
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft
File: Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft (raw, json)
Hash identifier: GhYZHI5wPytbr7b9cJ/L9mAgBL8SJBEWnnumovEP5P8=
Subject key identifier: 8F:0C:F8:82:65:61:B8:1D:E5:32:D0:D5:CE:BE:3E:D0:85:76:6D:41
Authority key identifier: 4A:97:BC:50:4F:30:75:FB:4F:39:23:64:08:C1:C2:D5:47:B4:4C:26
Certificate issuer: /CN=4a97bc504f3075fb4f39236408c1c2d547b44c26
Certificate serial: 019648FC9FAE57CFBA3A2780E39DD02F07B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Spe8UE8wdftPOSNkCMHC1Ue0TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft
Manifest number: 0905
Signing time: Fri 18 Apr 2025 13:00:37 +0000
Manifest this update: Fri 18 Apr 2025 13:00:37 +0000
Manifest next update: Sat 19 Apr 2025 13:00:37 +0000
Files and hashes: 1: 63RWpTzYaUMklcl62HBy6xUd3L4.roa (hash: Un1n3GmyQj6VVqYhoRSHcYh85a7qnY1jg5MCSUwKUTc=)
2: Spe8UE8wdftPOSNkCMHC1Ue0TCY.crl (hash: 4vovxR0VRDMNWDnHRDjaimZmS2T7v4mfh/DIeSJJeyw=)
3: XoKGaT2Y4cimov2MwIZbMUFcNik.roa (hash: nUamhX6MnewzR6j8dYV1oqge5T4xxq+U39rAZAcBMTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Spe8UE8wdftPOSNkCMHC1Ue0TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 13:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:48:fc:9f:ae:57:cf:ba:3a:27:80:e3:9d:d0:2f:07:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a97bc504f3075fb4f39236408c1c2d547b44c26
Validity
Not Before: Apr 18 13:00:37 2025 GMT
Not After : Apr 19 13:00:37 2025 GMT
Subject: CN=8f0cf8826561b81de532d0d5cebe3ed085766d41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a1:6c:56:c1:8b:3f:7a:f9:0b:f3:2c:7a:22:
d8:ec:4c:1f:ef:d0:25:27:f0:7b:ff:c5:3a:50:95:
7b:16:cd:c9:f1:37:f0:6a:9d:be:36:5e:65:f0:be:
f4:be:e5:ab:2d:12:10:e4:2d:f6:af:44:68:7a:ba:
e0:8c:fc:5e:b6:ad:0c:bf:e9:bc:39:6c:cf:97:2c:
be:b0:ee:76:46:0d:e3:d8:f8:01:59:b0:1f:75:25:
f7:4a:05:38:aa:31:44:a5:cf:20:8a:0b:6f:dd:e7:
4d:5f:88:5c:5b:ec:a7:5a:d9:3a:91:d6:7d:1c:eb:
5b:e2:5f:bf:f4:31:44:13:e2:31:97:16:dd:84:34:
02:d1:b0:6a:90:94:c7:23:59:32:a0:cd:16:ac:9f:
e1:3d:2b:b2:5c:2f:24:ce:42:00:4b:16:65:18:a2:
2d:0e:15:27:7f:1a:db:aa:d6:92:ee:fc:74:2a:88:
80:ec:5d:e2:7c:d3:8b:29:75:3f:38:95:7e:e7:e7:
33:50:3b:0c:29:b9:93:e3:c1:2b:cd:98:45:6a:e0:
0a:40:68:7a:eb:09:78:c9:38:af:bb:cd:45:10:c7:
64:2a:27:ec:9c:75:2e:24:0e:99:b8:e8:6c:8e:b4:
bc:59:a1:a4:93:2f:58:be:e5:ed:5d:e1:46:68:42:
cb:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:0C:F8:82:65:61:B8:1D:E5:32:D0:D5:CE:BE:3E:D0:85:76:6D:41
X509v3 Authority Key Identifier:
keyid:4A:97:BC:50:4F:30:75:FB:4F:39:23:64:08:C1:C2:D5:47:B4:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Spe8UE8wdftPOSNkCMHC1Ue0TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:52:a6:cb:bb:ac:97:54:d5:6b:46:31:8a:43:c0:18:8c:eb:
63:ae:d3:2c:d8:f2:df:9e:49:61:ea:5e:63:f2:32:46:34:10:
24:57:3f:30:9a:08:ae:fc:5e:25:31:42:7c:27:54:62:f6:83:
41:5a:5c:39:68:38:43:ae:0f:53:55:30:b0:8d:e0:a7:a1:14:
25:83:36:b6:87:31:bf:ec:b4:8a:70:2f:d2:be:a7:58:cb:e0:
0a:14:d5:20:e5:73:bf:02:2d:9a:06:14:26:18:53:6b:f0:7c:
c6:67:a5:0d:58:22:5f:17:8a:c4:60:20:e2:53:75:a5:0d:fe:
12:62:29:22:18:00:8a:ef:2a:93:53:16:62:cf:5d:a1:ad:b6:
bb:36:11:b1:da:48:f5:82:77:4b:1a:77:71:fd:95:73:45:51:
15:e3:cf:89:7c:28:92:76:00:f0:eb:6d:16:ce:e9:09:eb:a7:
66:0e:aa:c0:be:48:11:19:8c:64:52:22:43:f4:12:bb:2b:45:
95:27:f7:1f:60:14:16:a1:40:70:75:43:d5:73:b5:95:bf:49:
dc:6d:1f:aa:5a:b8:f4:15:1b:94:27:be:16:26:a4:2a:54:2f:
f7:3c:80:a2:1d:dc:14:47:61:0d:23:95:ce:7f:c5:c2:68:43:
88:cc:5c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:37:57 2025 by rpki-client