Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/m0fuHxfJh967LAINi18ti9rb63c.mft
File: m0fuHxfJh967LAINi18ti9rb63c.mft (raw, json)
Hash identifier: nJZD6TjMpblpfWFPrjHHFKwwQDSp6QgwVBTKWxchNs4=
Subject key identifier: 9D:93:7B:B1:AB:59:22:94:7F:81:28:75:19:62:CD:70:B2:D3:86:B3
Authority key identifier: 9B:47:EE:1F:17:C9:87:DE:BB:2C:02:0D:8B:5F:2D:8B:DA:DB:EB:77
Certificate issuer: /CN=9b47ee1f17c987debb2c020d8b5f2d8bdadbeb77
Certificate serial: 0196060A9FE632B79590E26893F185860D0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m0fuHxfJh967LAINi18ti9rb63c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/m0fuHxfJh967LAINi18ti9rb63c.mft
Manifest number: 0CBF
Signing time: Sat 05 Apr 2025 13:01:21 +0000
Manifest this update: Sat 05 Apr 2025 13:01:21 +0000
Manifest next update: Sun 06 Apr 2025 13:01:21 +0000
Files and hashes: 1: 126M92i4yvgJWpcn8XcIW24xKRw.roa (hash: gvLu6/32Bhn0SToW2HYoFaVXP2rKf3ibNrus5LTj59I=)
2: 2Y-BQWwW7_ggvBXNnc8W9Hw_ByE.roa (hash: JhmK62xSjdy0MLOq5+Y9bNPh5TyhHzNoMKSxAmlyqP4=)
3: m0fuHxfJh967LAINi18ti9rb63c.crl (hash: qCctml5qVASn7kep3TMvmnmvTV8C+LspXpoVWtSZi4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/m0fuHxfJh967LAINi18ti9rb63c.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/m0fuHxfJh967LAINi18ti9rb63c.mft
rsync://rpki.ripe.net/repository/DEFAULT/m0fuHxfJh967LAINi18ti9rb63c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:06:0a:9f:e6:32:b7:95:90:e2:68:93:f1:85:86:0d:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b47ee1f17c987debb2c020d8b5f2d8bdadbeb77
Validity
Not Before: Apr 5 13:01:21 2025 GMT
Not After : Apr 6 13:01:21 2025 GMT
Subject: CN=9d937bb1ab5922947f8128751962cd70b2d386b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d7:a2:44:89:3f:da:c0:cd:0e:1f:2e:6f:aa:
d1:29:3d:92:1f:9a:48:ea:62:21:4e:97:0f:1e:ce:
af:72:2e:1e:19:19:3c:e7:7d:53:8f:6e:bd:f3:61:
ea:42:82:c1:59:de:1c:13:7a:7c:e6:b4:b0:6f:0b:
7c:22:02:32:85:ad:58:91:32:72:84:09:87:57:35:
6e:53:0f:e6:7b:c5:6f:cd:ef:d7:81:f8:86:a8:04:
db:65:a9:2c:2d:d2:1b:6b:dd:2b:7d:67:15:b3:53:
73:40:fa:48:5a:ae:86:da:f4:42:83:5a:c2:61:e5:
fa:d7:35:51:03:7d:25:ee:6e:27:9a:e9:cf:7c:c4:
9f:e9:15:c7:90:60:86:c3:b0:6f:32:ae:e7:f1:55:
6b:ea:f7:39:ea:35:c4:7a:50:5f:36:25:3b:b2:f8:
f2:c0:b4:23:2c:e7:9b:f1:6c:de:32:db:00:ab:e0:
5d:95:bb:b4:d1:23:a6:92:03:7d:7a:39:67:af:9e:
78:da:e4:9e:99:c9:ac:db:8a:21:76:86:2e:8d:b6:
d9:bb:d8:81:e1:49:8f:e3:d5:3a:7a:a7:6b:9f:5c:
81:25:b3:3d:24:1c:9d:9f:05:91:60:c9:ac:e9:dd:
e2:c2:1b:3b:f4:da:4d:24:21:00:fc:78:0e:fe:40:
aa:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:93:7B:B1:AB:59:22:94:7F:81:28:75:19:62:CD:70:B2:D3:86:B3
X509v3 Authority Key Identifier:
keyid:9B:47:EE:1F:17:C9:87:DE:BB:2C:02:0D:8B:5F:2D:8B:DA:DB:EB:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m0fuHxfJh967LAINi18ti9rb63c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/m0fuHxfJh967LAINi18ti9rb63c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/m0fuHxfJh967LAINi18ti9rb63c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:0e:03:81:1d:65:c8:ae:57:f8:7f:4f:81:89:d3:6a:c7:4c:
6b:69:42:8f:e2:84:ae:7c:3a:54:dd:a9:ca:02:f3:b2:56:aa:
da:10:3a:b2:23:ca:01:85:0c:b1:2d:ee:43:12:c7:1b:8b:95:
25:8c:39:1a:b8:e3:11:22:30:39:95:ef:eb:f0:83:88:a2:55:
f5:1f:4a:91:b7:68:6d:42:2c:f2:f2:51:bf:8e:c0:e8:42:88:
a1:9c:56:ee:57:0e:53:fd:40:67:c5:07:b6:9a:be:f5:5e:c6:
36:d2:5c:11:89:41:6d:01:ac:5e:ca:2d:7e:b0:e4:57:f3:1d:
e1:d1:a5:ae:80:f0:3e:d7:9d:a3:24:9a:d7:da:ba:04:16:32:
ff:87:bb:de:f8:4f:75:f8:36:84:93:ea:8b:7b:06:b9:1c:2d:
d9:1d:7c:d7:d5:f8:c5:62:da:75:9a:f0:df:20:b7:5d:6e:3e:
12:8b:87:47:67:0f:5e:b3:d7:8e:0a:30:43:95:8a:72:51:67:
a2:ec:c5:10:65:a1:de:3c:68:25:d7:4c:d7:63:90:ff:0b:99:
2a:64:6c:a7:b2:3b:89:d1:cc:fd:62:4e:2d:4f:5a:83:59:f4:
8e:aa:74:2a:a4:d1:ca:af:2a:76:d9:49:cc:61:b7:05:98:75:
a3:7b:00:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:08:18 2025 by rpki-client