Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
File: 9WdppC5EJm8Dfss5DUEV_r44YaQ.mft (raw, json)
Hash identifier: WIWWKTONOAMm1cNdkxWxowdkZQpDIl6XGX+AFEe2LX0=
Subject key identifier: 8E:9C:49:FC:AF:8F:06:18:25:62:E4:2C:3C:FA:D3:18:F9:30:59:3C
Authority key identifier: F5:67:69:A4:2E:44:26:6F:03:7E:CB:39:0D:41:15:FE:BE:38:61:A4
Certificate issuer: /CN=f56769a42e44266f037ecb390d4115febe3861a4
Certificate serial: 01965D2840527887565BBA029A2969F9ACEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
Manifest number: 1495
Signing time: Tue 22 Apr 2025 11:00:41 +0000
Manifest this update: Tue 22 Apr 2025 11:00:41 +0000
Manifest next update: Wed 23 Apr 2025 11:00:41 +0000
Files and hashes: 1: 6wW68rpEYT5imOHdAJC8iqYgH-8.roa (hash: 2OyXhc87+DnhsUi/Ak2VDrIMxn2fa0IaWGuzCLcLykQ=)
2: 9WdppC5EJm8Dfss5DUEV_r44YaQ.crl (hash: dY2EBxSoNHFgbhUPmYsDZgyWJA+BI1w/USwcEk7Fqjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 11:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:28:40:52:78:87:56:5b:ba:02:9a:29:69:f9:ac:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f56769a42e44266f037ecb390d4115febe3861a4
Validity
Not Before: Apr 22 11:00:41 2025 GMT
Not After : Apr 23 11:00:41 2025 GMT
Subject: CN=8e9c49fcaf8f06182562e42c3cfad318f930593c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:fa:db:4e:5c:a7:63:de:e6:51:52:ce:0d:65:
57:b6:05:5d:c3:50:1a:f6:b7:71:6a:11:3b:22:17:
64:24:5c:da:56:9e:42:4d:54:c2:4f:ac:93:d7:e6:
d5:48:33:44:1e:b2:83:5a:69:7d:21:bb:b4:d4:ab:
da:32:2a:61:72:56:5c:d7:e4:ee:bd:4d:34:81:99:
16:ea:38:e1:cf:0f:a3:e9:b6:36:4c:4b:d0:fa:1b:
d2:8c:d5:ce:07:7a:28:21:90:81:a3:c0:9b:c6:b5:
be:db:27:1c:0f:a9:e2:c0:ac:b5:29:51:4b:36:9b:
0b:8b:c0:79:47:f1:6f:23:c5:aa:d5:9b:69:92:dc:
e2:6c:de:8c:28:34:6d:98:84:32:3c:14:75:9c:4d:
94:ac:f7:41:de:c4:66:4d:30:6f:85:57:99:a8:b3:
7e:19:a1:70:8b:ad:5e:7b:8f:8c:ea:63:61:ec:b9:
d0:75:2f:9f:ea:66:3a:f7:5d:95:93:8e:1c:45:b7:
67:82:63:f4:91:5b:3a:19:7e:84:be:d2:f4:cd:b9:
1a:c4:ae:94:f4:e1:69:0e:2c:36:0b:6e:8e:8c:dc:
8f:85:1d:99:b0:dc:4f:6e:ba:a9:81:41:9e:0c:55:
f7:a6:30:1e:30:66:39:62:2a:94:d7:03:04:86:6b:
35:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:9C:49:FC:AF:8F:06:18:25:62:E4:2C:3C:FA:D3:18:F9:30:59:3C
X509v3 Authority Key Identifier:
keyid:F5:67:69:A4:2E:44:26:6F:03:7E:CB:39:0D:41:15:FE:BE:38:61:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:5e:88:4b:42:a2:9b:ff:4d:db:f9:c5:2a:2c:dd:c1:1c:3f:
55:ee:52:bd:1c:9f:61:f0:35:53:ee:20:b4:ee:c5:9e:ff:a4:
bc:4e:88:4a:96:9a:2c:2a:04:d1:01:07:ad:b7:f3:7b:1b:79:
ef:35:92:99:85:3a:64:a0:c5:bd:e3:13:48:72:aa:e0:c0:49:
ee:b4:ed:1c:84:a5:72:fc:ef:94:5c:29:b7:a6:9b:7d:68:f1:
3c:81:4d:0d:be:d5:00:e4:0f:ed:0e:16:d3:f6:08:9e:ce:72:
e8:6a:e7:86:74:0d:91:57:a4:b3:5f:43:f8:cc:cf:f2:c4:2d:
54:5c:a9:37:4a:c1:3f:e0:33:17:1a:e9:c9:e3:de:db:1c:fd:
0d:75:ad:c1:3d:32:ff:af:15:50:61:b2:c2:ee:bd:13:dc:d8:
b6:f2:25:60:bc:92:55:67:5a:70:88:11:42:36:55:c5:40:92:
05:c0:d6:e7:bb:ff:d1:1b:8e:d2:33:5a:91:90:87:1f:88:bc:
70:8c:8f:f4:69:8b:16:02:ac:62:7a:4a:18:b5:77:83:b6:30:
04:c6:29:72:72:d7:e2:9b:91:55:26:6f:ba:94:72:f0:8d:9e:
fa:cb:37:88:f5:86:1a:11:02:fe:14:3d:ba:04:23:a6:2b:28:
fa:a0:23:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:39:00 2025 by rpki-client