Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.mft
File: m-du9KpJjCFSTdftrRbeHT2wAuM.mft (raw, json)
Hash identifier: p2jcDBzfn1Zb7yc7G1t/MHqc4BuhEKf7me99/WkRfmY=
Subject key identifier: 15:F6:4E:FF:23:DD:76:94:CA:3C:C6:83:AD:65:04:7F:0C:34:B0:C7
Authority key identifier: 9B:E7:6E:F4:AA:49:8C:21:52:4D:D7:ED:AD:16:DE:1D:3D:B0:02:E3
Certificate issuer: /CN=9be76ef4aa498c21524dd7edad16de1d3db002e3
Certificate serial: 01962ABBAF2379A252861D476AFED786181B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-du9KpJjCFSTdftrRbeHT2wAuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.mft
Manifest number: 14E9
Signing time: Sat 12 Apr 2025 16:01:05 +0000
Manifest this update: Sat 12 Apr 2025 16:01:05 +0000
Manifest next update: Sun 13 Apr 2025 16:01:05 +0000
Files and hashes: 1: HoDvxsQA4iXxpxVk1_co_JtvvPE.roa (hash: cWutlJOtBJ4KMx+ET4BMORGB6H9YK5+9Bn/1o272ZUM=)
2: m-du9KpJjCFSTdftrRbeHT2wAuM.crl (hash: Mp2Xjde4Ap/5PRFcW+SMRMYPQWkuwRdvYXFGCFRPsRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/m-du9KpJjCFSTdftrRbeHT2wAuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 16:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2a:bb:af:23:79:a2:52:86:1d:47:6a:fe:d7:86:18:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9be76ef4aa498c21524dd7edad16de1d3db002e3
Validity
Not Before: Apr 12 16:01:05 2025 GMT
Not After : Apr 13 16:01:05 2025 GMT
Subject: CN=15f64eff23dd7694ca3cc683ad65047f0c34b0c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3b:9c:9d:ed:2f:23:ab:0d:d8:71:77:ca:5a:
60:10:69:4b:69:07:fa:9d:96:89:a4:b3:0d:76:22:
31:3c:27:68:df:ed:40:ca:e0:41:ff:56:3a:00:59:
21:c0:68:36:d0:03:95:c5:d9:8b:cb:3c:df:20:33:
28:34:9a:e9:f3:e6:93:e6:ac:3a:89:04:1c:6e:d2:
f3:8e:e0:59:20:13:61:dd:09:86:d7:5a:c2:50:64:
c0:4f:f9:c7:d3:b4:6e:b5:bb:e4:1f:d6:d4:29:07:
0d:26:e8:40:24:5e:d5:a7:41:65:10:43:4f:6d:35:
92:40:3f:41:88:9a:21:cd:42:8e:29:73:02:e8:e1:
44:ec:ef:25:25:47:71:3f:de:45:92:9e:49:9c:c8:
18:23:c1:d9:8e:e7:d0:bd:92:e4:b3:ca:53:09:7d:
6e:e0:e8:7e:b8:1b:96:47:80:3d:ac:6b:69:35:3a:
d5:aa:57:e1:aa:dc:39:29:5c:1f:9e:52:6e:1b:d1:
d4:ef:cb:13:59:d2:b4:87:b3:6d:60:b6:d8:fb:f4:
98:dc:04:df:0a:11:37:63:8d:5e:84:9c:f2:c2:f3:
5b:16:00:b7:9c:6a:22:7d:0d:ab:59:4c:80:9b:ee:
f9:d8:56:d3:52:8e:64:76:61:e4:c2:3d:f5:b7:fc:
34:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:F6:4E:FF:23:DD:76:94:CA:3C:C6:83:AD:65:04:7F:0C:34:B0:C7
X509v3 Authority Key Identifier:
keyid:9B:E7:6E:F4:AA:49:8C:21:52:4D:D7:ED:AD:16:DE:1D:3D:B0:02:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-du9KpJjCFSTdftrRbeHT2wAuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:72:d0:75:e6:bb:cd:de:3f:71:43:a6:c4:5a:47:14:59:25:
1b:b5:58:68:94:6e:43:02:7a:0d:49:04:71:e8:9d:bc:82:0c:
72:d1:25:50:6b:7b:80:b4:0d:9d:2d:d9:ab:6d:f5:b8:20:a1:
8b:6b:15:9a:88:81:28:64:c1:ea:f1:d2:f9:7c:19:6e:77:95:
7f:37:f6:a6:d9:a7:f4:ed:63:1d:41:44:93:6c:85:87:99:16:
3b:12:7a:b8:88:5e:35:40:79:24:3c:8e:81:77:f8:4e:32:65:
b7:ca:ac:87:fd:d9:30:a3:9d:e5:0a:f9:03:67:7e:67:f2:4d:
9a:b9:c2:24:5e:61:96:e6:18:b7:92:40:6a:32:c2:42:b4:16:
d9:76:10:bf:32:d9:67:49:16:74:b5:a2:2e:cf:c8:ea:f8:8f:
22:a4:ed:14:c2:fe:99:78:38:af:8e:a5:7c:5d:4a:28:8f:c3:
9f:18:f2:55:87:b8:4b:bb:70:48:cc:4a:46:83:ed:8b:8b:d5:
58:0e:db:f8:86:60:9e:11:a8:a6:ce:31:ec:72:85:6b:4b:46:
1e:e1:de:59:9d:96:f7:97:8f:fe:44:c9:53:4e:57:f4:f9:0b:
a1:b9:86:92:1b:34:33:b5:c6:76:85:57:7e:a5:4a:86:5a:99:
5f:33:78:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:41:54 2025 by rpki-client