Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.mft
File: 9bdVrRo8ekUCu8PqNMdba85hyUw.mft (raw, json)
Hash identifier: aYjthnl9uSzRiCu/Z8H/VCufAKY4kAsO6HApxHBEQPU=
Subject key identifier: 57:6A:EA:AA:0E:C7:B5:3F:8C:0E:5A:30:1A:AC:59:99:CD:EB:01:4C
Authority key identifier: F5:B7:55:AD:1A:3C:7A:45:02:BB:C3:EA:34:C7:5B:6B:CE:61:C9:4C
Certificate issuer: /CN=f5b755ad1a3c7a4502bbc3ea34c75b6bce61c94c
Certificate serial: 019652370F0C8C163993AA57A3B6F54CF0EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9bdVrRo8ekUCu8PqNMdba85hyUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.mft
Manifest number: 14F9
Signing time: Sun 20 Apr 2025 08:01:02 +0000
Manifest this update: Sun 20 Apr 2025 08:01:02 +0000
Manifest next update: Mon 21 Apr 2025 08:01:02 +0000
Files and hashes: 1: 9bdVrRo8ekUCu8PqNMdba85hyUw.crl (hash: cHz5TDeKM2bwTGB00rLfGkwZUJ4Z8Y724Byz+TSuGuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/9bdVrRo8ekUCu8PqNMdba85hyUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:37:0f:0c:8c:16:39:93:aa:57:a3:b6:f5:4c:f0:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5b755ad1a3c7a4502bbc3ea34c75b6bce61c94c
Validity
Not Before: Apr 20 08:01:02 2025 GMT
Not After : Apr 21 08:01:02 2025 GMT
Subject: CN=576aeaaa0ec7b53f8c0e5a301aac5999cdeb014c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:73:14:49:50:10:89:64:6e:27:d3:45:23:91:
5b:d0:7d:93:9c:d5:6e:15:a9:b2:db:bb:15:01:e0:
1b:49:e1:d6:7c:31:d6:c8:99:34:6b:b7:cd:2b:b1:
9f:2b:e4:0a:ad:c2:af:0d:f5:98:d5:71:43:d4:a6:
57:7b:37:11:70:12:b1:0b:32:c0:d6:ab:60:7e:62:
01:5b:da:6f:c5:f2:b9:18:a1:14:4b:c1:68:40:07:
cc:9c:0f:0c:cb:64:ff:97:7b:da:48:fa:9d:97:33:
b4:a1:60:92:85:83:5c:1f:7c:a5:1a:9e:da:9e:50:
9a:52:b2:49:52:8e:b8:19:ea:65:df:2e:6e:ad:a8:
43:1a:e5:49:1c:a3:26:28:a9:3b:54:bb:fd:87:f1:
9a:38:fb:23:eb:86:5a:c6:9b:72:a6:8a:91:20:d8:
01:f7:d8:89:bb:60:74:d2:ef:2f:bb:f1:52:87:e3:
9e:c8:73:fd:b3:35:a2:00:09:ac:1b:fa:d9:56:88:
15:1c:4e:ec:1c:33:aa:55:91:f2:76:c1:fc:91:4f:
f5:5d:5c:8e:59:f4:b1:91:6c:25:1d:93:00:0f:21:
3e:33:ce:d7:03:5e:8a:6b:fe:9b:9f:d4:cb:e6:6b:
33:9a:8a:62:86:2e:24:b5:e8:38:cb:07:cb:56:1d:
f5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:6A:EA:AA:0E:C7:B5:3F:8C:0E:5A:30:1A:AC:59:99:CD:EB:01:4C
X509v3 Authority Key Identifier:
keyid:F5:B7:55:AD:1A:3C:7A:45:02:BB:C3:EA:34:C7:5B:6B:CE:61:C9:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9bdVrRo8ekUCu8PqNMdba85hyUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:ae:90:0e:d0:79:5d:ba:e9:ee:60:5f:7d:31:f2:5d:4f:a8:
c3:b5:c3:5e:7d:f8:02:fb:b5:91:9c:0f:ec:5b:1e:40:40:5e:
62:13:6d:68:1a:4b:cd:e4:05:f0:2a:d0:3d:d3:27:dd:79:53:
75:3b:48:ff:f5:01:f7:75:0e:fa:fd:d3:a0:dc:da:16:35:92:
84:34:d3:49:56:36:2e:99:6c:5e:58:25:1f:13:31:6f:df:57:
85:e9:4f:be:fa:5c:4a:c4:c3:e3:05:8c:da:cf:33:40:fb:4b:
e4:97:06:18:34:14:13:93:fe:0a:96:11:4d:5d:15:6c:18:c5:
e8:86:49:05:a1:57:54:b7:af:b9:6a:21:e4:95:ec:2d:c0:1e:
2a:22:7f:bc:c4:fb:dc:a7:85:36:d0:d0:0a:5b:fb:8d:29:77:
6d:6c:0d:4a:8e:16:c3:c4:8e:02:42:6f:5f:c6:c9:23:1c:92:
3f:f3:93:26:f4:d2:d3:84:ae:4e:67:7b:23:e9:69:fa:ca:39:
fc:24:ce:98:d0:1d:c0:74:d9:11:40:cd:f5:f5:64:bd:f9:09:
f9:56:88:cf:52:67:60:86:35:bb:b6:15:c1:3e:6a:0c:a3:53:
36:e9:3c:fb:0f:a1:f8:1b:bb:87:69:d3:50:2d:d9:ae:a3:8b:
c0:8e:a6:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:07:49 2025 by rpki-client