Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.mft
File: r9rCQfMBCxrkhLwx9YStD50gZzQ.mft (raw, json)
Hash identifier: tMlmhb3F4OgKbtwNPy5piE9BAHpmtCCbS0MzenbKvq0=
Subject key identifier: A2:9D:D8:FF:C0:3E:95:08:78:11:21:60:C7:3C:B2:5D:41:61:EF:D2
Authority key identifier: AF:DA:C2:41:F3:01:0B:1A:E4:84:BC:31:F5:84:AD:0F:9D:20:67:34
Certificate issuer: /CN=afdac241f3010b1ae484bc31f584ad0f9d206734
Certificate serial: 01965A94D4CE8EBC18D1553010C8EDF3458F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r9rCQfMBCxrkhLwx9YStD50gZzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.mft
Manifest number: 0AC7
Signing time: Mon 21 Apr 2025 23:00:25 +0000
Manifest this update: Mon 21 Apr 2025 23:00:25 +0000
Manifest next update: Tue 22 Apr 2025 23:00:25 +0000
Files and hashes: 1: Pyp3KZhgaPnGJ0klVfWstvZhAaA.roa (hash: 2zE2fETyOiknIdhnDsU5+xLMFz/vO5FngmYcWoMLhMg=)
2: r9rCQfMBCxrkhLwx9YStD50gZzQ.crl (hash: oE0N10SHq/KLRlKToXh0qunAPTDIGZd32BbSoxFNgFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/r9rCQfMBCxrkhLwx9YStD50gZzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:94:d4:ce:8e:bc:18:d1:55:30:10:c8:ed:f3:45:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afdac241f3010b1ae484bc31f584ad0f9d206734
Validity
Not Before: Apr 21 23:00:25 2025 GMT
Not After : Apr 22 23:00:25 2025 GMT
Subject: CN=a29dd8ffc03e950878112160c73cb25d4161efd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ad:12:9e:83:7d:a4:71:e9:71:d9:d7:b8:6f:
a1:6a:f0:e5:8f:92:c5:3c:9c:50:9c:d7:2d:89:dc:
21:62:15:a3:3f:d5:3f:be:36:6f:e4:97:fc:bf:74:
cc:f8:b1:48:98:8e:c4:05:4a:da:5a:18:08:08:4c:
fa:99:12:51:0d:9d:aa:48:f7:48:57:19:94:b0:c8:
86:d9:d8:8c:f7:91:ba:30:6c:dc:93:47:eb:cd:28:
ad:d6:ec:22:2f:95:ee:c2:b9:11:b5:77:f4:ec:2a:
ad:d5:ae:c3:78:38:28:e3:ef:f5:3f:d3:b6:f9:4a:
95:60:53:9e:c7:32:d8:3b:80:1a:eb:0a:40:e3:67:
9a:81:c3:51:ec:be:41:bb:9b:86:05:89:e3:e0:d4:
5a:02:3f:84:2e:9a:91:ef:c5:3a:bd:46:d4:44:b1:
6c:73:c9:f5:fd:01:c4:a6:c3:4f:b1:a6:31:f9:d2:
bd:97:36:c6:2c:7f:78:65:89:07:66:a8:10:f0:10:
96:eb:cb:23:fc:62:fb:8d:b3:05:41:fd:4b:2f:01:
49:ae:7d:ef:a8:3e:d9:a8:d9:70:b9:3b:6a:56:c0:
e0:36:9b:dd:ab:ec:eb:07:30:f5:64:7b:b7:9c:c6:
85:bd:33:96:40:82:c0:9a:cc:ad:2f:44:30:eb:fb:
fd:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:9D:D8:FF:C0:3E:95:08:78:11:21:60:C7:3C:B2:5D:41:61:EF:D2
X509v3 Authority Key Identifier:
keyid:AF:DA:C2:41:F3:01:0B:1A:E4:84:BC:31:F5:84:AD:0F:9D:20:67:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r9rCQfMBCxrkhLwx9YStD50gZzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:82:fe:c3:d9:e4:e3:15:db:ea:f1:d4:5d:21:e3:25:21:81:
78:ff:a0:d4:4f:b3:c7:b0:9a:d6:e0:27:6a:74:dc:6f:34:a7:
91:b4:c4:58:7b:5f:ff:8a:0d:c5:d2:f7:6e:f6:e6:96:cd:88:
3b:d5:ad:f2:18:fb:6c:3c:68:f3:0e:3e:be:01:50:ff:f2:36:
40:e9:32:ce:7b:1b:08:ed:be:bf:1f:7f:a3:fd:60:d4:43:28:
88:42:75:7d:c4:f3:f8:a1:13:6e:5a:db:fd:c4:3e:64:bc:fc:
80:be:17:3c:36:67:43:b6:17:08:8c:e4:ff:92:0d:be:80:a8:
7f:6e:7f:cf:6b:bf:6a:e9:89:1c:2a:ac:b6:d2:d2:dd:25:60:
c5:ad:44:f0:a5:1b:90:28:32:1f:af:42:a4:9f:de:45:a1:61:
91:f1:20:02:9e:50:8a:6d:e4:14:93:6b:6e:f5:87:14:6d:fc:
a2:31:22:50:aa:c1:9a:f4:ec:63:ed:0f:2f:86:b2:40:e0:95:
3f:8f:ff:89:e9:d3:a5:74:84:3a:d7:10:5c:fe:91:e1:1f:05:
ce:d9:79:c1:b3:2f:1d:eb:3b:a6:65:83:62:93:5e:28:86:f5:
4a:2e:4d:b3:ce:79:6a:a3:94:71:f0:b0:14:bf:df:d8:23:38:
90:f9:86:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:23:35 2025 by rpki-client