Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/0879d8-f216-45ab-bf87-23e1dadf106c/1/9NwmxibFHF3vbyRm849VslApZC8.mft
File: 9NwmxibFHF3vbyRm849VslApZC8.mft (raw, json)
Hash identifier: Y3anSkK//4nETrEODH9icBQJMCQeREPcTvkWxgi3cgU=
Subject key identifier: 86:81:3E:CE:FF:20:A8:6B:47:E0:69:D4:6B:B4:BB:8C:F0:9E:C0:01
Authority key identifier: F4:DC:26:C6:26:C5:1C:5D:EF:6F:24:66:F3:8F:55:B2:50:29:64:2F
Certificate issuer: /CN=f4dc26c626c51c5def6f2466f38f55b25029642f
Certificate serial: 019657265C994AE3AF328D011B2112A4E107
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NwmxibFHF3vbyRm849VslApZC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/0879d8-f216-45ab-bf87-23e1dadf106c/1/9NwmxibFHF3vbyRm849VslApZC8.mft
Manifest number: 0D6A
Signing time: Mon 21 Apr 2025 07:00:53 +0000
Manifest this update: Mon 21 Apr 2025 07:00:53 +0000
Manifest next update: Tue 22 Apr 2025 07:00:53 +0000
Files and hashes: 1: 9NwmxibFHF3vbyRm849VslApZC8.crl (hash: exvPmVDb/+EtcJBURuXgCUYaiXklsIZMIxgjbGbAzB8=)
2: XI2V1xAOtuCnHnEsCZ4HB4sk5c0.roa (hash: NGuYGkHyS6sZ+OmDpCbd7Xg31/u7/ppig2sfjfcm+Ik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/0879d8-f216-45ab-bf87-23e1dadf106c/1/9NwmxibFHF3vbyRm849VslApZC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/0879d8-f216-45ab-bf87-23e1dadf106c/1/9NwmxibFHF3vbyRm849VslApZC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9NwmxibFHF3vbyRm849VslApZC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 07:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:26:5c:99:4a:e3:af:32:8d:01:1b:21:12:a4:e1:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4dc26c626c51c5def6f2466f38f55b25029642f
Validity
Not Before: Apr 21 07:00:53 2025 GMT
Not After : Apr 22 07:00:53 2025 GMT
Subject: CN=86813eceff20a86b47e069d46bb4bb8cf09ec001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:71:f8:ee:5f:29:1d:41:c1:ae:11:42:da:76:
54:02:92:50:cb:b9:8c:c8:6c:fd:21:c9:12:7a:d6:
7e:75:53:0c:88:20:e8:8a:7e:29:11:5a:8e:7d:56:
f2:1a:6e:e5:a8:65:82:3c:71:e0:a9:39:72:df:a0:
25:44:2c:a9:14:e6:1f:30:8e:a4:b2:85:88:b5:76:
77:c4:a5:d5:ff:d5:ff:13:f9:f2:f7:66:14:8f:8c:
f0:83:f3:79:17:51:d4:37:19:99:43:f7:67:7b:c9:
0b:05:8c:a2:25:f2:07:b1:85:76:d4:8d:22:9c:20:
82:0c:25:b9:22:67:e5:f4:74:c5:1d:2e:ba:7a:05:
15:b0:35:80:85:43:b2:81:01:12:62:8c:50:80:ce:
34:6e:8c:d5:2a:84:55:d1:ed:6f:df:a5:d7:ca:68:
20:c0:18:8c:92:9f:cd:17:30:ad:7f:27:40:c2:99:
67:2e:f3:d9:0f:dd:3e:b3:68:6f:57:00:11:51:77:
44:06:bf:c5:35:38:e0:8f:e2:cd:a0:3d:78:f3:c6:
a1:1e:cb:da:28:d3:9a:85:68:53:01:2a:a3:52:33:
ee:de:e5:8d:0b:19:06:a5:27:77:c4:dd:ee:2a:79:
16:50:c7:f3:aa:a8:f6:a7:32:26:b8:70:ff:b2:98:
71:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:81:3E:CE:FF:20:A8:6B:47:E0:69:D4:6B:B4:BB:8C:F0:9E:C0:01
X509v3 Authority Key Identifier:
keyid:F4:DC:26:C6:26:C5:1C:5D:EF:6F:24:66:F3:8F:55:B2:50:29:64:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NwmxibFHF3vbyRm849VslApZC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0879d8-f216-45ab-bf87-23e1dadf106c/1/9NwmxibFHF3vbyRm849VslApZC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0879d8-f216-45ab-bf87-23e1dadf106c/1/9NwmxibFHF3vbyRm849VslApZC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:98:17:93:be:c6:b1:c6:86:78:85:8c:dc:4c:6f:98:a2:91:
72:5c:2d:13:10:e0:a4:7d:16:83:a2:42:16:06:ee:5f:7c:af:
db:95:19:5d:d6:7a:8b:df:fc:9b:68:0e:e2:eb:ee:dc:51:29:
05:02:91:24:d5:7f:cd:e5:4b:7b:c0:15:f2:38:fc:7e:4e:04:
46:28:06:4b:e9:c7:06:b6:fe:e1:6d:b5:b1:95:ba:ec:4c:73:
2f:10:17:25:e5:46:5b:3c:38:b1:4c:eb:d8:78:32:2a:65:9a:
a9:61:38:07:fd:dc:9f:41:0f:26:e8:3d:b7:ac:69:c4:58:d1:
d1:7a:1f:8c:f1:77:c6:b7:c9:a5:2f:24:6c:4d:5b:b9:51:0f:
4f:cc:00:98:50:db:68:76:66:6f:33:a3:d1:85:18:20:2e:e0:
c9:c6:9c:58:84:90:54:23:4e:c9:e6:a5:4a:12:9f:73:48:da:
56:31:33:b5:84:88:a2:2b:3b:49:33:6e:14:f4:29:29:c6:80:
67:ad:51:0e:5a:73:9a:46:33:f0:f5:97:42:c3:62:b7:b7:17:
dd:25:f5:82:1a:4e:3e:49:3e:12:09:0b:6f:dd:b9:8f:7c:87:
d7:b9:a6:03:a7:54:39:b7:31:eb:07:ec:63:a9:0f:8a:1f:53:
4f:d8:4a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:14:15 2025 by rpki-client