Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3fa007-f344-467e-b712-1cce5b58f8e3/1/sx9k3lYY91wZ31E5U_ZGmHngh3M.mft
File: sx9k3lYY91wZ31E5U_ZGmHngh3M.mft (raw, json)
Hash identifier: cnfMVRjaJp08DIIYi7yw8Nyd7Vq6qLCrhQd1DnzYsEo=
Subject key identifier: 89:3D:BA:CF:83:C7:5D:1C:6F:AF:81:FE:B9:28:28:51:90:65:FE:4E
Authority key identifier: B3:1F:64:DE:56:18:F7:5C:19:DF:51:39:53:F6:46:98:79:E0:87:73
Certificate issuer: /CN=b31f64de5618f75c19df513953f6469879e08773
Certificate serial: 0196B9A4554694709164F1FC1193FD020262
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sx9k3lYY91wZ31E5U_ZGmHngh3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3fa007-f344-467e-b712-1cce5b58f8e3/1/sx9k3lYY91wZ31E5U_ZGmHngh3M.mft
Manifest number: 031D
Signing time: Sat 10 May 2025 10:01:16 +0000
Manifest this update: Sat 10 May 2025 10:01:16 +0000
Manifest next update: Sun 11 May 2025 10:01:16 +0000
Files and hashes: 1: UakAn5yyBqPOSEIfTXfDNciKFEs.roa (hash: btkptULyCnT6MWQIHbySDipzPG0rdTy55cYQICbq99M=)
2: sx9k3lYY91wZ31E5U_ZGmHngh3M.crl (hash: bDdTZdjxCQRTZS6ZtYa43+vO4bBgaQpKa2M+N1eo3QI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3fa007-f344-467e-b712-1cce5b58f8e3/1/sx9k3lYY91wZ31E5U_ZGmHngh3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3fa007-f344-467e-b712-1cce5b58f8e3/1/sx9k3lYY91wZ31E5U_ZGmHngh3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/sx9k3lYY91wZ31E5U_ZGmHngh3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 10:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:a4:55:46:94:70:91:64:f1:fc:11:93:fd:02:02:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b31f64de5618f75c19df513953f6469879e08773
Validity
Not Before: May 10 10:01:16 2025 GMT
Not After : May 11 10:01:16 2025 GMT
Subject: CN=893dbacf83c75d1c6faf81feb92828519065fe4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9d:a9:b0:e2:bf:08:20:1b:4e:11:b8:d5:aa:
08:06:e5:2a:6a:20:e5:5e:fc:62:b0:07:f1:7a:26:
94:39:42:c9:64:d4:83:90:8c:f7:97:46:3f:3d:51:
aa:59:5f:a1:29:10:ac:e3:e9:8d:30:6e:75:75:e1:
0f:fa:04:94:75:d4:a1:41:6b:1e:34:51:7b:c2:0e:
58:dd:78:a5:c9:e9:76:77:61:58:a1:65:6e:23:78:
e1:a3:31:3b:3a:bb:30:0e:62:94:29:25:06:8d:14:
16:01:e7:15:55:de:37:06:0c:b3:fa:d3:dd:9e:c5:
b4:6a:41:7e:85:d6:b0:7d:aa:c2:1a:1b:a0:2f:38:
f3:3a:a9:d8:f6:79:94:18:8a:77:d3:f5:d5:2b:20:
b0:c1:ff:76:cf:0f:b4:08:86:00:39:b2:dc:78:9e:
71:c5:e4:fe:07:9a:ff:12:14:24:e2:08:d7:62:44:
34:cf:29:01:d9:fa:f7:96:0b:c6:45:0f:da:ba:7d:
3b:26:4d:02:bd:c4:16:f3:6c:ed:07:41:c0:d1:13:
89:b6:13:c5:b5:78:81:fe:b7:66:f3:5b:01:5d:a9:
21:2e:c8:6f:bc:10:f1:71:54:59:5a:4a:ee:f0:36:
ae:49:d8:0b:12:ef:2d:99:79:8a:5b:f8:30:b9:fa:
cd:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:3D:BA:CF:83:C7:5D:1C:6F:AF:81:FE:B9:28:28:51:90:65:FE:4E
X509v3 Authority Key Identifier:
keyid:B3:1F:64:DE:56:18:F7:5C:19:DF:51:39:53:F6:46:98:79:E0:87:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sx9k3lYY91wZ31E5U_ZGmHngh3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3fa007-f344-467e-b712-1cce5b58f8e3/1/sx9k3lYY91wZ31E5U_ZGmHngh3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3fa007-f344-467e-b712-1cce5b58f8e3/1/sx9k3lYY91wZ31E5U_ZGmHngh3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:92:be:29:92:93:d0:74:94:79:db:b3:f2:8c:d6:46:32:7e:
2a:fb:2c:f3:83:de:89:b1:01:ab:30:1a:b9:a8:2f:43:fe:7d:
68:a5:77:f8:dc:ab:1b:5e:11:06:51:1b:63:df:40:6c:4e:54:
80:7b:29:61:14:8e:7d:08:8e:73:8c:b3:74:86:a8:2f:a1:85:
5f:ae:ff:08:6b:46:93:1e:ee:c6:f9:7b:8d:7c:f1:cf:fc:66:
d8:74:4c:7e:8f:53:4a:92:df:a1:f4:95:8c:87:de:d3:c3:bb:
5d:0d:c6:54:86:7c:7a:0c:ce:77:5c:79:67:d8:67:6e:d8:5e:
67:51:a3:79:d3:ea:9f:b5:36:0c:8d:c9:65:f8:4f:e2:e3:b6:
43:aa:20:46:49:39:f8:0a:2c:ae:b9:bc:60:24:22:6c:63:c4:
74:63:b2:12:2e:ea:71:c6:29:b9:d4:cd:6e:58:ae:4b:a5:6a:
29:2a:40:14:d7:67:06:2d:1b:a0:a4:46:19:7e:c8:49:eb:20:
6c:94:78:d2:cf:6a:49:a4:ff:09:41:c6:53:d5:ee:f2:d2:03:
d2:ac:70:d3:9b:de:f3:8b:40:d1:e2:15:10:d5:c4:f3:31:2a:
9d:0d:30:f5:e3:ce:5c:7b:4c:e6:df:d4:db:4d:c4:60:c3:49:
74:67:ef:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 18:13:32 2025 by rpki-client