Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft
File: kq8Dyi32Qjt30O83N7D0eRqgNaM.mft (raw, json)
Hash identifier: uLB05q5bss3N7Spws2MZrTsP7atPMGdyAmMbGia54PU=
Subject key identifier: 38:FB:F4:C1:46:56:63:64:96:18:3A:24:E1:18:90:8A:4A:DC:10:D0
Authority key identifier: 92:AF:03:CA:2D:F6:42:3B:77:D0:EF:37:37:B0:F4:79:1A:A0:35:A3
Certificate issuer: /CN=92af03ca2df6423b77d0ef3737b0f4791aa035a3
Certificate serial: 019654931606DAF508E13DD10E2553294C30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kq8Dyi32Qjt30O83N7D0eRqgNaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft
Manifest number: 098C
Signing time: Sun 20 Apr 2025 19:00:47 +0000
Manifest this update: Sun 20 Apr 2025 19:00:47 +0000
Manifest next update: Mon 21 Apr 2025 19:00:47 +0000
Files and hashes: 1: Q5x-oLuKsAX8G6VHtW5DmYmMvBo.roa (hash: Yo25vViOdvC6dn3PtfxGUX7ghUL2FSb11Ef7j26sFsA=)
2: kq8Dyi32Qjt30O83N7D0eRqgNaM.crl (hash: 9KD7LPG34pFaSMJXzwXu7JkJHhD5vlx7E27IVuFMxSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kq8Dyi32Qjt30O83N7D0eRqgNaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:93:16:06:da:f5:08:e1:3d:d1:0e:25:53:29:4c:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92af03ca2df6423b77d0ef3737b0f4791aa035a3
Validity
Not Before: Apr 20 19:00:47 2025 GMT
Not After : Apr 21 19:00:47 2025 GMT
Subject: CN=38fbf4c14656636496183a24e118908a4adc10d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:63:79:7a:3a:69:00:d5:17:5e:ad:62:08:a3:
05:2f:ef:62:ad:d6:2b:a7:42:79:3e:e4:16:2d:59:
cf:31:80:1d:16:dd:ff:0e:04:bf:56:46:0e:75:43:
08:f2:e9:ef:17:fd:57:37:85:f9:60:2d:f2:5f:13:
28:8c:1a:b4:f8:49:2f:59:13:17:1a:6f:0b:b9:a5:
a1:5d:52:62:44:a9:64:17:3a:38:78:7d:bf:60:72:
a4:cc:cd:eb:b4:d7:a6:69:c5:81:9e:6f:aa:7a:ee:
c9:b5:c0:74:88:fc:74:30:70:5d:9c:c0:34:76:7b:
52:55:44:12:1a:68:31:40:88:88:f0:43:b8:f1:74:
46:b0:4f:c4:d6:ed:83:5b:bc:01:dc:d0:c8:51:9c:
b6:e5:6b:4e:68:5b:ed:b1:80:4c:85:41:2a:76:05:
22:78:29:41:6b:cf:21:8f:46:3f:87:ab:e7:d5:ca:
91:c9:fd:fb:19:cb:42:f4:27:ab:50:94:f1:66:76:
80:85:f6:d0:0f:fe:48:6c:5d:53:1a:b8:f0:53:cd:
97:a2:42:c9:54:af:bc:6c:55:07:71:40:75:d0:15:
64:b5:2f:97:1d:9d:5e:b4:f8:e3:a0:63:f7:64:8a:
50:1c:5c:f2:6e:3f:9a:75:28:3f:c7:27:14:1a:c4:
f0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:FB:F4:C1:46:56:63:64:96:18:3A:24:E1:18:90:8A:4A:DC:10:D0
X509v3 Authority Key Identifier:
keyid:92:AF:03:CA:2D:F6:42:3B:77:D0:EF:37:37:B0:F4:79:1A:A0:35:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kq8Dyi32Qjt30O83N7D0eRqgNaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:1c:c3:81:60:1e:78:72:2b:96:5c:ef:d1:19:b8:c0:bd:5f:
b5:4f:6e:76:e3:5b:2a:6c:ad:08:9b:91:39:ee:79:c1:94:28:
d5:36:66:51:81:a7:ed:2e:f5:d9:ad:c8:12:26:ce:0f:44:9e:
68:5a:2f:a4:9f:07:b1:18:31:e4:56:ba:0d:3e:87:ae:0b:3a:
e8:61:23:1f:fa:1f:d2:88:17:3f:15:24:5b:8b:70:0f:56:c6:
3a:5e:fe:38:77:c5:4f:07:7d:1a:e9:de:56:07:cf:1d:01:40:
cb:9f:9e:b6:8f:c3:5d:13:e1:2a:4a:60:31:58:1c:39:5b:54:
5c:6a:54:a4:12:df:83:50:62:3a:99:d4:b5:3a:71:b0:1e:22:
a7:50:b4:8d:22:46:c1:e9:4a:82:c4:ff:a0:5d:82:36:cc:59:
38:dc:e3:d5:a1:86:48:94:2a:f0:31:af:82:5f:3e:e5:ee:b5:
2c:b2:9e:e8:61:b3:93:86:42:3b:29:f6:18:b6:c7:a9:a2:86:
90:28:9b:3f:49:d5:0c:90:0d:27:a6:37:e0:bf:5a:f0:60:89:
81:62:ae:3e:75:ba:b4:e2:eb:b2:c0:c1:82:07:a8:3b:32:5e:
ab:c9:e1:94:47:c8:97:93:93:43:27:7f:b2:4c:a0:78:3b:ac:
5d:6b:8d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:45:12 2025 by rpki-client