Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft
File: 9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft (raw, json)
Hash identifier: KeKLuvV6AUrHhskIoN3HhoPK04MSPuZOl8wtnKCp7Cg=
Subject key identifier: 47:81:45:F2:2F:6D:79:E3:DF:4A:6F:AF:D1:2D:67:6C:87:0A:0F:4A
Authority key identifier: F7:1B:99:83:1D:44:B0:BF:7C:00:C5:09:77:F6:0B:18:44:34:9C:F2
Certificate issuer: /CN=f71b99831d44b0bf7c00c50977f60b1844349cf2
Certificate serial: 01964A0F105C9E2CE6D0612248FE95ABAFDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9xuZgx1EsL98AMUJd_YLGEQ0nPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft
Manifest number: 0BD9
Signing time: Fri 18 Apr 2025 18:00:23 +0000
Manifest this update: Fri 18 Apr 2025 18:00:23 +0000
Manifest next update: Sat 19 Apr 2025 18:00:23 +0000
Files and hashes: 1: 9xuZgx1EsL98AMUJd_YLGEQ0nPI.crl (hash: 26dE7R3w7b+VR50k0YwCOKzaY6zT+XuWgMFIpsWOYc4=)
2: lTwG7fexEhfG1KlVMWVQwuwbbtc.roa (hash: bfD7+ofvPCOaA8CmUpbLhJtSVYv9giSBukJUfQkg6wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9xuZgx1EsL98AMUJd_YLGEQ0nPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 18:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:0f:10:5c:9e:2c:e6:d0:61:22:48:fe:95:ab:af:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f71b99831d44b0bf7c00c50977f60b1844349cf2
Validity
Not Before: Apr 18 18:00:23 2025 GMT
Not After : Apr 19 18:00:23 2025 GMT
Subject: CN=478145f22f6d79e3df4a6fafd12d676c870a0f4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:bb:31:d5:27:11:ac:ea:db:9c:5a:d3:84:7a:
1b:5c:15:bf:21:10:7b:6a:a7:59:97:0d:91:8f:ce:
37:1f:bd:2e:4e:9b:2e:aa:66:e3:e2:39:63:77:7b:
78:c8:be:9e:69:cd:57:f6:4e:46:d9:82:cc:22:31:
de:01:84:76:16:dc:96:c6:d4:47:ba:78:5e:3d:52:
d6:da:ff:d2:9d:5f:48:df:d5:d9:68:8b:f9:f6:45:
11:98:b1:14:b3:85:e9:dc:0e:61:23:6e:b5:f7:50:
66:9d:5b:70:9b:38:5b:e6:48:48:92:04:d1:ed:e6:
c2:44:aa:39:cf:d4:a4:17:35:62:e0:26:8e:10:fb:
79:93:e3:64:8e:8e:7e:2e:4a:a3:fc:44:a3:69:8a:
2f:9f:6a:0f:8f:78:c6:cb:09:ad:0c:8f:4a:54:19:
59:b1:3b:97:02:48:4d:d2:c0:32:5b:48:5b:50:80:
24:fe:53:55:b0:fd:0d:74:f2:1b:f7:bd:4c:a5:f6:
98:64:ad:af:d2:63:5d:fd:83:eb:d1:23:58:ed:a4:
57:f0:51:e0:55:e5:64:b1:67:6b:93:ad:d3:e5:ea:
c4:89:e8:59:21:8c:48:f2:80:ce:b0:03:9b:07:55:
3e:0d:4e:dc:c6:d8:02:16:06:7f:0d:fc:a1:87:07:
80:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:81:45:F2:2F:6D:79:E3:DF:4A:6F:AF:D1:2D:67:6C:87:0A:0F:4A
X509v3 Authority Key Identifier:
keyid:F7:1B:99:83:1D:44:B0:BF:7C:00:C5:09:77:F6:0B:18:44:34:9C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9xuZgx1EsL98AMUJd_YLGEQ0nPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:ce:4a:8d:d9:f9:e2:6f:3b:8c:ea:71:3c:24:2c:29:38:13:
be:f5:5c:f8:93:da:3d:ed:6c:21:1a:10:89:9d:ad:53:e6:88:
0b:6f:8a:10:2f:99:ae:b6:b5:1b:2c:f3:74:9b:b5:03:4d:5e:
98:0b:b1:fe:a1:0c:2d:47:e1:88:8a:c5:d0:e6:c0:85:2d:f2:
a5:12:71:0a:4a:b3:49:48:ad:af:73:eb:12:47:1e:d6:f3:b8:
aa:22:fa:ec:de:ab:c1:38:54:70:1b:77:fb:f4:c3:fb:11:cc:
fd:63:6c:ce:8c:0c:ea:f3:25:de:c7:59:ba:91:33:75:82:a1:
9d:e0:03:5a:ea:c3:79:64:5d:78:64:6e:fb:84:fe:81:ff:70:
ce:e7:54:a3:3a:56:ab:b8:aa:5e:7c:ff:ea:1a:ed:ab:06:a0:
0f:ec:8a:e5:0a:ea:0a:d0:cc:c8:a2:b9:01:6e:c9:0f:56:16:
c4:3c:7b:ec:0c:27:3a:9e:58:dc:15:c3:4d:28:64:f2:8d:07:
57:5a:1d:ea:00:1b:0b:19:57:29:2f:aa:0f:7c:5b:04:33:90:
90:c9:aa:ad:79:b9:9a:73:d5:6e:67:6c:97:1a:82:65:3d:61:
c3:ea:2c:cc:4e:89:7b:9e:6c:ca:5a:b6:57:bd:ee:6b:74:28:
13:76:ed:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 01:33:22 2025 by rpki-client