Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft
File: 9lQZ43AKNrorA5Bsn49NLf2EgHA.mft (raw, json)
Hash identifier: z01htZnUE9woxQ1xZ49pPsVKnXVaZOUGHwqYAePTkRc=
Subject key identifier: 82:9B:DF:77:67:05:F3:D7:A0:BA:D2:B6:82:60:72:00:91:DF:E9:40
Authority key identifier: F6:54:19:E3:70:0A:36:BA:2B:03:90:6C:9F:8F:4D:2D:FD:84:80:70
Certificate issuer: /CN=f65419e3700a36ba2b03906c9f8f4d2dfd848070
Certificate serial: 01975BA54ADDA4EBE0FFC5DD57DB1FA7F403
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lQZ43AKNrorA5Bsn49NLf2EgHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft
Manifest number: 0CA1
Signing time: Tue 10 Jun 2025 21:00:48 +0000
Manifest this update: Tue 10 Jun 2025 21:00:48 +0000
Manifest next update: Wed 11 Jun 2025 21:00:48 +0000
Files and hashes: 1: 9lQZ43AKNrorA5Bsn49NLf2EgHA.crl (hash: ui4YHMyhad/MsaaMlXNu9Je3FVe7t9nlw1TBlx0hEQk=)
2: khAk69GaviX3ISVPskdgmXYxHg0.roa (hash: iZg+JNU8yAUj+GbVfYYrGDVbFREqgvj716gjoOSNlMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9lQZ43AKNrorA5Bsn49NLf2EgHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 20:45:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5b:a5:4a:dd:a4:eb:e0:ff:c5:dd:57:db:1f:a7:f4:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f65419e3700a36ba2b03906c9f8f4d2dfd848070
Validity
Not Before: Jun 10 21:00:48 2025 GMT
Not After : Jun 11 21:00:48 2025 GMT
Subject: CN=829bdf776705f3d7a0bad2b68260720091dfe940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:56:67:aa:3b:44:03:6d:d6:e8:fa:63:8b:59:
ea:38:61:8c:1f:35:2e:b6:d4:4e:c6:51:fb:fb:9d:
6c:78:e1:05:f5:06:66:94:da:38:5d:b2:93:a2:4c:
64:e9:f5:41:7e:a1:6e:c8:11:59:ef:b4:54:86:f4:
2c:fd:b7:f6:9d:07:a1:e9:f6:ea:43:0f:76:f7:df:
af:25:49:ae:a4:0b:0f:7b:80:95:aa:50:4c:be:a4:
9e:f7:84:be:b9:ee:86:d7:04:dc:93:ca:1c:fe:47:
1d:68:2f:cb:c4:d3:3c:c2:88:7d:83:2f:3f:b3:c9:
0e:3b:d3:5b:ed:a7:93:3b:29:06:9c:b9:be:b1:b2:
be:42:ec:62:03:60:3d:11:81:49:54:ac:93:1d:28:
91:62:1a:6d:7f:94:f8:a6:05:0b:bd:bc:c9:d6:29:
bb:8b:1a:59:15:ea:e3:0c:48:6e:f1:d3:bb:5b:fa:
1a:86:30:3d:96:25:ab:b5:1d:e4:77:ed:99:1b:29:
b3:18:27:91:04:f6:b3:70:d1:a5:ee:ab:6e:dd:0e:
ae:19:76:4a:b5:f2:ff:64:d3:c4:22:93:11:e8:ce:
3a:b1:ee:79:e4:54:69:71:47:6d:7c:59:28:f1:75:
81:53:1b:43:6f:01:92:71:42:6d:50:63:f0:db:13:
4a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:9B:DF:77:67:05:F3:D7:A0:BA:D2:B6:82:60:72:00:91:DF:E9:40
X509v3 Authority Key Identifier:
keyid:F6:54:19:E3:70:0A:36:BA:2B:03:90:6C:9F:8F:4D:2D:FD:84:80:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lQZ43AKNrorA5Bsn49NLf2EgHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:1b:cd:5e:65:f1:f3:3e:18:6e:a9:b6:81:f9:3a:aa:07:d5:
00:fc:bc:6a:e8:4f:71:76:bf:f0:da:6b:92:22:f0:1e:1b:4f:
4d:f7:6f:79:b3:54:41:7b:6f:6a:e9:c1:9a:79:b1:3b:eb:27:
1c:97:ab:5f:f9:72:c7:98:d8:08:91:6e:59:f7:92:ee:9c:58:
92:9b:f8:f1:42:19:49:4f:00:9d:de:4e:00:ba:52:5e:bc:de:
8b:34:78:89:ce:45:18:ba:82:60:08:7a:a0:52:ba:6f:e0:d3:
2f:81:ec:01:ba:c1:e4:3e:f4:f3:e3:e9:80:a5:41:05:55:ed:
48:b4:fb:7f:e1:c9:31:5e:30:91:63:0c:9a:17:49:71:3c:b5:
b2:25:61:9a:e0:7b:08:32:7f:79:8d:05:cb:a4:98:3a:9e:45:
f1:cb:59:ba:a7:28:bb:1b:eb:b5:c1:09:b3:ad:b5:b3:85:96:
2b:ab:ca:dc:7d:35:ea:fd:30:e6:4b:a9:dc:ef:da:29:3f:79:
c4:d6:62:70:d8:08:03:94:09:72:26:34:6e:4b:56:33:fd:ea:
04:0d:6d:b6:6c:8d:17:0d:38:fe:69:ef:ee:4c:c8:4a:5f:ef:
d8:7c:f9:25:bb:b2:7e:0f:53:69:4a:a6:64:ae:2e:21:6b:f6:
b0:ed:c1:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 07:01:42 2025 by rpki-client