9:8c:e7:d2:88:6b:3d:e4:
1d:9e:e9:63:c8:ee:92:eb:a4:1c:4c:f8:9a:b8:49:
42:9f:3c:b4:8d:6e:e9:2d:d3:ea:92:96:7f:5e:d5:
22:7a:2a:17:fb:f4:cb:5d:0c:7b:57:17:e0:d7:01:
b5:26:1f:29:e6:12:24:05:4c:92:bf:3e:69:87:1c:
30:c4:4e:16:09:ca:90:08:14:9b:64:3d:7e:64:ee:
18:95:28:9f:0e:7a:9c:5a:94:17:36:3e:62:82:a6:
98:b8:fe:1c:ac:55:5f:3b:35:4d:30:14:11:cb:d3:
b6:74:12:83:b0:a9:6c:48:56:76:e8:e9:41:b3:75:
9f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:23:3C:D0:80:A0:54:35:60:23:2A:D2:0D:E0:7B:85:0B:EF:F2:A6
X509v3 Authority Key Identifier:
keyid:F7:63:B7:C7:4A:47:CE:E6:BD:99:BB:C6:2A:EF:83:6A:56:02:B5:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92O3x0pHzua9mbvGKu-DalYCtTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2c3eee-2189-4469-816b-99b873e5e74a/1/92O3x0pHzua9mbvGKu-DalYCtTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2c3eee-2189-4469-816b-99b873e5e74a/1/92O3x0pHzua9mbvGKu-DalYCtTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:38:2c:40:4d:fe:6c:03:5a:c2:cc:fb:b2:56:12:ac:43:b6:
b9:92:a6:23:bc:9b:73:99:bb:f1:0f:58:3e:51:e5:dc:eb:30:
48:3b:54:9b:d4:d7:7f:cc:ee:af:aa:1a:a1:b1:62:e2:69:66:
02:3d:dc:13:33:58:9a:d6:11:c3:ee:e3:f7:32:f5:58:68:d7:
89:cc:aa:ab:1a:3d:39:01:86:2e:c4:98:14:23:50:de:d9:00:
05:72:1d:94:63:a5:e3:93:18:5d:c0:64:65:57:8d:d2:7f:2a:
85:b1:7e:d9:7e:51:ec:11:1f:af:cf:34:98:2b:2d:8b:33:b0:
27:45:2a:5c:e2:4a:46:a5:bd:ac:63:67:53:78:be:b9:d3:fe:
8c:09:21:f8:06:a0:f4:45:3b:b0:94:72:77:b8:06:0d:23:bc:
34:19:31:b7:e1:2e:33:d3:84:78:8d:44:dd:6a:d3:5a:3a:c1:
c3:96:16:b5:db:42:9f:a1:a9:84:d7:62:a0:44:ef:6f:0a:b8:
dc:c5:6b:2d:e3:a4:9c:08:90:87:55:df:19:72:5b:94:2b:aa:
9d:2c:bc:d1:c0:b1:9a:a0:90:c0:a5:c1:71:66:ce:91:88:4e:
ef:04:62:b7:05:1e:d1:c2:c8:76:80:87:ea:5d:b1:6f:77:34:
d6:bd:b0:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:18:20 2025 by rpki-client