Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/523eb8-3677-4c9f-b6bd-7c5e7e324530/1/mx8SO1ukvBt3k7np-htD2sSaZgo.mft
File: mx8SO1ukvBt3k7np-htD2sSaZgo.mft (raw, json)
Hash identifier: r1BXFdgNtzBJQy3H8aiAm2gf2wJgxLxQG/KrNRTrFRI=
Subject key identifier: 27:53:88:76:0C:72:88:3B:5D:F4:0F:18:C5:72:26:42:36:31:DB:51
Authority key identifier: 9B:1F:12:3B:5B:A4:BC:1B:77:93:B9:E9:FA:1B:43:DA:C4:9A:66:0A
Certificate issuer: /CN=9b1f123b5ba4bc1b7793b9e9fa1b43dac49a660a
Certificate serial: 01969FAD2B0BF1AFB870E7E78C8A3851FBF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mx8SO1ukvBt3k7np-htD2sSaZgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/523eb8-3677-4c9f-b6bd-7c5e7e324530/1/mx8SO1ukvBt3k7np-htD2sSaZgo.mft
Manifest number: 0E4E
Signing time: Mon 05 May 2025 09:00:48 +0000
Manifest this update: Mon 05 May 2025 09:00:48 +0000
Manifest next update: Tue 06 May 2025 09:00:48 +0000
Files and hashes: 1: fnSZn4bkLF5kZ3b1OPm6ARvkoQM.roa (hash: N/iSveQaUWb1ReObfQZCITPh3u+LQRq5t3sKbajN6Pg=)
2: mx8SO1ukvBt3k7np-htD2sSaZgo.crl (hash: Fmobnk6s3OfDfWvzWA9Ol6ABSgdRaevnlvjoyWsB/LM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/523eb8-3677-4c9f-b6bd-7c5e7e324530/1/mx8SO1ukvBt3k7np-htD2sSaZgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/523eb8-3677-4c9f-b6bd-7c5e7e324530/1/mx8SO1ukvBt3k7np-htD2sSaZgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mx8SO1ukvBt3k7np-htD2sSaZgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 09:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:ad:2b:0b:f1:af:b8:70:e7:e7:8c:8a:38:51:fb:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b1f123b5ba4bc1b7793b9e9fa1b43dac49a660a
Validity
Not Before: May 5 09:00:48 2025 GMT
Not After : May 6 09:00:48 2025 GMT
Subject: CN=275388760c72883b5df40f18c57226423631db51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:db:f1:c6:9c:92:1f:7c:94:2e:71:10:86:e8:
18:18:73:c5:c3:1c:ac:51:e6:8f:c3:e0:d0:25:36:
65:43:8f:1b:85:6a:be:27:51:bb:25:7c:b8:b5:dd:
35:b8:c3:f0:6d:c7:89:ac:d3:2f:e6:46:00:36:ae:
d8:78:1a:cf:b4:f4:bb:f8:e7:30:5f:78:f3:a3:67:
32:fd:cf:51:1e:1e:07:cb:d8:3d:31:cd:ed:64:aa:
39:8e:15:bb:79:32:d1:ac:58:07:e3:ca:5c:8b:f6:
24:67:44:98:93:e2:bc:30:c9:ba:6e:b8:70:6f:d1:
22:f6:cf:80:9b:d4:03:35:b3:42:9c:87:72:ee:d4:
eb:b5:5a:ce:32:3c:28:54:f7:15:c2:8e:fb:26:a6:
6e:b0:85:0c:93:99:78:ce:00:05:72:d3:b2:4d:89:
1f:38:8c:1d:de:fd:f6:12:77:1e:cb:c8:31:85:01:
6c:fb:91:8b:64:cb:e8:a9:f6:6c:c5:40:d1:44:a9:
44:3d:b5:3d:80:b7:78:65:e5:7b:8e:a5:c1:08:1a:
2d:77:1c:e9:00:4f:85:63:6b:44:a6:0b:fb:be:87:
2f:b5:fa:c5:60:62:b7:2a:ab:58:3d:d8:70:d8:07:
67:17:10:cc:4d:d2:c1:60:47:7e:95:4d:56:71:70:
83:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:53:88:76:0C:72:88:3B:5D:F4:0F:18:C5:72:26:42:36:31:DB:51
X509v3 Authority Key Identifier:
keyid:9B:1F:12:3B:5B:A4:BC:1B:77:93:B9:E9:FA:1B:43:DA:C4:9A:66:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mx8SO1ukvBt3k7np-htD2sSaZgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/523eb8-3677-4c9f-b6bd-7c5e7e324530/1/mx8SO1ukvBt3k7np-htD2sSaZgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/523eb8-3677-4c9f-b6bd-7c5e7e324530/1/mx8SO1ukvBt3k7np-htD2sSaZgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:ea:a0:0a:45:70:da:74:11:7d:a3:36:7c:0d:b0:3d:ac:28:
5b:d5:4a:a8:b2:00:be:f1:78:66:9b:0d:5e:c4:f3:5c:09:9b:
6e:88:e7:0a:68:6f:f3:e1:3f:c7:11:e8:c2:fb:9e:cb:89:cd:
19:af:61:d7:d5:00:99:c8:25:a7:c9:63:6c:66:4f:2f:1d:c2:
ab:0d:88:d3:12:57:fb:29:f9:c3:73:a3:95:56:87:00:5b:d2:
08:a1:c6:b7:34:35:10:18:f9:db:3c:2b:88:1e:e0:74:8f:54:
8c:75:78:8b:06:03:dc:49:7d:af:00:ff:e3:35:e5:05:fd:59:
f8:5e:0b:40:d4:83:90:51:69:66:c7:b8:d3:9e:19:9e:9c:52:
84:fc:72:4b:02:98:2e:20:48:fd:ad:4b:b8:fa:1b:51:10:ef:
88:fb:aa:a6:d0:88:49:84:82:e6:40:f5:5a:09:19:e3:2e:ee:
3b:75:9e:77:94:c5:b3:0f:f2:da:0b:04:ae:ff:91:d7:bd:ab:
9f:34:0b:8c:1b:66:c2:d3:cd:bf:1b:57:8c:f7:d4:42:20:ad:
34:e0:a6:2b:c4:30:13:5f:f0:38:1d:0a:80:25:0d:f7:84:9f:
61:b1:a9:f5:b6:d3:6a:38:4f:72:28:2a:18:70:a9:b3:f2:1e:
8c:d4:32:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 18:12:49 2025 by rpki-client