Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft
File: 9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft (raw, json)
Hash identifier: IZP0uY4SmKJlhqf9jtTHmYa62jBk+JT9X+LOlcD8FZU=
Subject key identifier: 61:5F:22:0B:82:24:B8:19:9A:CF:31:E3:57:89:2A:1F:A3:E0:A4:1B
Authority key identifier: F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F
Certificate issuer: /CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f
Certificate serial: 0196263AAE0FF13DE341FC0E18B2665F9BE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft
Manifest number: 0CFE
Signing time: Fri 11 Apr 2025 19:01:41 +0000
Manifest this update: Fri 11 Apr 2025 19:01:41 +0000
Manifest next update: Sat 12 Apr 2025 19:01:41 +0000
Files and hashes: 1: 1-FnvQqT9mIqxipsRqFjYsNQSlBM.roa (hash: +uFY0K06aPvv+IH1erLogXQwEEO2k+DY8eNZLIXFHV4=)
2: 9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl (hash: oLMp0J9v8iSt3EeBVmaOgczO5hVTdaWMq+wjcOqqOHY=)
3: EpH20P4xP3V2g4vErHJO-EvTAVU.roa (hash: jeooPDRiBjDAUPoIXhITPTt2zTmHZ7KLWf5fCQG5sIo=)
4: S5ZKnLfz4DstONEqZm_YmyZ8kvY.roa (hash: X0rSxal4LbSgFqA0+FsHMQ78+/EIGLIojbhDJzOesXI=)
5: SI90qQvScrNKS-02paw66Vtte1g.roa (hash: CoRUrg+WB47FS25HKQ2HVa4e+itGukiRC6ZwlYviHec=)
6: VunL007YcgdB0SQwEVqZksZS8Fs.roa (hash: 216WPQB/uK03AqzN7nO6bEUvYIaYzP3vD9//CYpZtZI=)
7: mvmUvaM2JRysTq3IiKyyysU6GY8.roa (hash: dMiGawP2eEnw55fXqAakbpr7IIQ2Da7zAMRfk+xhjuE=)
8: xfkDaLGtqI9S0koDwH1ibKq86PQ.roa (hash: 9SMgRbgNtClui+eod+bviRGqIN366+5FDeHZRxM9wm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 19:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:26:3a:ae:0f:f1:3d:e3:41:fc:0e:18:b2:66:5f:9b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f
Validity
Not Before: Apr 11 19:01:41 2025 GMT
Not After : Apr 12 19:01:41 2025 GMT
Subject: CN=615f220b8224b8199acf31e357892a1fa3e0a41b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c5:35:d5:16:86:70:08:5b:e9:d9:f9:fb:c9:
98:e0:04:15:8e:b0:39:bc:4b:05:c7:cc:b9:ec:c4:
89:82:46:3f:86:e0:e0:66:9e:e5:c2:b9:f2:2b:6a:
72:27:3e:72:db:3b:b7:36:f2:be:ae:67:6f:fc:5e:
64:74:50:f6:88:af:1f:ef:0b:b0:79:fb:95:7a:9b:
45:6c:f8:87:ee:c8:b1:da:5b:08:01:50:4b:40:cc:
aa:89:17:95:bf:5f:ee:1b:6f:6e:9b:49:3d:50:d6:
9c:32:57:3a:72:b7:42:3b:8c:69:89:20:12:77:98:
c9:8a:17:a4:02:56:4a:3b:48:b8:f2:2b:71:5f:98:
72:99:cd:3f:0d:ab:4d:c8:d3:e6:c9:34:4f:80:d8:
1d:b5:47:ba:90:78:17:70:0c:c2:03:20:73:7d:11:
d2:76:ed:f9:6f:5b:8d:2e:44:c3:df:3f:54:0d:18:
f2:10:84:8b:11:7b:c9:a7:f0:ec:54:e9:46:01:eb:
4b:d1:a4:db:25:e5:f8:3b:10:00:5d:cc:f1:5b:ff:
b6:93:df:d2:06:b7:80:76:66:54:47:4d:6d:e3:06:
de:22:05:90:e2:43:8c:17:ef:e8:9c:7d:8a:f5:86:
0c:7e:5f:b9:7f:32:d4:45:ad:05:6b:a2:f1:fa:a9:
02:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:5F:22:0B:82:24:B8:19:9A:CF:31:E3:57:89:2A:1F:A3:E0:A4:1B
X509v3 Authority Key Identifier:
keyid:F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:95:95:53:fb:f6:69:77:61:ea:1c:0e:ec:a6:04:64:e2:ff:
ca:07:47:be:f5:fc:00:3c:7f:ad:ad:d8:bb:d2:94:ec:17:a7:
c2:9c:51:ca:f3:d2:84:35:0a:f6:3c:d2:cc:f5:a9:41:be:af:
d0:ce:86:15:14:9a:c6:7f:68:7b:c3:ac:22:0a:8b:f7:09:7a:
f4:04:5c:e5:dd:d1:42:22:aa:fe:de:f0:b6:68:fb:d0:5b:d0:
ef:2b:32:44:b6:97:92:7a:a9:e9:23:df:64:ca:61:a9:7e:a2:
f5:fb:f6:90:a5:9b:01:87:c8:92:6c:4c:c6:cb:a4:e1:e6:fa:
66:15:bf:80:87:1a:ca:45:d4:45:54:e4:ac:c1:69:7c:19:83:
cb:0b:0c:bb:c0:46:09:91:41:c7:ca:c0:df:c1:54:b7:e4:5d:
a5:c3:67:8b:75:c8:99:ba:5c:cc:7d:b0:4a:3c:ca:79:1d:76:
af:ce:ff:8e:d4:6e:14:86:9b:23:55:15:a9:6e:e2:ac:af:55:
6f:b8:ab:3d:64:ac:cd:dd:88:56:46:9d:25:ca:91:75:57:85:
63:1f:dc:0c:58:18:f0:a4:62:f1:12:78:a3:36:6c:d3:d5:b0:
4e:11:1c:d7:4f:de:8e:a9:80:a1:04:c0:92:d4:ac:99:fc:d8:
a2:27:6a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:20:46 2025 by rpki-client