Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/bc6d1e-0146-4a35-8e9b-cf5fb042566a/1/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.mft
File: Fp9O1mIMiWBSH7uB_3LoN9wAOK8.mft (raw, json)
Hash identifier: tee1vp8V+o9R/v1xlWOkB3T6HoAd/J1weq8r8kv9aX4=
Subject key identifier: C9:D3:D3:44:FA:DB:46:99:2F:09:C9:24:5B:F8:73:70:D8:B8:F4:FC
Authority key identifier: 16:9F:4E:D6:62:0C:89:60:52:1F:BB:81:FF:72:E8:37:DC:00:38:AF
Certificate issuer: /CN=169f4ed6620c8960521fbb81ff72e837dc0038af
Certificate serial: 01965500BEAD642B522EE464D595B8FA4AE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/bc6d1e-0146-4a35-8e9b-cf5fb042566a/1/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.mft
Manifest number: 1501
Signing time: Sun 20 Apr 2025 21:00:34 +0000
Manifest this update: Sun 20 Apr 2025 21:00:34 +0000
Manifest next update: Mon 21 Apr 2025 21:00:34 +0000
Files and hashes: 1: Fp9O1mIMiWBSH7uB_3LoN9wAOK8.crl (hash: IeM0sWVYR49pPYYcVsLhF0igcq8iRN+1m/CiCNqLY14=)
2: WIJApdkXlbEUeEO2cKb4qiLS28o.roa (hash: 1qyiMGZ/E0ICeDVPfHZdxWe+RTO7sCD7GgXGyaWl1c0=)
3: jmPpCt20gyt7K42Iosl951LnaB8.roa (hash: pgMiVWt2zP5Kw215EB82Tgo4s/CVNPF5riSUMPLjECQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/bc6d1e-0146-4a35-8e9b-cf5fb042566a/1/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/bc6d1e-0146-4a35-8e9b-cf5fb042566a/1/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:00:be:ad:64:2b:52:2e:e4:64:d5:95:b8:fa:4a:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=169f4ed6620c8960521fbb81ff72e837dc0038af
Validity
Not Before: Apr 20 21:00:34 2025 GMT
Not After : Apr 21 21:00:34 2025 GMT
Subject: CN=c9d3d344fadb46992f09c9245bf87370d8b8f4fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:89:93:03:ce:3b:5b:99:49:8e:c6:b7:8a:b1:
96:f9:3e:75:8c:be:4d:66:17:44:b1:cf:b8:6d:60:
3c:a2:ae:d9:32:fb:fa:98:cd:62:5d:c1:47:5b:b6:
7d:7e:05:a0:e3:55:7d:4d:e8:91:d0:90:22:de:97:
c1:6d:8a:0c:1a:3f:ae:15:a4:2b:21:53:ed:28:f3:
af:96:a6:13:bc:32:36:6b:59:99:79:24:88:a8:e1:
8d:2d:32:76:3c:cc:04:6b:3e:08:5b:68:a5:9d:94:
96:56:c8:f5:73:18:eb:07:2c:41:12:ad:40:2d:8a:
e9:a7:95:01:65:3f:ea:76:ba:8e:e9:3b:8c:37:2e:
1f:1f:4f:c4:17:86:0c:24:8e:c0:d4:b8:a1:b9:70:
7c:8f:d9:af:84:07:28:6b:18:42:8b:4e:09:79:67:
6d:86:39:4d:9a:3d:11:b7:b4:1d:1b:c9:eb:04:06:
85:97:82:87:20:57:f2:af:e2:c5:ed:3d:7d:91:a1:
7f:9a:fc:90:4d:95:be:bf:d6:95:f9:d9:02:bd:e3:
cb:6c:5f:3c:e6:1d:e6:b9:40:ad:c0:96:80:9c:03:
14:9a:06:bd:85:6e:69:f7:8e:61:c6:dc:bf:11:b9:
e9:69:4a:b6:3f:73:98:e3:98:68:eb:57:24:7d:00:
65:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:D3:D3:44:FA:DB:46:99:2F:09:C9:24:5B:F8:73:70:D8:B8:F4:FC
X509v3 Authority Key Identifier:
keyid:16:9F:4E:D6:62:0C:89:60:52:1F:BB:81:FF:72:E8:37:DC:00:38:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/bc6d1e-0146-4a35-8e9b-cf5fb042566a/1/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/bc6d1e-0146-4a35-8e9b-cf5fb042566a/1/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:d6:0c:c9:6b:37:13:0d:76:d4:a5:bd:1c:7c:f1:f3:f3:92:
1d:c9:b5:d4:7b:66:88:69:62:43:47:8d:9c:b5:32:13:45:3d:
61:5f:ab:e8:2c:13:2a:8a:90:b4:c3:d3:41:74:5c:84:0c:54:
b8:5d:c8:51:df:83:7d:a4:58:51:28:20:cf:78:87:3f:b1:a3:
58:b7:00:33:e9:cb:8c:a6:1a:83:3a:00:94:88:35:ba:d7:c5:
c5:b6:5f:94:68:c4:a5:97:5d:fe:ef:5d:94:67:1a:bb:6c:5f:
45:0b:f5:0e:bd:32:d9:97:a0:58:96:c8:61:ec:c8:b7:10:d4:
6f:1b:9e:a6:3a:23:65:56:99:f8:ea:ec:87:0f:e9:2b:d8:21:
9b:4f:96:fe:6f:27:af:72:e4:c2:5b:f2:2b:82:38:a0:ec:75:
0e:c2:48:4c:01:56:cf:9d:7d:b3:29:11:8f:b0:47:8f:3b:84:
23:1f:3b:37:46:93:a0:0d:73:a5:db:c1:01:10:2b:60:83:29:
95:9a:e4:2e:b6:a8:8b:6e:83:49:bb:81:b7:c6:b3:28:ce:f1:
5a:e5:88:7c:c6:d1:72:a5:8f:b2:27:fc:7c:44:76:45:c8:e2:
42:d3:46:8b:2a:5a:13:b6:3e:fd:b0:75:01:39:4d:63:84:53:
37:3a:42:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:01:22 2025 by rpki-client