Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft
File: v9gcqQzFIkWGr-urHHixeQJo1cE.mft (raw, json)
Hash identifier: JKA/9p6x5o0OsoeIWwdxhOCf0RpOrOJJ//ivMJ1/y8U=
Subject key identifier: 97:67:A7:B9:56:5F:6B:38:9C:65:44:7A:68:AC:38:C9:B0:10:7B:73
Authority key identifier: BF:D8:1C:A9:0C:C5:22:45:86:AF:EB:AB:1C:78:B1:79:02:68:D5:C1
Certificate issuer: /CN=bfd81ca90cc5224586afebab1c78b1790268d5c1
Certificate serial: 01960B30FA95A5CAC859CE6ACD7DF48829E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9gcqQzFIkWGr-urHHixeQJo1cE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft
Manifest number: 14D8
Signing time: Sun 06 Apr 2025 13:01:21 +0000
Manifest this update: Sun 06 Apr 2025 13:01:21 +0000
Manifest next update: Mon 07 Apr 2025 13:01:21 +0000
Files and hashes: 1: 9UunLY0e7RvMMeMDRjD3u7_pf2Y.roa (hash: 7lRPIrPRKCCE3BPTd9dDNpxXDgXsPWg+ml+ju6JbueA=)
2: ncR4oR_y2D6exGXXU4466Dj_Hq0.roa (hash: QHWP1FBTjP+R0Pof3RRPjusJf04L/sCOEBJrDKRdhZ4=)
3: rOoYFHKRe7ghGBjkeruHV6kIlyA.roa (hash: elXY8PrAbFgsd98hRj7mkOX8iG0smL3sFgAD/6xBNtE=)
4: v9gcqQzFIkWGr-urHHixeQJo1cE.crl (hash: y7DeXakU55Z2y0iPGH1Lqi7L4xqCIyrQHfptKVPggq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft
rsync://rpki.ripe.net/repository/DEFAULT/v9gcqQzFIkWGr-urHHixeQJo1cE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0b:30:fa:95:a5:ca:c8:59:ce:6a:cd:7d:f4:88:29:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfd81ca90cc5224586afebab1c78b1790268d5c1
Validity
Not Before: Apr 6 13:01:21 2025 GMT
Not After : Apr 7 13:01:21 2025 GMT
Subject: CN=9767a7b9565f6b389c65447a68ac38c9b0107b73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:76:43:de:cc:65:9a:1b:0a:f7:f3:d0:68:d3:
1e:e5:ea:a0:6c:91:14:5a:07:44:6b:ed:05:a3:47:
8a:d8:6a:f3:b7:b3:13:81:aa:1d:28:7e:4a:09:56:
a7:52:1f:dc:2a:13:10:a3:29:71:81:ff:b9:42:7b:
38:3b:9c:0c:2e:3d:e7:1f:9f:84:d0:36:3c:6b:4d:
26:f6:07:6a:23:53:00:5e:10:b1:e8:98:c7:b4:13:
15:8e:b2:c0:16:68:54:e5:83:da:f0:26:33:72:72:
47:07:53:22:1b:e0:f7:b1:ef:c4:67:ea:fb:11:91:
4e:7c:9b:9e:c3:cb:35:f0:d2:63:11:7e:74:62:74:
8b:ab:54:90:fe:b1:c0:92:8c:a5:ca:bd:e1:c3:41:
1a:66:b1:e5:30:2b:a3:d8:98:e7:b0:95:7e:9e:09:
bc:a1:aa:0e:34:03:a6:7f:e7:bc:01:39:2c:b6:93:
73:57:7b:a9:33:21:f0:8a:b1:07:18:d6:f4:11:aa:
5c:4b:ce:2d:02:f0:3b:e8:18:ae:3e:9b:2b:c2:f5:
1f:a8:e0:b5:ff:35:2f:bc:50:17:bc:47:28:22:ec:
32:cc:8a:83:c5:84:58:20:c1:f7:2f:27:2e:b1:cd:
a0:49:a4:3d:c3:eb:85:76:c5:56:a8:53:d0:8a:54:
fe:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:67:A7:B9:56:5F:6B:38:9C:65:44:7A:68:AC:38:C9:B0:10:7B:73
X509v3 Authority Key Identifier:
keyid:BF:D8:1C:A9:0C:C5:22:45:86:AF:EB:AB:1C:78:B1:79:02:68:D5:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9gcqQzFIkWGr-urHHixeQJo1cE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:65:34:70:21:e8:dc:1f:22:3f:ef:75:68:45:ca:c5:13:d6:
5b:32:82:7b:98:46:2f:22:6f:36:ad:69:0f:b0:7c:75:c7:39:
d0:19:57:54:63:5e:1a:d2:8c:18:d9:c7:6a:fd:e4:d9:89:55:
d9:40:66:77:3f:6e:2f:2f:6d:d7:41:fc:08:f4:68:25:a0:77:
1b:43:8d:c8:7a:c8:1d:40:d4:f3:3b:83:6e:23:54:38:71:a1:
73:b7:d0:3b:f7:5b:8c:72:89:be:d0:66:e8:f9:91:b3:5e:8a:
4a:13:4b:db:54:80:97:60:92:dc:7e:84:ea:00:24:00:39:c9:
40:1e:98:b0:f6:f8:1f:9e:d9:eb:a5:f9:8d:e6:a8:95:a7:74:
fb:b2:e7:ee:a5:de:bd:10:12:f1:a6:79:c1:22:ce:7c:ae:17:
25:a1:27:2f:04:34:0d:d4:e3:2b:e8:e2:b5:e5:b0:ef:9e:7e:
35:0d:e6:b0:a7:87:61:ce:84:2f:03:79:3a:3c:f2:19:04:ab:
fd:21:95:9b:2b:b7:06:c0:f4:af:4f:5d:9b:65:d2:f7:e0:30:
7d:8c:97:3f:95:3f:d8:70:00:95:2a:a5:a1:ea:80:0a:51:62:
ff:c0:ae:41:f2:9c:b4:81:7d:6a:16:78:de:6e:81:c2:fc:8e:
c9:00:08:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:08:42 2025 by rpki-client