Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft
File: cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft (raw, json)
Hash identifier: uRILaciGAQgWTnhkJzt/Zf8JuDqv8MAOF3nA9eixei8=
Subject key identifier: 50:5A:07:8C:61:1E:A7:46:0A:C7:B0:A5:B4:CE:8F:97:59:98:28:CD
Authority key identifier: 71:2F:F1:1D:D0:C6:6C:E6:7F:E0:F1:D7:49:C0:90:9E:F3:41:8D:29
Certificate issuer: /CN=712ff11dd0c66ce67fe0f1d749c0909ef3418d29
Certificate serial: 019610C5007EBF3C467B6A8997ECB7489BBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cS_xHdDGbOZ_4PHXScCQnvNBjSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft
Manifest number: 08F5
Signing time: Mon 07 Apr 2025 15:01:08 +0000
Manifest this update: Mon 07 Apr 2025 15:01:08 +0000
Manifest next update: Tue 08 Apr 2025 15:01:08 +0000
Files and hashes: 1: cS_xHdDGbOZ_4PHXScCQnvNBjSk.crl (hash: NnCx/hmbGNAv+J64wp6RKb0lJ0eoNm9dEBUw7ewYYlk=)
2: rs9tHLr8zyXOfjLVtvASmrQRyII.roa (hash: TPmV5eCt75VU6HkVEIxwqSqz2UP53y06YcldQPwtkco=)
3: yrE5IOAO5wezku-a_RJR7TB3CkA.roa (hash: 7HAAXilZN5MLFA2Yt1+6x9clHUzDWGtePYkFTFw0/Hk=)
4: zX3z-Ivq7H5_KU4k1lIkOCnGhd0.roa (hash: 0LyNXWO0Wf/6GO5a+bSTGSO0K4OEPsxkW9pcYGNMQq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cS_xHdDGbOZ_4PHXScCQnvNBjSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:10:c5:00:7e:bf:3c:46:7b:6a:89:97:ec:b7:48:9b:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712ff11dd0c66ce67fe0f1d749c0909ef3418d29
Validity
Not Before: Apr 7 15:01:08 2025 GMT
Not After : Apr 8 15:01:08 2025 GMT
Subject: CN=505a078c611ea7460ac7b0a5b4ce8f97599828cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:05:d3:05:6a:52:71:af:5b:d5:dc:c5:fe:5a:
29:42:19:4c:1b:7d:dd:df:c8:87:a8:4d:d7:ad:4f:
68:b1:79:4f:ec:c3:61:d2:3f:31:40:bf:00:35:f9:
fb:a7:e0:cf:28:98:45:a5:23:b2:b4:4a:86:2b:5e:
93:d6:8f:16:44:29:10:90:d5:74:79:14:b4:51:26:
e9:c3:bb:da:f7:c9:85:17:bc:52:40:97:e4:a8:96:
71:da:f1:85:46:a1:80:aa:d8:7b:ed:bb:64:d7:5a:
1b:b1:41:2d:5b:ab:e7:91:70:cc:d3:44:6c:31:3f:
14:a4:de:a7:f6:96:90:9b:eb:47:5f:e0:9a:fa:53:
5a:d3:92:71:d3:be:60:9a:d1:20:52:61:cc:2c:b1:
e9:71:72:7a:7a:32:b8:c5:a9:07:9f:2c:38:b6:d1:
d2:68:c3:09:8d:bd:3a:ee:fb:5a:9e:27:9e:bb:39:
10:2d:70:c6:41:77:f1:e7:d3:5f:94:fa:6e:6a:7b:
d3:5a:1f:2f:46:e2:13:92:c4:72:40:69:49:fd:e4:
28:b2:4b:0d:b3:2d:b6:54:fa:65:b1:1b:21:6b:5d:
d5:e9:87:5b:ab:e9:40:68:50:8b:3a:7b:2a:c2:d4:
dd:39:b1:4f:af:c7:0c:a9:8a:38:99:32:e7:55:d5:
fd:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:5A:07:8C:61:1E:A7:46:0A:C7:B0:A5:B4:CE:8F:97:59:98:28:CD
X509v3 Authority Key Identifier:
keyid:71:2F:F1:1D:D0:C6:6C:E6:7F:E0:F1:D7:49:C0:90:9E:F3:41:8D:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS_xHdDGbOZ_4PHXScCQnvNBjSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e4:7b:5e:77:f3:d4:ee:f1:ac:a4:c7:55:9c:ea:05:06:f2:06:
f1:a7:84:b1:ec:30:64:8c:78:c8:7a:0d:5c:9f:c1:e6:f9:35:
cc:a4:a8:99:ad:24:87:9f:af:7f:ab:73:8f:0e:fb:ca:06:ae:
ac:4a:c3:b4:b3:72:de:a3:66:cf:8b:b6:43:83:f0:af:ea:74:
96:34:cd:75:d4:f5:ed:89:77:0a:12:a5:45:f2:12:42:7e:89:
26:81:57:76:a2:74:1e:83:ca:5a:0d:8c:ec:a6:50:d3:aa:ae:
89:ca:1a:c9:69:8c:03:2c:4f:f3:9c:6a:32:5c:a7:95:94:a6:
e6:db:24:cc:bb:36:eb:b8:91:b8:a9:63:26:26:f1:45:01:01:
4d:2d:13:6f:81:37:d5:c5:da:f3:98:2d:b4:df:ff:ff:d6:65:
6e:64:b2:ac:85:b8:8b:3a:de:b0:46:f5:4a:f7:90:44:02:fa:
2b:97:33:96:2e:24:3a:fc:69:41:db:fa:1b:ab:48:c1:fc:55:
45:84:ed:75:e7:a2:5e:52:30:47:e9:7b:21:73:f3:f1:b6:c1:
5a:c9:db:2e:52:84:fc:22:c5:15:9a:d3:0a:b5:df:ef:c3:3d:
fb:dd:96:ae:4e:42:06:b0:51:f0:70:28:4b:6e:e4:34:42:73:
af:61:e7:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:46:40 2025 by rpki-client