Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/2be7bb-ab98-4ed3-b5ee-10cf65948a56/1/c9CjqymaZZjTK8dUUAIYiHlbPSs.mft
File: c9CjqymaZZjTK8dUUAIYiHlbPSs.mft (raw, json)
Hash identifier: YgX7Y5cGpnDhExv9aCEaSxi6+6dasy1AE8JMXNIywBA=
Subject key identifier: 5C:B9:FC:7E:77:3E:0C:DD:1E:EF:3E:F1:66:C1:D7:58:FD:BE:0F:88
Authority key identifier: 73:D0:A3:AB:29:9A:65:98:D3:2B:C7:54:50:02:18:88:79:5B:3D:2B
Certificate issuer: /CN=73d0a3ab299a6598d32bc75450021888795b3d2b
Certificate serial: 019654252A0F7708757249EA69FB1B0FC7E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c9CjqymaZZjTK8dUUAIYiHlbPSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/2be7bb-ab98-4ed3-b5ee-10cf65948a56/1/c9CjqymaZZjTK8dUUAIYiHlbPSs.mft
Manifest number: 0791
Signing time: Sun 20 Apr 2025 17:00:43 +0000
Manifest this update: Sun 20 Apr 2025 17:00:43 +0000
Manifest next update: Mon 21 Apr 2025 17:00:43 +0000
Files and hashes: 1: c9CjqymaZZjTK8dUUAIYiHlbPSs.crl (hash: LnWIiGBI6bgpUY42s2bFZZeca6bNjEouz3XaqTGHdKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/2be7bb-ab98-4ed3-b5ee-10cf65948a56/1/c9CjqymaZZjTK8dUUAIYiHlbPSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/2be7bb-ab98-4ed3-b5ee-10cf65948a56/1/c9CjqymaZZjTK8dUUAIYiHlbPSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/c9CjqymaZZjTK8dUUAIYiHlbPSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:25:2a:0f:77:08:75:72:49:ea:69:fb:1b:0f:c7:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73d0a3ab299a6598d32bc75450021888795b3d2b
Validity
Not Before: Apr 20 17:00:43 2025 GMT
Not After : Apr 21 17:00:43 2025 GMT
Subject: CN=5cb9fc7e773e0cdd1eef3ef166c1d758fdbe0f88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:da:4b:f2:af:0b:58:b7:a9:6b:91:a9:05:f6:
48:49:1d:7a:1c:c8:fd:85:9d:38:99:8d:a3:89:b7:
c1:f5:f1:91:d8:9a:08:16:ce:31:ba:90:36:a6:66:
f4:db:cf:13:6c:fc:6d:82:c2:0a:9d:09:bd:56:82:
52:4a:cb:e2:af:8e:b1:c8:20:e4:99:3d:f5:a9:38:
ce:1d:d7:fe:75:4a:74:37:a8:96:e3:fa:0d:f9:f7:
43:0c:67:97:43:63:52:b2:d1:cc:09:f8:2c:ad:7d:
c6:0e:cd:70:26:b1:e5:64:35:c3:1d:a8:d6:9d:fd:
ea:90:cf:e9:d9:05:2a:a2:57:61:59:ad:ea:0c:c2:
1a:f7:93:a5:bb:1e:ca:8e:f0:0d:79:30:1e:d7:91:
30:90:d7:c0:80:dd:6e:06:9d:23:ba:19:69:f0:0a:
20:ef:7d:67:cf:18:d0:9d:cf:11:d4:57:fe:6b:3c:
e9:c0:99:81:fe:3f:f2:1a:fd:ba:af:77:26:b5:51:
5b:9e:93:dd:75:e8:69:19:f6:6b:eb:7f:0d:e6:97:
f2:2e:e7:a6:51:0c:38:1b:f1:df:2b:5a:3a:ad:d5:
41:37:07:89:32:7b:0a:99:81:08:2d:71:b7:37:e1:
4b:84:50:08:46:53:2f:59:2e:ec:48:76:62:25:04:
34:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:B9:FC:7E:77:3E:0C:DD:1E:EF:3E:F1:66:C1:D7:58:FD:BE:0F:88
X509v3 Authority Key Identifier:
keyid:73:D0:A3:AB:29:9A:65:98:D3:2B:C7:54:50:02:18:88:79:5B:3D:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9CjqymaZZjTK8dUUAIYiHlbPSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/2be7bb-ab98-4ed3-b5ee-10cf65948a56/1/c9CjqymaZZjTK8dUUAIYiHlbPSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/2be7bb-ab98-4ed3-b5ee-10cf65948a56/1/c9CjqymaZZjTK8dUUAIYiHlbPSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:51:5d:11:d2:49:45:c9:e6:35:c0:74:68:3e:98:af:fd:69:
b5:2b:e5:35:ba:e1:00:98:f6:c8:7f:5d:66:a3:d3:25:c1:9d:
2e:47:ff:a7:07:56:fb:ba:4d:36:45:ab:e7:3a:b0:21:1e:bf:
b2:5c:20:9f:88:b1:74:8a:1e:7f:c1:35:9f:fc:4b:eb:9c:51:
33:15:59:b6:b3:77:00:fd:cf:83:58:c3:01:a0:52:04:ed:50:
86:18:3c:96:fe:4a:16:05:0c:3f:88:b1:ee:ce:ab:23:42:d2:
e4:bc:57:5f:09:9a:2c:17:18:4e:0c:75:ee:7b:4b:54:02:0f:
2c:f9:69:97:9e:3a:e2:3e:c9:96:78:23:25:2d:ac:1c:15:01:
96:60:bd:9c:c9:6d:21:c8:09:83:58:fe:c1:ca:0e:71:5d:d9:
2e:e9:3d:a7:4c:35:f4:a7:09:73:65:4e:98:7d:1e:f3:09:07:
30:67:8e:14:97:77:db:8c:d0:50:50:7c:96:0e:6a:c6:a5:2e:
a2:3c:ea:75:30:4a:ca:c0:b9:58:53:cd:ff:e9:65:6d:7a:f0:
dd:16:0a:3d:1d:13:55:aa:6a:c3:ea:22:e3:64:b0:6d:84:6a:
19:6e:a6:9b:8c:cb:9a:5d:a2:dc:3e:f9:4e:f1:35:70:a2:31:
05:b8:97:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 20:11:27 2025 by rpki-client