Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
File: SornhxUlvi6k0N_9rk86i_83JJY.mft (raw, json)
Hash identifier: OcoUT4DqHd0ZWJv/Di+qlLM97UBW/Nrg03eTTFNUL+s=
Subject key identifier: 52:8B:FF:3F:63:CB:B5:92:54:22:39:6E:5F:02:F9:7A:25:D1:4C:E7
Authority key identifier: 4A:8A:E7:87:15:25:BE:2E:A4:D0:DF:FD:AE:4F:3A:8B:FF:37:24:96
Certificate issuer: /CN=4a8ae7871525be2ea4d0dffdae4f3a8bff372496
Certificate serial: 0196C8DFC467F4CF920985C2309FAB6E7A23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
Manifest number: 12CB
Signing time: Tue 13 May 2025 09:00:29 +0000
Manifest this update: Tue 13 May 2025 09:00:29 +0000
Manifest next update: Wed 14 May 2025 09:00:29 +0000
Files and hashes: 1: 8gW9HzVtsq8E7qA7ltvcwjfvGOc.roa (hash: YA8a2IoWK4RdfAw+N6IQe1enWMEGZEE3fnlKSQfkojY=)
2: SornhxUlvi6k0N_9rk86i_83JJY.crl (hash: CnnSVXCy9A8R4PB6jgpdKnKprgHAPOAUwnmxqcLoKSU=)
3: vrCnquL3s__Kn2NMqtqwOpjNIg4.roa (hash: 0IwPyrwAs82lGKG6S2evYkZYnCmMy2vXHa9NpVcKusQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 09:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:df:c4:67:f4:cf:92:09:85:c2:30:9f:ab:6e:7a:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8ae7871525be2ea4d0dffdae4f3a8bff372496
Validity
Not Before: May 13 09:00:29 2025 GMT
Not After : May 14 09:00:29 2025 GMT
Subject: CN=528bff3f63cbb5925422396e5f02f97a25d14ce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:8b:fe:66:ad:a1:f1:df:0a:fb:e8:17:a7:e4:
ff:08:8c:a9:a0:cf:e7:89:c2:18:80:e3:d5:64:41:
9d:94:f9:c4:50:5d:f8:0a:d0:af:aa:2a:cb:8b:f5:
26:27:71:b3:38:9f:05:a7:22:3f:c9:90:e6:c1:e3:
13:4e:11:69:12:2a:9d:35:9f:78:98:04:c3:c9:fc:
e1:16:66:3d:f3:6f:5a:f4:78:67:16:f6:75:4f:3b:
a5:78:ba:4d:4f:cc:d2:18:f1:bd:3e:f6:15:66:32:
3d:d1:4f:51:81:9a:ac:a0:99:f8:d2:be:10:6a:98:
b2:1f:f3:78:32:56:d6:96:fb:c9:58:f5:cf:62:ce:
b0:e8:9f:e7:da:c5:06:2d:91:db:ca:17:0a:11:c5:
e3:f4:94:dd:37:24:f5:53:08:0d:3d:f3:1f:fa:de:
96:eb:6b:cd:dd:60:88:0c:93:77:9a:ae:70:d5:11:
ad:b5:f5:29:07:bd:e3:9e:b9:fa:f7:c4:99:5b:f7:
3c:92:12:c8:a5:bc:6e:45:48:6d:dd:6d:2d:d2:1f:
77:ef:41:42:c9:55:69:2c:87:c8:b0:1c:3d:7f:98:
dc:85:e2:f4:c4:d2:de:75:94:6a:a3:b3:aa:62:42:
94:55:93:11:af:bb:1b:97:76:ab:2d:9b:39:2a:6f:
d1:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:8B:FF:3F:63:CB:B5:92:54:22:39:6E:5F:02:F9:7A:25:D1:4C:E7
X509v3 Authority Key Identifier:
keyid:4A:8A:E7:87:15:25:BE:2E:A4:D0:DF:FD:AE:4F:3A:8B:FF:37:24:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:12:27:3a:5c:c4:de:1d:d8:e0:a6:2b:88:1d:94:20:ff:ac:
63:41:67:f7:57:2d:4f:a7:9c:3e:77:86:e5:3e:38:c6:9d:57:
58:1e:67:0b:1e:8d:bb:f6:37:d6:c6:03:b9:a8:25:c2:a4:54:
c8:ce:fa:e2:6f:62:24:ef:1b:0c:10:8f:3c:aa:0e:49:34:5f:
b7:09:f0:47:84:89:95:93:ba:ce:6b:64:39:07:90:bb:55:f9:
d2:a7:58:2f:cc:e7:34:93:26:c8:31:38:b7:9b:f7:0d:52:dd:
1c:8a:8a:d8:92:23:92:89:d1:d7:4a:42:8e:2a:d0:57:5f:05:
3a:09:54:c1:1c:d9:1b:18:59:5b:ba:b9:44:ba:f3:b6:7e:67:
23:96:b4:40:69:df:5c:56:2a:00:f4:a8:c2:f2:a1:e9:2a:77:
14:1f:50:81:99:fe:9b:0d:69:c2:04:c6:9b:c7:1b:31:07:0e:
0e:35:49:cb:36:15:73:d3:c4:2b:6b:1f:af:07:11:53:ba:75:
a2:eb:1e:f5:b6:d9:15:31:61:91:38:a2:8f:49:9a:bb:a9:38:
93:dd:07:70:e2:9d:b8:80:b1:2c:d1:3b:67:16:e5:4c:9b:dc:
52:62:b2:10:60:69:b7:16:60:36:c8:02:6c:7b:41:5c:2b:09:
e2:7f:42:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 18:47:04 2025 by rpki-client