Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/POsgUJhzLLkIgjBF79XXQCUMayc.mft
File: POsgUJhzLLkIgjBF79XXQCUMayc.mft (raw, json)
Hash identifier: 2t6qccf5JcOW3MeGIYTDzyGGvCX90BuFECEwd6Tftds=
Subject key identifier: D1:3F:1B:72:F5:A6:1C:38:F0:0F:A8:7C:7C:1A:0F:14:39:24:8D:A1
Authority key identifier: 3C:EB:20:50:98:73:2C:B9:08:82:30:45:EF:D5:D7:40:25:0C:6B:27
Certificate issuer: /CN=3ceb205098732cb908823045efd5d740250c6b27
Certificate serial: 0196BBFFD021E8C6DC61D3CB0861DD2798C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/POsgUJhzLLkIgjBF79XXQCUMayc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/POsgUJhzLLkIgjBF79XXQCUMayc.mft
Manifest number: 1533
Signing time: Sat 10 May 2025 21:00:26 +0000
Manifest this update: Sat 10 May 2025 21:00:26 +0000
Manifest next update: Sun 11 May 2025 21:00:26 +0000
Files and hashes: 1: POsgUJhzLLkIgjBF79XXQCUMayc.crl (hash: +ZfiGBrBHr7eSbYSlWyCIFlxablIoBPHAFrwumq5nss=)
2: glhaGjYvz9mGirczYGxMS81rRfI.roa (hash: cPBvD492Ea2g7PNrZgsOnSXH4CPshMieJYjaq9P+dD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/POsgUJhzLLkIgjBF79XXQCUMayc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/POsgUJhzLLkIgjBF79XXQCUMayc.mft
rsync://rpki.ripe.net/repository/DEFAULT/POsgUJhzLLkIgjBF79XXQCUMayc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 21:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:ff:d0:21:e8:c6:dc:61:d3:cb:08:61:dd:27:98:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ceb205098732cb908823045efd5d740250c6b27
Validity
Not Before: May 10 21:00:26 2025 GMT
Not After : May 11 21:00:26 2025 GMT
Subject: CN=d13f1b72f5a61c38f00fa87c7c1a0f1439248da1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:99:74:8e:3a:00:76:14:66:a1:4c:d8:d2:3a:
fe:6b:51:f6:9b:0c:3d:7e:4a:44:38:85:5b:e7:cc:
3b:a4:3d:4f:13:c7:78:f0:e5:b7:e9:e8:1c:e8:fe:
55:9a:86:aa:e2:ee:83:c8:bc:c8:4c:ee:f3:6c:8d:
e0:19:3d:b8:79:7d:34:14:29:73:9d:94:ae:f0:8e:
79:77:e8:b5:13:09:7e:08:08:83:3d:3c:bc:3e:15:
6f:96:7a:69:bd:47:ef:47:c8:ee:03:f4:cd:5d:ce:
77:bb:dd:52:73:ca:ec:cb:a8:97:f1:ae:3f:1e:a7:
47:4a:4e:4f:20:f7:d4:a8:08:fd:8d:ba:98:69:71:
53:b0:38:92:19:e6:e8:cc:32:29:0b:fc:15:a3:a5:
af:fa:15:39:8a:59:af:90:ee:ad:9c:5f:ac:74:34:
1a:06:0e:f2:bc:7c:25:f2:c8:6a:e4:07:48:bd:cc:
e0:6c:b8:f7:cf:3f:fd:73:93:a4:ae:a1:c2:d9:3d:
96:a4:c4:71:c6:98:9e:94:06:c5:59:b9:13:98:2e:
25:02:0a:b6:da:0e:e1:6c:2c:22:98:56:f1:38:4a:
52:dc:e0:0b:b3:7b:0c:d3:7e:f7:72:9c:6c:55:64:
e9:bb:0b:8b:5f:52:f1:85:d3:4e:2b:3e:0a:30:e2:
85:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:3F:1B:72:F5:A6:1C:38:F0:0F:A8:7C:7C:1A:0F:14:39:24:8D:A1
X509v3 Authority Key Identifier:
keyid:3C:EB:20:50:98:73:2C:B9:08:82:30:45:EF:D5:D7:40:25:0C:6B:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POsgUJhzLLkIgjBF79XXQCUMayc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/POsgUJhzLLkIgjBF79XXQCUMayc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/POsgUJhzLLkIgjBF79XXQCUMayc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:2b:4b:39:23:d9:8d:c7:d5:92:c0:a7:8c:09:85:3c:3d:87:
d3:63:15:ee:3e:d8:0e:0f:6e:92:f9:af:86:cd:fc:ba:81:2a:
ed:33:1f:f9:88:a5:4f:fe:88:72:b4:c7:bb:d8:e8:7d:07:19:
42:2c:9c:1c:e7:d2:be:3b:e1:38:84:0a:3b:7f:3f:43:53:53:
56:22:b5:6f:26:cc:50:d8:f9:94:4c:1a:40:83:5e:46:db:d4:
f0:6d:4f:71:c7:3a:e8:e3:ac:b6:73:52:c1:b4:43:7a:3b:67:
a6:5c:11:5d:3a:7d:39:7a:a5:ef:07:b0:5a:f8:72:99:3f:fa:
a6:33:01:7f:c9:0f:cd:c4:51:00:fe:14:a9:37:d5:3e:10:e6:
e7:85:25:b9:21:22:fc:2d:de:6d:03:1c:93:a0:37:4c:ea:8c:
46:5a:87:c9:e0:ab:c3:ec:e1:4d:88:e1:39:e6:8c:1a:59:16:
7e:0c:6f:ff:4a:07:57:33:12:d0:04:19:cc:b7:2a:83:88:fc:
08:d9:93:de:6f:a8:cb:a9:c0:e6:88:5b:a1:61:a0:4a:bc:c1:
3a:37:f1:ac:4b:ed:77:c1:b1:9f:2a:63:6b:1b:05:94:61:f9:
26:25:78:24:d2:c5:57:0a:02:31:52:7f:18:9c:f4:05:df:90:
b4:63:0f:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:53:55 2025 by rpki-client