Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.mft
File: 0627YSN4H_DjVBNEaseTHP9KSQ0.mft (raw, json)
Hash identifier: rvcd7hvlGV7AGMH7J+wvwIIcfh3bWvwDxccbmKhf9go=
Subject key identifier: C4:6D:58:C1:A0:1C:5A:A7:31:39:C1:D2:2E:51:9F:BB:46:50:DB:38
Authority key identifier: D3:AD:BB:61:23:78:1F:F0:E3:54:13:44:6A:C7:93:1C:FF:4A:49:0D
Certificate issuer: /CN=d3adbb6123781ff0e35413446ac7931cff4a490d
Certificate serial: 0196A19B7D6A0FA76448C8F8FE2DC1B8DBC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0627YSN4H_DjVBNEaseTHP9KSQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.mft
Manifest number: 1526
Signing time: Mon 05 May 2025 18:00:43 +0000
Manifest this update: Mon 05 May 2025 18:00:43 +0000
Manifest next update: Tue 06 May 2025 18:00:43 +0000
Files and hashes: 1: 0627YSN4H_DjVBNEaseTHP9KSQ0.crl (hash: QJw2+9aBj0jIko1oRjwdtrReLln/RGdVId1HwTP+Y+4=)
2: yWi1Y-nakOmyfRqesRZIzBZCSpo.roa (hash: XIYZfLdl8kZlRiSAj90PT17pvRJ8h9U9zRjI6i+BCkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0627YSN4H_DjVBNEaseTHP9KSQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:9b:7d:6a:0f:a7:64:48:c8:f8:fe:2d:c1:b8:db:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3adbb6123781ff0e35413446ac7931cff4a490d
Validity
Not Before: May 5 18:00:43 2025 GMT
Not After : May 6 18:00:43 2025 GMT
Subject: CN=c46d58c1a01c5aa73139c1d22e519fbb4650db38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f2:f1:a8:a2:38:83:fc:ba:ef:52:05:f3:2c:
a1:57:e3:61:e0:01:d0:45:b2:63:01:53:9a:01:33:
d3:54:6c:0a:f2:b8:bd:60:a8:c2:74:05:22:58:f8:
d7:60:e1:0b:05:c1:38:ad:4b:b4:8c:63:61:d4:d7:
e8:9c:27:c7:72:8a:30:35:43:32:10:9c:a2:85:07:
74:9a:b5:60:44:51:79:ed:c6:2f:db:3b:be:f1:77:
65:2a:b2:44:8e:c0:3b:c5:2e:3a:83:a6:de:83:28:
93:c0:98:0b:00:f2:45:dc:09:60:c8:a0:8f:d6:63:
47:be:d3:3e:8f:b2:08:fb:08:f5:ed:3e:b6:09:5e:
2c:b0:ab:91:f3:83:4c:2d:57:65:c8:0a:c9:73:80:
44:19:47:40:fc:08:30:f0:7a:b2:30:d0:af:29:04:
c7:58:c5:d1:43:8c:08:38:d2:26:f8:31:c4:98:ba:
d2:88:61:74:2e:8d:ab:d1:cc:b2:92:41:3d:ef:b8:
38:f3:ed:85:3f:4d:87:6f:cb:15:c3:3d:09:d9:63:
d9:28:fa:35:80:e4:2d:96:9a:ec:22:88:56:72:e7:
5f:3e:ba:8b:c6:d1:02:7e:f8:ec:e5:ce:d3:13:ae:
04:25:82:59:a9:62:33:29:3a:4d:72:08:2a:af:d9:
f6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:6D:58:C1:A0:1C:5A:A7:31:39:C1:D2:2E:51:9F:BB:46:50:DB:38
X509v3 Authority Key Identifier:
keyid:D3:AD:BB:61:23:78:1F:F0:E3:54:13:44:6A:C7:93:1C:FF:4A:49:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0627YSN4H_DjVBNEaseTHP9KSQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:2a:91:7c:21:3f:1f:62:b5:28:da:a9:34:19:f8:ac:d1:be:
bc:a1:dd:24:25:b7:0e:1a:94:d6:51:03:60:b5:14:ed:a4:6b:
f0:2c:41:61:14:74:b7:fa:6a:23:ab:9c:b7:2b:fd:d8:42:b5:
ba:c1:3f:81:7f:a3:1e:75:14:9a:b6:ec:07:1a:c0:ee:a7:8d:
eb:24:1a:41:ed:d6:e9:16:a3:a0:bb:8b:9c:2b:c5:41:d6:8f:
dd:fd:5d:04:d2:89:cc:e9:b9:c6:69:ed:e9:6a:50:15:65:29:
c5:4f:07:29:fb:cd:11:ef:b6:8c:6e:b3:42:c4:ac:d1:c7:63:
b6:04:ce:57:da:64:69:d3:42:e1:76:cb:d6:e8:f1:4b:0b:9c:
0c:09:23:e7:12:53:c2:1b:85:9b:e5:a8:3b:7d:17:5d:e6:a9:
cd:7c:1d:7e:48:02:d9:40:81:3c:25:f5:e8:b9:34:56:fa:f7:
c4:7b:83:a0:f5:f9:09:c8:63:84:67:3b:77:2b:0a:4f:cf:19:
b3:c3:ac:bd:bb:d9:f9:fc:c6:72:9e:55:7e:69:1e:9e:fe:ac:
24:43:6e:4c:c1:2f:5d:59:23:07:54:5b:cb:fe:1c:45:9d:9f:
70:6e:4e:a0:ec:17:1c:5c:2e:2d:7e:c6:72:44:e8:5d:f7:db:
5a:c0:16:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 03:34:05 2025 by rpki-client