Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft
File: 9ssMjyCEMwIDT2NlbqKevW0RY6o.mft (raw, json)
Hash identifier: KtVQLbm9bb7nqEadweYcYoMQHP5OQUgDmsfTWVGRo7Q=
Subject key identifier: E3:C6:3C:02:12:74:B6:CE:0B:00:8A:20:70:6D:D9:20:2F:21:6B:65
Authority key identifier: F6:CB:0C:8F:20:84:33:02:03:4F:63:65:6E:A2:9E:BD:6D:11:63:AA
Certificate issuer: /CN=f6cb0c8f20843302034f63656ea29ebd6d1163aa
Certificate serial: 0196C0B8A11D71CDA8FBBB5CED4A5B843F13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ssMjyCEMwIDT2NlbqKevW0RY6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft
Manifest number: 0E1D
Signing time: Sun 11 May 2025 19:00:47 +0000
Manifest this update: Sun 11 May 2025 19:00:47 +0000
Manifest next update: Mon 12 May 2025 19:00:47 +0000
Files and hashes: 1: 9ssMjyCEMwIDT2NlbqKevW0RY6o.crl (hash: 8kLI9H9qpP9I7HujHsATgQAiK0Izj/SaIaVihhvpgXw=)
2: OpJ_uz4hg9WS1uTnKXn75qGvb3w.roa (hash: zJt7hWD6hoBRKS4g5AHeuYKclEqIASb0N8YkICHekl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ssMjyCEMwIDT2NlbqKevW0RY6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:b8:a1:1d:71:cd:a8:fb:bb:5c:ed:4a:5b:84:3f:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6cb0c8f20843302034f63656ea29ebd6d1163aa
Validity
Not Before: May 11 19:00:47 2025 GMT
Not After : May 12 19:00:47 2025 GMT
Subject: CN=e3c63c021274b6ce0b008a20706dd9202f216b65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:af:dc:5c:11:79:73:a7:c6:55:9a:3b:a0:b5:
9b:a3:88:d8:3b:a3:ae:63:df:cf:e4:6b:35:d2:33:
53:ee:8f:67:3d:ab:cd:9a:79:b1:b8:ed:5b:e7:08:
00:e7:7f:db:20:05:98:bb:c4:21:24:0c:a5:a9:d6:
46:de:72:0d:64:69:a3:6c:37:5f:a2:b8:c8:af:e2:
df:25:78:fb:77:10:51:86:61:cc:8b:5c:ae:cb:27:
16:04:e7:7f:2a:48:1b:3d:f5:2a:4e:d6:73:99:e1:
2e:50:a5:00:11:cd:dd:18:fa:4c:86:d6:c8:cb:7e:
7e:78:7b:2c:88:78:53:c7:b9:c2:63:23:11:0b:9a:
c9:ee:b7:23:6b:67:48:07:62:b4:a1:c4:7d:05:4e:
05:aa:4e:03:f3:b9:34:93:09:d6:5f:b0:11:aa:e2:
5f:1b:d9:5d:5b:e3:82:6e:cd:92:4e:66:42:96:05:
dc:ed:67:99:05:34:4b:3b:9b:a2:97:bc:41:53:b7:
71:66:14:5b:34:26:f2:ad:69:05:27:4a:d6:b5:72:
fd:25:30:ca:25:e7:f3:48:41:a7:bc:56:d6:54:21:
39:16:49:98:eb:c6:4f:60:52:e6:6b:0c:e3:89:99:
8d:55:68:50:d3:3d:a4:8d:e3:13:19:8a:20:2c:0d:
b2:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:C6:3C:02:12:74:B6:CE:0B:00:8A:20:70:6D:D9:20:2F:21:6B:65
X509v3 Authority Key Identifier:
keyid:F6:CB:0C:8F:20:84:33:02:03:4F:63:65:6E:A2:9E:BD:6D:11:63:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ssMjyCEMwIDT2NlbqKevW0RY6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:06:63:2a:35:96:83:f6:53:54:9b:6b:e4:f1:78:e9:7e:73:
4e:6b:ef:c5:ef:fc:8d:76:81:83:6c:7d:f5:4e:4f:57:17:02:
a8:6d:b0:5a:2c:22:4d:ea:b9:b8:b9:25:04:ed:5d:b8:fd:d1:
ac:92:8a:78:b7:03:40:e7:6e:ab:eb:9e:36:38:b6:c7:a2:8c:
67:30:78:87:fe:f9:29:9d:5d:22:c9:cf:a7:04:f8:14:9f:10:
2a:21:2e:a5:47:fd:92:ac:25:0e:72:fb:c8:15:ce:87:d5:4c:
37:48:a6:e5:17:77:99:7f:d6:56:6d:83:de:f8:3e:5a:e4:2f:
78:c2:a5:d4:19:51:c4:63:eb:62:47:27:28:ff:6a:91:bc:0d:
a3:7a:96:17:26:6f:64:a3:84:fd:14:8c:7f:f4:b6:12:8e:e3:
6b:f9:f3:ed:d6:d7:d9:6e:9d:9e:a4:9a:c5:ac:ba:6d:cc:d3:
76:ee:bc:20:aa:68:96:b8:1f:db:1d:af:2d:ea:37:2c:5f:bf:
a9:cb:3d:6c:9e:01:2f:ab:d5:79:d1:91:f8:f5:ab:5e:56:0d:
23:1a:95:11:8b:c8:87:65:20:e0:66:03:33:32:1d:47:43:55:
fe:95:3a:6e:76:63:bb:7f:66:ac:8d:c2:69:56:96:1a:5d:1e:
86:06:12:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 23:03:51 2025 by rpki-client