Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1582e8-0698-4baf-9028-df02b13e2e4a/1/CHqsZ05OV5YCAaNMLAQkhhp_sHc.mft
File: CHqsZ05OV5YCAaNMLAQkhhp_sHc.mft (raw, json)
Hash identifier: ZVhvBXai+5bFNQryIlmjqofVJbybgaJTo1s1T691CrQ=
Subject key identifier: 1F:98:D0:C9:34:7D:FA:E5:01:BE:DF:AD:C6:8F:41:0F:D0:73:9D:3B
Authority key identifier: 08:7A:AC:67:4E:4E:57:96:02:01:A3:4C:2C:04:24:86:1A:7F:B0:77
Certificate issuer: /CN=087aac674e4e57960201a34c2c0424861a7fb077
Certificate serial: 01964C350FC8158C6B1738D58E3D566BC7EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CHqsZ05OV5YCAaNMLAQkhhp_sHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1582e8-0698-4baf-9028-df02b13e2e4a/1/CHqsZ05OV5YCAaNMLAQkhhp_sHc.mft
Manifest number: 0361
Signing time: Sat 19 Apr 2025 04:01:07 +0000
Manifest this update: Sat 19 Apr 2025 04:01:07 +0000
Manifest next update: Sun 20 Apr 2025 04:01:07 +0000
Files and hashes: 1: CHqsZ05OV5YCAaNMLAQkhhp_sHc.crl (hash: m37XZqfSFhC/vO3EdMg+ZyOgYxpDkm35LQzPCAEhbs4=)
2: z81aD-MDwzkjF_KOvhdaxj86KX4.roa (hash: E1FgG/yobviIZfsUKtsw9yD/n1PK8j1TNBK/5+kRW/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/1582e8-0698-4baf-9028-df02b13e2e4a/1/CHqsZ05OV5YCAaNMLAQkhhp_sHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/1582e8-0698-4baf-9028-df02b13e2e4a/1/CHqsZ05OV5YCAaNMLAQkhhp_sHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CHqsZ05OV5YCAaNMLAQkhhp_sHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:35:0f:c8:15:8c:6b:17:38:d5:8e:3d:56:6b:c7:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=087aac674e4e57960201a34c2c0424861a7fb077
Validity
Not Before: Apr 19 04:01:07 2025 GMT
Not After : Apr 20 04:01:07 2025 GMT
Subject: CN=1f98d0c9347dfae501bedfadc68f410fd0739d3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4f:9e:e6:c8:2c:d7:42:b0:8b:d8:cb:02:be:
19:d3:e4:a1:9f:4e:08:03:b4:68:22:97:d7:7c:90:
0f:05:c0:d1:9b:69:4a:71:dd:ec:3c:87:93:3f:94:
5f:d6:4a:d2:c3:d0:6b:4b:15:49:dd:1d:91:7d:af:
ee:94:91:c2:d0:de:c1:58:ca:6d:de:73:55:72:d4:
70:b0:d6:6e:31:de:39:5f:95:ae:b0:60:fb:c0:f9:
28:ab:02:67:af:0a:21:e7:e8:5c:f6:2e:30:b7:22:
b6:36:62:a1:36:9a:08:8c:52:04:d0:a5:45:b3:65:
4c:83:87:b3:8f:99:bf:ec:a0:53:2d:40:27:eb:71:
b8:2b:dc:2c:a5:ee:01:43:a3:50:3e:67:68:96:d5:
d0:c2:00:10:26:da:01:2c:58:a9:0f:66:f8:29:1d:
03:3e:82:e4:46:23:f8:08:dd:a9:9a:7b:c9:03:c5:
05:83:14:1e:20:24:e3:9a:7e:17:37:6f:10:c1:29:
34:c6:53:91:9e:12:ee:85:86:58:65:2d:dc:84:48:
f0:01:fa:49:ce:67:5b:b9:32:aa:53:7e:51:71:c8:
48:4b:31:8f:6a:c3:4a:e7:97:05:cc:ee:fd:ab:92:
8a:d4:05:0c:d4:d5:1f:7f:ed:b5:e0:53:f7:f8:27:
ed:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:98:D0:C9:34:7D:FA:E5:01:BE:DF:AD:C6:8F:41:0F:D0:73:9D:3B
X509v3 Authority Key Identifier:
keyid:08:7A:AC:67:4E:4E:57:96:02:01:A3:4C:2C:04:24:86:1A:7F:B0:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CHqsZ05OV5YCAaNMLAQkhhp_sHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1582e8-0698-4baf-9028-df02b13e2e4a/1/CHqsZ05OV5YCAaNMLAQkhhp_sHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1582e8-0698-4baf-9028-df02b13e2e4a/1/CHqsZ05OV5YCAaNMLAQkhhp_sHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:b9:76:ab:7b:1e:81:9b:df:00:9d:6a:c3:c8:88:e5:b5:bf:
2b:d1:ea:43:7b:ed:5e:0b:5a:57:b4:e4:73:20:ca:1b:00:f5:
f4:aa:fe:62:58:5e:c9:e6:d8:3a:9e:85:7b:be:4d:b9:51:69:
42:51:16:8c:a5:de:58:f6:91:2b:ea:90:54:4f:8c:8f:0b:0b:
1f:1b:d6:56:04:a0:48:b1:4d:9a:db:c6:16:d3:f7:92:ff:85:
93:43:72:1f:bf:e1:17:eb:fb:a0:20:75:aa:aa:06:f4:a5:56:
e2:01:df:2d:f9:ff:b2:94:d9:6b:b3:4c:d8:6e:ec:ef:3a:8a:
63:21:e5:47:4d:8e:83:d1:03:13:ad:9e:9c:70:2b:e1:42:01:
35:9c:48:38:76:15:a4:34:71:15:03:17:ff:32:4b:6d:ab:48:
38:bf:c4:81:84:51:6c:4d:bf:6b:e9:f5:b3:d6:d0:7c:4b:73:
86:1f:04:9e:6f:08:53:2a:77:3a:77:86:73:06:2e:31:e6:67:
70:92:81:45:4a:2a:2e:2e:d7:8a:92:92:3a:da:26:b6:73:62:
5d:f1:a1:d1:9a:da:36:c9:15:07:da:20:7a:44:db:02:5c:eb:
7f:87:e7:ba:11:0d:15:b8:4c:ce:03:a8:50:86:de:7d:4b:b8:
92:e3:8b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:26:39 2025 by rpki-client