Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft
File: 9Oc28Njp5w8a58qhHFWez3CnKCg.mft (raw, json)
Hash identifier: 7UKpqAnmEDaBW/2itxL3yRpT+yJAD8tLKp0ElLruG3U=
Subject key identifier: 17:15:DE:9F:47:14:AB:1B:68:DC:C0:D8:29:EA:C0:5D:9B:28:EB:E6
Authority key identifier: F4:E7:36:F0:D8:E9:E7:0F:1A:E7:CA:A1:1C:55:9E:CF:70:A7:28:28
Certificate issuer: /CN=f4e736f0d8e9e70f1ae7caa11c559ecf70a72828
Certificate serial: 01965BDEE80DE38DE2D5C98B3FEEAD50C0C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Oc28Njp5w8a58qhHFWez3CnKCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft
Manifest number: 1500
Signing time: Tue 22 Apr 2025 05:00:57 +0000
Manifest this update: Tue 22 Apr 2025 05:00:57 +0000
Manifest next update: Wed 23 Apr 2025 05:00:57 +0000
Files and hashes: 1: 9Oc28Njp5w8a58qhHFWez3CnKCg.crl (hash: 4po94tO+B15HHyfL+kwFoy5GvqZg/6G0u71ZG+RxAYQ=)
2: fGeYBTeIqUGlzWkeYCJZuXTV3NA.roa (hash: NVWcI0sfwe5T87MmDN6gYp0EndXzVclJkGdW6buL8Q8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Oc28Njp5w8a58qhHFWez3CnKCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:de:e8:0d:e3:8d:e2:d5:c9:8b:3f:ee:ad:50:c0:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e736f0d8e9e70f1ae7caa11c559ecf70a72828
Validity
Not Before: Apr 22 05:00:57 2025 GMT
Not After : Apr 23 05:00:57 2025 GMT
Subject: CN=1715de9f4714ab1b68dcc0d829eac05d9b28ebe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:16:36:44:08:9a:0e:51:3d:e8:93:c3:ee:71:
02:25:cf:c7:6c:a9:86:ec:fe:9f:22:dc:24:c1:a7:
49:05:b8:27:56:78:40:96:29:69:88:5e:55:96:40:
8a:bd:b9:16:c7:15:d9:fa:ed:6b:1b:26:35:52:aa:
45:8d:ff:32:04:17:2e:c0:33:97:e0:0c:32:bf:c3:
16:26:49:47:80:99:0d:84:a9:b9:0e:36:62:0d:9f:
e2:38:73:46:60:04:50:00:e8:b4:15:bd:aa:d6:84:
bb:1b:ca:a6:33:1b:b9:6f:a3:e4:c7:8a:37:d1:20:
1b:b8:ec:38:c8:78:fc:ca:50:08:7d:91:9f:47:6c:
a5:8b:51:90:72:6a:77:72:39:2e:83:5e:ff:76:79:
2b:3f:d3:95:3f:f8:b5:d0:70:5c:f0:b1:b3:fe:7c:
d1:25:76:e2:81:f6:a2:2d:b0:7c:79:84:fd:93:d6:
2d:0f:d3:73:05:45:22:93:d1:f2:6a:8b:ce:8a:09:
fb:b9:4c:f0:b4:ca:56:5c:49:f7:05:58:da:f8:44:
f7:ab:f1:f6:ce:37:e4:d3:6c:ee:d1:07:33:58:2e:
65:21:71:71:b8:48:0b:16:97:24:38:bd:59:84:02:
a3:4d:30:21:61:0a:ae:41:a1:b6:5d:09:57:29:1c:
f9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:15:DE:9F:47:14:AB:1B:68:DC:C0:D8:29:EA:C0:5D:9B:28:EB:E6
X509v3 Authority Key Identifier:
keyid:F4:E7:36:F0:D8:E9:E7:0F:1A:E7:CA:A1:1C:55:9E:CF:70:A7:28:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Oc28Njp5w8a58qhHFWez3CnKCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:ca:3a:88:84:95:ad:d9:e2:4e:a9:3e:f9:dc:a1:64:ec:4c:
81:99:b3:ba:5f:4e:0e:1c:0b:04:61:3a:66:3a:b5:e5:6a:29:
d7:73:fc:bd:64:3a:d9:8b:0e:f0:3e:66:09:a2:16:b9:6b:27:
7f:d1:b6:19:38:8e:ed:54:66:44:e5:dc:11:c8:76:96:da:e7:
1c:e7:e6:20:d1:3e:ea:04:b9:ad:84:4c:96:3c:2f:e6:cc:e3:
be:85:78:af:48:76:fa:4d:5f:bb:9e:62:93:43:90:12:9e:7b:
13:75:64:56:d5:27:11:87:7d:46:92:95:0b:2e:f1:ab:de:19:
63:73:3e:db:ce:35:11:ba:c2:5b:96:73:93:db:1d:76:b6:20:
46:ac:4f:99:96:b6:3f:3d:5c:d9:3c:c6:35:66:b9:e1:f7:3a:
7a:c3:87:34:fa:13:d5:59:a3:5d:fe:2a:83:81:9a:65:2e:35:
e7:a5:ec:8e:58:1a:f7:a6:87:90:09:12:32:81:f6:00:98:f2:
df:b4:9b:d8:c8:f9:e6:f1:44:e7:3f:a4:07:f0:1d:31:8d:b3:
32:70:6a:95:3f:e5:06:9a:cd:bd:98:2a:22:22:7c:26:d3:fe:
37:33:a1:53:a6:d5:40:2b:d6:b0:4b:0a:9b:a3:82:e5:89:56:
8e:da:3c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:50:20 2025 by rpki-client