Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.mft
File: 15-SXhc4vDUrxrXPX_lRs9gTrjk.mft (raw, json)
Hash identifier: /MG0AytItTRbWSWbGCM+HlfsMUmjSy8UP3kJ4FhMCkk=
Subject key identifier: 26:2E:8B:A4:94:1D:0A:70:25:F9:DA:82:42:FB:3D:6B:CA:83:D6:85
Authority key identifier: D7:9F:92:5E:17:38:BC:35:2B:C6:B5:CF:5F:F9:51:B3:D8:13:AE:39
Certificate issuer: /CN=d79f925e1738bc352bc6b5cf5ff951b3d813ae39
Certificate serial: 0196C34C1EA72780B6AE80C5D925FE95B136
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15-SXhc4vDUrxrXPX_lRs9gTrjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.mft
Manifest number: 05B9
Signing time: Mon 12 May 2025 07:01:07 +0000
Manifest this update: Mon 12 May 2025 07:01:07 +0000
Manifest next update: Tue 13 May 2025 07:01:07 +0000
Files and hashes: 1: 15-SXhc4vDUrxrXPX_lRs9gTrjk.crl (hash: oApxgqVAfEPldiDi2YZLHk1JoEu7XGRPnBGnlcw0OLg=)
2: qNoTgo75uHZdX7Pw5KIkSMbCuIk.roa (hash: Wp90B7y4b1beWFho9S7pJxCTTLLhfUdptb3Ax7iQwmA=)
3: ygl5P_7lTFnzJgirLplRNSI58XI.roa (hash: cR+NYAbF+5iFZxCdzFXgCBDiu3chwIso0AL6/JnYtEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/15-SXhc4vDUrxrXPX_lRs9gTrjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:4c:1e:a7:27:80:b6:ae:80:c5:d9:25:fe:95:b1:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79f925e1738bc352bc6b5cf5ff951b3d813ae39
Validity
Not Before: May 12 07:01:07 2025 GMT
Not After : May 13 07:01:07 2025 GMT
Subject: CN=262e8ba4941d0a7025f9da8242fb3d6bca83d685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:64:f6:57:d2:18:78:43:b5:d5:c4:4e:80:af:
34:5d:24:fc:b2:37:ef:b4:10:f6:a7:9d:b5:54:81:
96:90:40:ed:7c:c0:aa:d6:ff:55:47:db:28:4b:a1:
7d:d9:37:16:4b:ef:18:47:60:6d:45:b3:ba:30:ea:
fc:35:e7:de:46:1e:c2:e2:3d:0e:3c:dd:dd:a9:83:
fd:b4:33:ce:21:e6:2e:1e:fd:dc:d6:a7:0b:13:0f:
b0:57:b9:a1:c8:90:96:b9:a2:ae:b3:8e:4a:73:89:
33:8e:fa:c9:56:ed:4f:d6:df:9a:19:8f:31:2b:11:
cb:dd:80:07:67:d9:72:51:67:ba:ff:74:85:0b:71:
c2:03:17:e8:a1:a6:22:40:9e:42:fb:97:6a:d0:b5:
b3:5c:98:15:c3:00:b5:8a:b0:1e:1f:de:96:0e:33:
96:01:e1:70:4e:65:d6:e6:62:6f:d1:0c:73:42:8b:
5c:c9:7b:ac:81:6b:74:4f:9f:54:a9:41:c0:20:69:
b9:82:e7:e4:cc:4c:74:69:9d:a1:1d:6b:8b:48:02:
23:6c:55:1b:74:ff:b8:39:45:9f:9d:d8:9c:28:2f:
52:41:a4:59:1f:9f:8d:a1:92:1c:5c:5f:93:c6:2d:
ad:e6:0c:48:fd:31:68:ca:0c:2e:f5:22:d2:a7:1c:
da:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:2E:8B:A4:94:1D:0A:70:25:F9:DA:82:42:FB:3D:6B:CA:83:D6:85
X509v3 Authority Key Identifier:
keyid:D7:9F:92:5E:17:38:BC:35:2B:C6:B5:CF:5F:F9:51:B3:D8:13:AE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15-SXhc4vDUrxrXPX_lRs9gTrjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:62:bf:17:94:de:b4:01:a9:1a:78:71:37:27:69:4c:1a:38:
e9:3c:71:48:4a:48:ee:15:3d:6b:ac:56:f7:8a:cc:f7:74:d3:
19:4a:53:4b:89:ce:73:73:34:bb:22:87:57:8a:db:a0:e8:37:
32:bc:25:4d:bf:56:3f:19:ea:0c:19:03:59:f9:f8:b2:fa:c9:
3f:33:e8:08:3c:da:a7:6b:a9:81:d6:dd:1e:8e:bd:ae:50:72:
7b:a6:76:81:d1:97:83:a6:0c:9c:de:9e:ef:0d:e6:39:67:ed:
be:44:41:64:a5:1d:6d:fe:2f:fe:d4:4e:1a:a9:f2:40:d4:aa:
5f:db:c6:b5:c0:da:80:dd:55:fd:1a:c9:47:d9:f0:d2:56:78:
ec:8f:7c:9e:e6:0f:9b:0e:03:c2:a9:91:18:d3:de:b5:f2:77:
8d:c6:1a:bb:90:c1:93:14:d4:d2:f9:ea:bc:7d:08:19:1a:62:
01:9a:a2:af:b7:c8:e8:50:21:46:39:62:c1:1b:3c:d7:73:91:
97:1c:f3:07:e0:29:79:8a:17:40:d3:93:a4:74:88:62:21:b8:
4a:c5:3c:dd:cf:cd:cc:08:69:6d:30:57:d3:b1:a9:cf:1a:6d:
b6:cd:b5:f1:80:df:4f:5e:bd:62:b7:89:b3:33:59:8d:fc:ca:
c5:82:99:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 08:59:23 2025 by rpki-client