Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft
File: 9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft (raw, json)
Hash identifier: XoLCBI67qDO4gFGWFr0p2ddRrccALG30XiX8MpFUv9k=
Subject key identifier: 5A:F5:67:A6:FB:5F:CB:B2:38:CE:79:6E:DF:7B:3C:C9:51:78:49:2E
Authority key identifier: F6:95:4D:01:03:A7:A3:E6:52:35:4A:74:48:9F:86:DA:F9:A1:A5:9D
Certificate issuer: /CN=f6954d0103a7a3e652354a74489f86daf9a1a59d
Certificate serial: 019659F085E5E2D5AF20B32B66F7F0686DE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft
Manifest number: 1500
Signing time: Mon 21 Apr 2025 20:00:57 +0000
Manifest this update: Mon 21 Apr 2025 20:00:57 +0000
Manifest next update: Tue 22 Apr 2025 20:00:57 +0000
Files and hashes: 1: 9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.crl (hash: hR7i0yWwTUsBr1HM8HlV6jkzsglFzNAj6SxzhP8Em7k=)
2: gGwKnYfvhCn5nwp-acIqahsS3nA.roa (hash: Rj4EAnxstBQ29bzxEKAGqDAmg0fXQP5ck4gqOBpaqb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:f0:85:e5:e2:d5:af:20:b3:2b:66:f7:f0:68:6d:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6954d0103a7a3e652354a74489f86daf9a1a59d
Validity
Not Before: Apr 21 20:00:57 2025 GMT
Not After : Apr 22 20:00:57 2025 GMT
Subject: CN=5af567a6fb5fcbb238ce796edf7b3cc95178492e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:80:e1:b8:5c:af:49:f7:db:e2:58:0a:51:1b:
a0:0f:75:6b:62:4c:37:dd:f8:4a:83:95:87:78:9c:
53:89:41:63:68:b4:7b:89:56:02:df:93:62:1d:c0:
9e:4d:22:a0:bf:0d:22:6c:36:2a:68:92:38:ce:0d:
5b:1d:94:c1:df:26:d2:0e:b0:b3:77:9e:69:90:c3:
ae:b3:f3:a9:81:3a:cb:89:39:53:fc:9b:0a:88:fa:
65:d8:b0:16:27:a4:c5:d3:ba:46:49:8c:55:ac:dc:
ac:c0:5b:c8:6f:8c:60:d3:52:77:4c:2b:d5:1a:e7:
8c:11:9c:15:1c:dd:5b:f1:1f:d5:3c:8e:f7:4d:bd:
16:a9:6b:d1:c8:fc:33:45:b9:1d:cd:b3:59:c3:56:
3b:0a:92:7b:22:53:8c:63:29:19:a5:4b:79:4c:ad:
36:80:56:96:d5:af:20:3b:b1:9f:c8:44:20:52:46:
0e:86:da:d1:91:1b:ed:cc:c3:2c:2f:a2:1d:2c:a3:
1e:d0:45:1b:ac:96:2f:b4:03:a7:73:86:8f:35:22:
0e:ff:b6:dd:da:9a:84:92:23:3a:84:de:34:b7:05:
f2:91:30:f1:c0:d7:8e:bb:85:a0:44:e8:6b:32:77:
c9:a3:9d:f0:fb:e9:02:a1:61:de:81:34:97:5d:c8:
04:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:F5:67:A6:FB:5F:CB:B2:38:CE:79:6E:DF:7B:3C:C9:51:78:49:2E
X509v3 Authority Key Identifier:
keyid:F6:95:4D:01:03:A7:A3:E6:52:35:4A:74:48:9F:86:DA:F9:A1:A5:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:2e:bd:9b:47:5e:34:48:b4:86:ae:33:cf:a0:f1:7e:a4:e7:
be:2e:70:49:48:2b:d1:48:40:73:46:7e:05:32:30:eb:70:83:
87:fb:0c:c4:4b:fd:3c:a5:ff:43:12:c1:08:b6:93:5c:7e:03:
04:60:78:f5:a0:0a:db:2e:b7:71:95:9b:16:72:df:09:6c:95:
00:d9:b0:60:7e:ef:bc:a3:0c:90:7e:16:47:94:61:3d:88:96:
a4:05:60:33:36:f1:57:fe:c9:3b:0e:83:32:e7:9b:7b:35:c4:
98:28:8e:bf:32:e1:7b:3c:2e:33:25:f8:b7:90:2e:a6:4c:26:
5b:44:72:df:3e:7a:93:6e:a0:6a:63:42:fd:ca:88:fb:7c:a8:
05:f1:19:2a:40:cf:ae:1f:c5:13:6b:f3:12:56:e1:c3:ed:88:
3e:28:20:6f:a9:cf:50:99:1e:a5:6b:7c:9a:f9:f1:0d:7e:ee:
d1:bb:77:21:52:d7:3b:1b:fa:d6:26:ae:d5:c8:6e:ee:b6:01:
c9:b9:31:4b:da:1c:0e:da:e1:e7:c9:d2:4b:84:c0:96:2e:d0:
6b:dd:e0:7f:c7:4c:06:fa:93:4c:f3:52:d2:17:a5:1f:bd:99:
10:4a:f8:8e:94:a4:b2:d2:19:0d:c8:eb:ce:fc:3d:ec:6c:a7:
d7:0b:35:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:49:11 2025 by rpki-client