Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/89f845-5765-4c11-92cd-8472ca40f7a7/1/I9FK_odQITwoDltovvsYhm95SX8.mft
File: I9FK_odQITwoDltovvsYhm95SX8.mft (raw, json)
Hash identifier: ruAtHE8yxVfdmZRR2dTbk5eRqSZLtTdXsqJ7YyYghHU=
Subject key identifier: A9:E7:6D:61:7C:B1:0F:03:55:53:D8:C2:A6:C8:28:D5:82:23:89:46
Authority key identifier: 23:D1:4A:FE:87:50:21:3C:28:0E:5B:68:BE:FB:18:86:6F:79:49:7F
Certificate issuer: /CN=23d14afe8750213c280e5b68befb18866f79497f
Certificate serial: 01964B90A1E4D53F1DD8E6887C5EE5AEF10D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9FK_odQITwoDltovvsYhm95SX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/89f845-5765-4c11-92cd-8472ca40f7a7/1/I9FK_odQITwoDltovvsYhm95SX8.mft
Manifest number: 017A
Signing time: Sat 19 Apr 2025 01:01:31 +0000
Manifest this update: Sat 19 Apr 2025 01:01:31 +0000
Manifest next update: Sun 20 Apr 2025 01:01:31 +0000
Files and hashes: 1: I9FK_odQITwoDltovvsYhm95SX8.crl (hash: hqvqHiLphs0kNvhdgyc2QGpqRo7KtNsYEUukj8T8gt0=)
2: bfd_WpvacXpVJP__dq6vej5IyyY.roa (hash: /B+pNt8vIwVV5x8COrKPeKukz7hh0c0T1g3kvtIg6Z0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/89f845-5765-4c11-92cd-8472ca40f7a7/1/I9FK_odQITwoDltovvsYhm95SX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/89f845-5765-4c11-92cd-8472ca40f7a7/1/I9FK_odQITwoDltovvsYhm95SX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/I9FK_odQITwoDltovvsYhm95SX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 01:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:90:a1:e4:d5:3f:1d:d8:e6:88:7c:5e:e5:ae:f1:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23d14afe8750213c280e5b68befb18866f79497f
Validity
Not Before: Apr 19 01:01:31 2025 GMT
Not After : Apr 20 01:01:31 2025 GMT
Subject: CN=a9e76d617cb10f035553d8c2a6c828d582238946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c0:fb:8c:36:62:44:81:ab:55:37:59:de:e6:
83:2a:03:21:59:36:2a:ee:fd:04:ab:81:38:56:2c:
33:19:34:2c:00:38:2d:62:52:66:67:6a:4f:6a:54:
28:7f:c6:6f:fa:0b:6d:0e:82:93:47:df:95:f3:4e:
f1:6d:59:9b:63:0d:05:15:37:b1:0f:3c:dc:2f:1f:
77:d0:ba:19:32:f6:7f:bf:e6:73:3d:99:f1:dd:42:
7e:bc:25:7c:e1:8b:3a:3f:bb:94:7a:ba:ce:cd:a1:
30:4e:d6:3d:29:62:14:71:11:54:cc:1c:a8:88:0d:
19:84:a6:e6:ad:07:47:bc:92:d1:f2:9b:c3:a4:ff:
73:59:a2:51:f1:34:29:e7:dd:b3:38:e9:0c:47:1e:
84:c7:0a:3d:ea:29:95:2f:6e:41:1b:8e:c3:98:2d:
a8:1a:7f:1c:e3:5e:20:43:d9:48:77:76:47:91:e1:
c3:b0:a8:e0:9d:af:82:34:59:48:4c:8b:1a:7b:79:
19:63:0d:62:f8:e4:65:cc:0d:91:b6:54:78:5f:74:
e3:d9:82:46:19:b4:6f:44:d0:6d:0b:44:fd:25:e2:
f7:8b:50:34:31:2d:36:30:3e:4c:12:05:77:b6:63:
38:8f:70:d0:8d:a6:d2:8f:83:d8:9b:37:77:cf:88:
74:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:E7:6D:61:7C:B1:0F:03:55:53:D8:C2:A6:C8:28:D5:82:23:89:46
X509v3 Authority Key Identifier:
keyid:23:D1:4A:FE:87:50:21:3C:28:0E:5B:68:BE:FB:18:86:6F:79:49:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9FK_odQITwoDltovvsYhm95SX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/89f845-5765-4c11-92cd-8472ca40f7a7/1/I9FK_odQITwoDltovvsYhm95SX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/89f845-5765-4c11-92cd-8472ca40f7a7/1/I9FK_odQITwoDltovvsYhm95SX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:d2:32:60:04:d9:79:92:8e:c9:62:3a:7a:04:6c:83:e5:87:
70:34:10:ee:14:26:6b:c0:40:90:0c:cf:4a:a3:22:eb:eb:f8:
33:ae:45:e1:3f:ff:d5:b2:90:83:32:4f:c8:7a:78:bd:88:23:
42:87:c7:1c:d5:88:3e:3e:7c:a2:e4:94:80:f4:a2:15:f5:d2:
4c:49:71:e1:e1:93:c9:13:75:b6:35:95:43:2e:a1:fd:5f:ad:
ae:a7:a8:86:5b:56:7a:4c:85:4c:bb:f2:30:fa:5f:32:30:74:
fe:26:28:e8:1a:74:49:4a:ab:22:8e:85:19:bf:06:cf:0b:0c:
2d:58:44:d0:b6:e9:d2:22:e7:65:dd:4c:84:e6:46:31:97:96:
ee:01:d9:16:2e:b3:dc:08:68:20:34:13:ec:59:5a:77:71:58:
96:f8:19:63:a6:dc:85:e7:a2:4e:98:48:c6:63:c4:f3:54:bc:
5b:fa:10:b3:bf:15:6f:19:8a:dd:97:b0:4b:63:ae:83:78:05:
6b:84:c2:62:99:43:96:2f:03:92:a1:eb:76:f8:44:bb:e7:10:
c7:6a:0c:8a:23:27:00:c1:04:a3:12:4a:8c:9c:b7:7f:22:c4:
e0:7b:91:b1:fc:eb:e3:d5:db:3a:db:17:e7:fc:01:04:9e:5c:
3d:89:ea:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 11:37:38 2025 by rpki-client