Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft
File: A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft (raw, json)
Hash identifier: 5nuBdQp6acQfH/5Ua6/eK/9w/uSNSx9BjV/Cm+GwIOI=
Subject key identifier: 5D:B6:43:2F:6E:7A:90:39:56:FE:EB:74:AE:31:5B:C3:64:47:28:8E
Authority key identifier: 03:D8:02:41:88:49:1A:31:9C:52:76:72:1F:94:0E:FA:E7:FC:21:AF
Certificate issuer: /CN=03d8024188491a319c5276721f940efae7fc21af
Certificate serial: 01963BE627C95D5DA1D146071F1FE091FF9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft
Manifest number: 113E
Signing time: Wed 16 Apr 2025 00:01:01 +0000
Manifest this update: Wed 16 Apr 2025 00:01:01 +0000
Manifest next update: Thu 17 Apr 2025 00:01:01 +0000
Files and hashes: 1: A9gCQYhJGjGcUnZyH5QO-uf8Ia8.crl (hash: kYKYS57CqhqtDt004z7zAXVeJ+wixIEnDwmo2SsyhiI=)
2: PAFl-pG2JHaMz_7ipR6yMf63H8w.roa (hash: byy0wWUqy3xmET5bVuzwYGsa7Zk9Dk0kE6IQV8R/QgY=)
3: jZL5Xhdd_DQTPlseqK0seytctFM.roa (hash: iK3t86giIYaf8WbR2Oyl7XO/RS0ik8f6mwnnTPsecrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft
rsync://rpki.ripe.net/repository/DEFAULT/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3b:e6:27:c9:5d:5d:a1:d1:46:07:1f:1f:e0:91:ff:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03d8024188491a319c5276721f940efae7fc21af
Validity
Not Before: Apr 16 00:01:01 2025 GMT
Not After : Apr 17 00:01:01 2025 GMT
Subject: CN=5db6432f6e7a903956feeb74ae315bc36447288e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ad:d5:33:bc:61:7e:29:41:82:d7:e3:c3:01:
e2:13:91:22:34:50:c7:2b:61:31:1a:5f:47:eb:78:
9e:89:3f:98:d6:be:a3:ed:f1:2f:a2:f6:d8:20:32:
a6:a8:66:33:12:10:71:d8:82:fa:f8:26:73:2c:7d:
c6:55:d4:9a:ee:1e:e2:87:53:95:ed:18:92:47:fe:
d8:1c:3d:1b:53:d9:7a:9b:79:23:72:ee:fa:9e:f6:
1a:9e:65:76:ab:0b:cc:b0:0f:c0:c7:99:d7:f0:03:
4b:ee:77:10:2c:1f:5e:a5:2f:18:08:52:70:23:98:
65:b1:44:d4:a9:f4:5a:ba:82:d1:28:62:8b:42:5c:
c6:d6:17:0e:73:73:23:83:47:eb:4b:d3:af:fd:53:
75:cf:53:bf:33:1d:f0:bc:c1:03:ed:5f:ee:08:1d:
ac:65:55:14:04:37:03:62:e4:19:0e:06:87:66:93:
d3:fd:6b:10:97:bb:dd:78:27:16:d5:58:30:63:99:
3d:90:ef:62:ec:5c:6b:18:b3:0f:73:27:55:40:1d:
98:80:72:68:8c:94:78:bc:e5:d4:a3:87:1b:2c:1d:
ed:1a:a6:81:d6:c5:ff:b7:65:09:30:b5:a4:24:7d:
e5:04:1e:9f:cc:7a:af:6e:bc:5c:89:eb:44:50:b8:
db:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:B6:43:2F:6E:7A:90:39:56:FE:EB:74:AE:31:5B:C3:64:47:28:8E
X509v3 Authority Key Identifier:
keyid:03:D8:02:41:88:49:1A:31:9C:52:76:72:1F:94:0E:FA:E7:FC:21:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:7a:ce:b0:cf:88:79:f6:cc:f8:c7:50:cf:7e:c6:32:b6:f5:
af:ee:2d:e5:e9:6a:1a:4f:5f:df:2c:27:9e:5f:ed:15:5c:86:
2d:23:74:1d:a3:e4:8b:79:07:73:7a:5c:a7:32:c9:08:04:46:
e0:21:4e:29:47:21:d6:71:da:b3:2b:23:bf:ea:23:03:42:48:
7a:08:13:16:35:6b:8a:12:d7:10:3e:84:3b:d8:08:bd:89:39:
2e:50:30:cf:d9:1a:1e:6e:10:3e:95:c2:67:91:bd:28:2c:e2:
22:74:5f:62:8b:27:95:62:79:10:87:1f:52:5d:1a:35:bd:ac:
b0:71:b5:ff:8a:d2:b9:c0:2b:a6:8a:b1:42:46:5e:9c:c4:f8:
3d:ff:48:b9:9b:27:fa:a7:bf:d4:ac:4b:f7:f8:fb:60:33:d4:
be:91:36:6f:1d:f8:f4:19:36:f1:02:59:b3:3a:7e:63:0a:21:
d6:c7:8e:1f:c6:75:54:f3:da:4b:66:b7:61:8e:73:cd:45:68:
88:bd:af:46:a0:ee:de:f9:06:d3:34:4e:69:a1:18:fc:98:0a:
01:3c:4d:5c:45:21:16:7a:55:d7:39:39:93:1c:bc:98:82:87:
53:ad:f4:cf:64:67:73:34:cf:91:3c:f4:36:d8:1e:35:67:b2:
11:5d:f2:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 06:44:53 2025 by rpki-client