Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
File: 9F55FBEwzuyFchX5u916Vbr0538.mft (raw, json)
Hash identifier: jtQYMHVfzCLkc9oTwsxuWeoTtpSCuO/ywOlJLLjAnsU=
Subject key identifier: 92:3D:C2:A5:B2:D9:5C:D4:A7:81:C5:4E:72:7E:AA:5C:04:C3:BD:12
Authority key identifier: F4:5E:79:14:11:30:CE:EC:85:72:15:F9:BB:DD:7A:55:BA:F4:E7:7F
Certificate issuer: /CN=f45e79141130ceec857215f9bbdd7a55baf4e77f
Certificate serial: 01964BFD6688129E01335036DAC213CD35AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
Manifest number: 0BC5
Signing time: Sat 19 Apr 2025 03:00:19 +0000
Manifest this update: Sat 19 Apr 2025 03:00:19 +0000
Manifest next update: Sun 20 Apr 2025 03:00:19 +0000
Files and hashes: 1: 9F55FBEwzuyFchX5u916Vbr0538.crl (hash: HyK+J17aKPokD+bWaW/dOcbNcWYhahuTcT5b5pvvl0Q=)
2: YyGPwu-_r-eFoNX2ZTx6n9Sl7sU.roa (hash: iag5NIeY+dB9ncpa+rQd04Kk2wb7pISvllYkBby24Kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 03:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:fd:66:88:12:9e:01:33:50:36:da:c2:13:cd:35:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f45e79141130ceec857215f9bbdd7a55baf4e77f
Validity
Not Before: Apr 19 03:00:19 2025 GMT
Not After : Apr 20 03:00:19 2025 GMT
Subject: CN=923dc2a5b2d95cd4a781c54e727eaa5c04c3bd12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:10:a4:ca:03:63:5d:7e:57:97:d2:eb:dc:f9:
b1:ad:72:34:15:7d:d6:bb:3c:85:7d:e8:37:99:c6:
28:67:48:6c:56:5f:1b:52:8e:01:99:56:a4:60:c1:
70:08:f8:59:c0:7f:d7:ed:f9:91:bd:af:66:45:92:
59:a0:f4:8c:81:41:37:5c:3b:09:fc:87:e5:62:7d:
ab:91:9c:24:c4:44:7f:a0:c6:75:d8:f5:d0:18:a8:
c4:41:da:50:b3:57:84:44:2f:38:c6:f3:d6:3e:45:
a8:c3:ef:2d:f4:b3:41:d6:40:40:19:7e:f8:72:b5:
39:f4:6b:a3:e7:cc:59:0e:fa:be:9a:5d:01:d7:b0:
60:30:5a:fa:e4:b0:6f:44:20:16:eb:11:cd:3e:c2:
77:a1:02:1d:ee:e4:0b:d3:43:ad:91:d8:45:f0:ed:
41:d5:5a:3a:a1:a2:d3:8c:2d:4b:c7:e3:54:e1:27:
7d:f9:0a:bc:78:0d:af:c9:69:c6:ac:94:85:9d:ec:
9e:f7:15:a5:d6:66:45:11:5b:44:9a:55:23:8d:a2:
7f:39:ca:77:b5:ea:70:5d:22:ea:bc:20:a0:ba:75:
18:05:e4:ef:f2:1c:f0:0b:c5:02:e8:73:5d:24:89:
ca:05:8c:09:ae:d4:6b:9f:8a:48:39:b4:d4:b6:0b:
66:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:3D:C2:A5:B2:D9:5C:D4:A7:81:C5:4E:72:7E:AA:5C:04:C3:BD:12
X509v3 Authority Key Identifier:
keyid:F4:5E:79:14:11:30:CE:EC:85:72:15:F9:BB:DD:7A:55:BA:F4:E7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:9b:5c:76:0b:df:b2:d2:1a:93:16:ce:bf:b8:79:d1:68:57:
e4:0c:63:80:c2:ff:40:f5:4a:cb:59:93:d8:de:65:06:b9:b6:
ab:df:6e:d9:fc:08:f1:7c:a4:c2:81:79:e2:02:24:55:00:f8:
62:fd:37:47:67:46:af:9b:36:77:34:06:25:a7:e7:64:f4:4d:
65:96:22:b3:5c:52:2a:52:36:5d:1d:00:dc:ba:14:e5:d2:56:
d0:98:c3:30:2c:e5:4d:ef:87:0e:3d:9a:a2:98:39:f2:36:17:
39:b9:f6:33:56:9e:db:34:42:1f:5d:5d:2d:47:5e:d4:fd:ba:
63:28:21:b7:46:38:73:d4:7a:44:38:bb:56:cc:43:9e:76:49:
44:26:d7:95:74:9c:6f:58:07:af:4b:a3:81:2a:c9:86:cf:26:
2b:2d:2f:14:8c:72:e5:52:9b:8f:3e:b9:57:16:c0:1a:cc:8a:
20:4d:ff:ea:e9:b1:0a:63:e8:32:34:33:74:10:1d:1f:08:44:
31:81:fd:eb:5f:c8:80:43:c7:df:81:1f:81:71:a1:fe:6a:3d:
47:56:64:f1:53:cf:46:c6:14:89:6a:19:a9:cb:17:11:82:5e:
06:96:25:e2:e7:a5:5b:13:27:41:47:d4:62:42:61:ae:04:34:
9b:a8:f5:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:00:34 2025 by rpki-client