Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.mft
File: 9o4jHVVRh24Vr8Zjfqt_yoAIg5E.mft (raw, json)
Hash identifier: bZ+gxWvjy5N89L5ikYWT4SufHt98KjUQ6feMJ6loWo8=
Subject key identifier: 16:B6:38:37:7F:A7:D1:E4:45:E3:5F:91:BE:84:9C:6A:44:11:05:36
Authority key identifier: F6:8E:23:1D:55:51:87:6E:15:AF:C6:63:7E:AB:7F:CA:80:08:83:91
Certificate issuer: /CN=f68e231d5551876e15afc6637eab7fca80088391
Certificate serial: 01965425602BD8B791F31B73F5625DEA3B40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.mft
Manifest number: 1373
Signing time: Sun 20 Apr 2025 17:00:57 +0000
Manifest this update: Sun 20 Apr 2025 17:00:57 +0000
Manifest next update: Mon 21 Apr 2025 17:00:57 +0000
Files and hashes: 1: 9o4jHVVRh24Vr8Zjfqt_yoAIg5E.crl (hash: 0O/iBynWhn3UisraG8d3mONBjg/VTUFTpFkOJnDffes=)
2: Yj1ZixuYkYbRfQKF1z7pgksE4us.roa (hash: YrNKpDljk4B4Ef1MFB8qPNVZiTFjojjO2XPhpM/1UPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:25:60:2b:d8:b7:91:f3:1b:73:f5:62:5d:ea:3b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f68e231d5551876e15afc6637eab7fca80088391
Validity
Not Before: Apr 20 17:00:57 2025 GMT
Not After : Apr 21 17:00:57 2025 GMT
Subject: CN=16b638377fa7d1e445e35f91be849c6a44110536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:90:de:9b:ca:ce:bd:84:60:fe:1c:8e:f5:f7:
eb:10:17:c2:c3:12:2c:41:2a:6b:b2:b5:52:ea:75:
bd:13:17:57:a3:51:cb:17:1c:f0:b2:3a:af:e2:c2:
43:3f:b4:19:f0:6d:a0:dd:b0:67:e0:03:7a:be:4c:
99:ca:fe:bd:31:5f:32:05:38:e5:86:b2:d4:17:93:
12:db:a3:73:82:bd:d3:ce:a1:ce:41:6f:d8:15:ff:
5c:fe:94:65:e6:ac:a9:5a:b7:e1:48:37:a9:a9:cc:
4c:84:64:f2:a6:f9:90:b8:21:ff:57:09:1f:b8:74:
f9:f0:09:16:c2:07:0c:b8:a1:bf:4e:d3:7f:bc:6f:
ed:d2:b4:6e:0e:6c:2d:ed:68:8b:32:c4:5f:bb:c8:
76:eb:3b:1b:50:be:c0:6f:1f:d9:c7:a7:60:da:a7:
4a:ad:79:34:d2:c8:0f:4e:ad:b2:7c:77:90:14:9f:
ee:44:1a:7b:a1:a0:f3:f0:5f:a3:6f:54:71:8c:cd:
8f:48:37:be:4a:09:27:46:0d:08:ff:8c:e4:70:7b:
e9:6d:ad:89:da:b2:10:37:29:13:db:33:69:f7:5c:
71:c8:e7:ca:a4:10:a1:cf:65:96:be:5d:61:a4:4d:
e2:15:61:33:ce:0b:e1:b7:e0:f7:eb:75:f3:39:9c:
f5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:B6:38:37:7F:A7:D1:E4:45:E3:5F:91:BE:84:9C:6A:44:11:05:36
X509v3 Authority Key Identifier:
keyid:F6:8E:23:1D:55:51:87:6E:15:AF:C6:63:7E:AB:7F:CA:80:08:83:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:e1:5d:f4:19:ab:cf:82:f1:b7:3d:fb:96:10:05:7b:ca:6d:
01:c5:ee:83:7f:7c:f9:e3:a4:19:86:30:82:f7:f1:4c:d1:74:
5b:f5:7e:82:c9:61:11:86:4b:8f:3c:47:68:d7:7e:32:e6:c3:
cc:42:45:35:29:c0:d6:25:85:33:12:db:7e:17:34:f0:61:74:
c1:74:39:02:61:be:dd:50:73:9b:3c:ce:66:c7:a3:77:51:8d:
82:29:64:fd:82:49:3b:0a:c9:19:0b:4e:79:aa:90:cf:7c:57:
cd:bc:3d:c4:bd:5a:4a:0d:04:1a:58:26:d3:2d:31:3b:2b:85:
f8:83:b8:b1:c5:52:50:08:54:20:cd:83:30:54:48:3b:76:82:
a8:6e:91:8b:d4:95:bd:ec:8a:e9:05:91:27:6a:32:80:2b:98:
47:21:1c:4e:f9:51:de:ef:61:2e:ac:62:96:1e:8d:cc:32:7f:
9d:9f:b4:22:6a:44:99:4a:11:06:db:bb:49:73:77:ae:f9:d0:
ee:94:f0:8f:a8:65:de:5e:ba:e1:19:cf:5e:e3:ef:9a:c6:68:
17:b7:56:5d:3b:29:a4:e6:62:82:1c:31:92:e5:5f:2d:a9:e0:
c8:ca:d2:c0:a7:7f:a3:87:6e:36:f9:a8:4d:96:57:ad:8a:b1:
e2:f6:30:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:10:29 2025 by rpki-client