Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
File: 9TFMH54Rk8ICXLZytSNXOXjSVNk.mft (raw, json)
Hash identifier: Q7Ieh6uGFx5OUODZj26vT++JguLHUNnqkrP/qeZAsOk=
Subject key identifier: 40:8F:6E:D2:FF:46:55:59:DF:2E:0D:0D:A5:13:12:97:68:57:60:2F
Authority key identifier: F5:31:4C:1F:9E:11:93:C2:02:5C:B6:72:B5:23:57:39:78:D2:54:D9
Certificate issuer: /CN=f5314c1f9e1193c2025cb672b523573978d254d9
Certificate serial: 0196444473E6975111DA765110B4641B6286
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9TFMH54Rk8ICXLZytSNXOXjSVNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
Manifest number: 085E
Signing time: Thu 17 Apr 2025 15:00:58 +0000
Manifest this update: Thu 17 Apr 2025 15:00:58 +0000
Manifest next update: Fri 18 Apr 2025 15:00:58 +0000
Files and hashes: 1: 9TFMH54Rk8ICXLZytSNXOXjSVNk.crl (hash: ANFfm/w9C5FsPNK9ABTWACVaycP7X8sAOKMvnZlMFZI=)
2: vnQYA6POl1a8tK2ZzQU1CNh2rSU.roa (hash: cwo0eDB9nxSSyKe/qdMpdoKv9t3e96TKN+bq+LM4mpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9TFMH54Rk8ICXLZytSNXOXjSVNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:44:73:e6:97:51:11:da:76:51:10:b4:64:1b:62:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5314c1f9e1193c2025cb672b523573978d254d9
Validity
Not Before: Apr 17 15:00:58 2025 GMT
Not After : Apr 18 15:00:58 2025 GMT
Subject: CN=408f6ed2ff465559df2e0d0da51312976857602f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:82:df:cb:13:e4:d5:94:09:01:55:4a:33:71:
62:4b:0e:41:cd:b2:81:4f:72:82:ef:46:5c:70:01:
2c:3b:6d:2d:43:78:de:5f:c7:9d:0c:cf:ae:5b:38:
d7:a5:89:05:86:50:81:09:c1:97:b5:69:1d:d4:23:
c9:79:4f:8e:23:9f:55:1f:2c:cf:80:16:ff:74:3a:
82:89:7d:0f:bc:b3:ff:c9:6f:7a:a1:dc:77:cd:13:
0f:59:8d:7b:e7:3e:75:7b:54:1d:dd:28:e8:39:b3:
5a:30:a2:00:69:b8:18:d6:c4:0a:7b:43:59:e2:29:
a7:22:1d:1a:40:d2:c6:7c:7d:b2:1f:2a:2f:93:fa:
a4:8f:61:e5:06:06:e4:b2:3c:d2:21:de:9d:dd:99:
18:00:a4:12:82:98:00:72:01:c1:30:17:a0:c1:92:
59:0f:cf:84:5e:cf:5f:48:e1:aa:95:e8:0e:25:cc:
cb:e2:a6:f4:90:16:ba:4f:6e:3c:97:b2:52:ea:60:
27:0a:ea:17:a8:f2:ba:96:84:04:d4:d5:5f:de:57:
c0:ad:74:b6:96:78:31:c2:21:72:22:57:8e:60:45:
5b:11:e9:82:7e:5b:76:d9:3d:72:97:9f:7d:03:e3:
3f:6a:8a:f2:7a:9a:2f:66:2e:71:72:0a:15:23:09:
e1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:8F:6E:D2:FF:46:55:59:DF:2E:0D:0D:A5:13:12:97:68:57:60:2F
X509v3 Authority Key Identifier:
keyid:F5:31:4C:1F:9E:11:93:C2:02:5C:B6:72:B5:23:57:39:78:D2:54:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TFMH54Rk8ICXLZytSNXOXjSVNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:8f:bb:11:87:90:4e:96:0b:fa:3f:35:97:54:e1:b2:30:aa:
cc:45:19:9e:0c:c8:a7:3d:b4:c9:ac:00:b1:4f:76:49:e4:01:
89:4a:9a:d1:bc:da:49:5a:2f:91:43:31:be:c1:da:ea:24:81:
af:fa:d0:49:0c:fd:40:3c:b2:18:46:0a:59:cf:3b:88:cd:07:
23:06:45:9f:62:e9:7f:c5:df:db:b7:b6:1e:07:89:a9:c6:b6:
6f:da:ed:50:3b:ef:59:d3:77:b7:36:85:b8:33:ce:e0:ec:c4:
56:8b:b2:a6:0a:9a:0f:25:1a:98:0a:6b:52:d8:53:6b:5a:fe:
1e:a7:3e:1c:2d:5f:09:08:c4:6c:d6:f5:19:c6:20:fa:36:d6:
56:48:e3:62:ab:7d:78:54:3a:7e:78:96:c7:e6:d9:75:96:f3:
04:1f:1a:0d:02:c4:dd:f3:6a:61:ca:d5:d3:b5:75:15:64:c1:
ef:e6:44:45:60:b0:a8:fa:e9:6a:22:9b:d5:11:c1:4a:f3:29:
3b:38:de:08:22:e3:cd:a4:68:86:0a:26:ee:a0:f6:23:e2:69:
6d:df:4e:5b:14:cc:a5:e8:6c:91:54:46:95:92:2f:de:c3:ff:
04:d8:bc:f7:e7:f6:34:11:46:bd:c1:59:07:0a:23:9a:e2:6a:
d6:cc:d6:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:51:30 2025 by rpki-client