Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.mft
File: 9C0MrQ6u0aYfR4-wkZx6QyJyRpU.mft (raw, json)
Hash identifier: lzad9TdMSo3pzYJV61443nfRrmnRhxvfha3olbH2PdI=
Subject key identifier: 1B:68:B6:B0:7F:8B:6C:14:A6:3A:74:F7:C5:FD:60:12:27:82:52:C7
Authority key identifier: F4:2D:0C:AD:0E:AE:D1:A6:1F:47:8F:B0:91:9C:7A:43:22:72:46:95
Certificate issuer: /CN=f42d0cad0eaed1a61f478fb0919c7a4322724695
Certificate serial: 0196575CD25C75DC855F5EDC3204118A376F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.mft
Manifest number: 0A33
Signing time: Mon 21 Apr 2025 08:00:23 +0000
Manifest this update: Mon 21 Apr 2025 08:00:23 +0000
Manifest next update: Tue 22 Apr 2025 08:00:23 +0000
Files and hashes: 1: 9C0MrQ6u0aYfR4-wkZx6QyJyRpU.crl (hash: ElEqqQuk5d0ihSGTWKTIcNg/NR3KKxjQ0iHMhRzNi0w=)
2: BfiNOagjub-Q5UhmAEUO1BegvlM.roa (hash: z7UGbr4hGM96gAGkSVL5gy0uNjYzSjUeofOhu3xqo/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:5c:d2:5c:75:dc:85:5f:5e:dc:32:04:11:8a:37:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f42d0cad0eaed1a61f478fb0919c7a4322724695
Validity
Not Before: Apr 21 08:00:23 2025 GMT
Not After : Apr 22 08:00:23 2025 GMT
Subject: CN=1b68b6b07f8b6c14a63a74f7c5fd6012278252c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ed:c2:7e:21:98:31:b3:85:78:8c:ac:25:dd:
67:07:8d:17:d2:2e:fa:23:e7:38:99:63:1b:3a:5e:
b0:23:cb:b7:90:22:54:82:61:55:f5:7c:e4:5d:08:
a4:1e:1f:28:0d:27:2d:e0:df:e0:4c:f9:3f:cb:6c:
49:29:1b:88:9d:f2:01:1a:3f:34:64:c9:88:46:d6:
38:48:29:65:aa:36:d9:66:76:17:f2:4f:f4:fe:0d:
31:a0:65:67:cd:c4:11:6f:97:e7:fa:40:c2:e5:7f:
df:00:da:24:c5:ae:a0:1f:f5:68:ed:3e:56:52:24:
2a:f6:c3:0c:6b:12:79:7b:74:cf:03:4f:73:0e:9c:
32:49:6d:25:ee:85:cc:a5:2a:1a:28:4e:90:35:ad:
82:60:7f:1e:1b:a5:dc:8b:67:db:0d:60:df:aa:e9:
74:a2:84:60:46:28:f0:9a:77:48:77:ad:a2:e4:1c:
da:e4:97:1a:bc:8b:7d:d5:5a:ce:5e:3d:a1:e1:c2:
a8:44:6d:04:07:4a:1e:41:05:32:79:e0:15:2e:ad:
16:f8:9b:30:55:ea:4d:f7:11:3f:ad:f1:8c:37:68:
0b:67:3d:8e:04:ae:e0:db:21:c4:35:05:ab:56:48:
72:1e:2b:aa:eb:7a:ee:8a:09:22:d3:87:b0:4b:fc:
26:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:68:B6:B0:7F:8B:6C:14:A6:3A:74:F7:C5:FD:60:12:27:82:52:C7
X509v3 Authority Key Identifier:
keyid:F4:2D:0C:AD:0E:AE:D1:A6:1F:47:8F:B0:91:9C:7A:43:22:72:46:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:be:14:9f:f9:6f:91:78:98:f3:d1:54:68:7d:83:4a:32:17:
16:f7:6c:12:76:4c:57:3e:a9:c2:79:70:92:24:06:ed:3e:5c:
52:8f:85:31:01:37:d9:e7:43:29:c3:c0:c8:7d:c6:90:f7:20:
56:bb:54:2e:02:04:5f:6a:99:5a:d8:25:3a:ab:d3:f1:70:05:
02:ce:bb:8a:88:47:60:dc:58:7e:f5:48:59:f2:fe:34:a9:1c:
6a:49:20:d7:dd:7b:6f:b1:7c:96:46:a4:c6:43:2e:20:e8:03:
8c:0b:31:ee:b2:a1:3a:b3:03:f2:15:e2:9d:fa:98:74:d9:b5:
8a:39:20:de:6f:03:60:59:31:3d:a2:f4:1c:db:ac:20:8c:82:
c0:70:41:5a:eb:c6:42:d4:c0:4d:a0:60:88:d5:8d:9d:60:aa:
6e:8f:cb:c7:ab:0d:fd:4b:c0:0b:a6:3b:0b:7b:1b:fa:d0:07:
b2:1d:d3:ac:75:99:2d:2b:c0:5a:73:12:22:5c:7e:98:19:22:
58:01:37:2d:ed:5b:71:60:78:53:d8:e8:5a:04:21:e4:d3:2d:
48:f3:9e:b0:7d:b7:63:c8:65:f0:a1:1a:f7:c6:5a:1c:b2:39:
b6:66:c6:6b:36:4b:7e:ef:80:6f:b8:5d:55:e3:ff:63:b6:4d:
61:a1:4f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 11:01:08 2025 by rpki-client