Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.mft
File: 9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.mft (raw, json)
Hash identifier: 1dRFVhZVpdVXqRG19wg3gbYk+mRpHME9yXv+U2562IE=
Subject key identifier: 10:A2:6D:4B:B3:78:9C:24:5F:B7:54:55:F6:F3:9E:A1:75:8F:E2:48
Authority key identifier: F4:3B:F9:08:08:AE:7E:CA:06:3F:74:6A:8F:1D:88:86:57:34:C8:A3
Certificate issuer: /CN=f43bf90808ae7eca063f746a8f1d88865734c8a3
Certificate serial: 0196AF56B6808CF7ECB28586A61528D186A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.mft
Manifest number: 1544
Signing time: Thu 08 May 2025 10:00:17 +0000
Manifest this update: Thu 08 May 2025 10:00:17 +0000
Manifest next update: Fri 09 May 2025 10:00:17 +0000
Files and hashes: 1: 9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.crl (hash: hTjoHhflFOXCFz1j4RabpCeelYY+xgfFPjB6VlgXMpc=)
2: Zqhawmvx23zJzUEL4tKSqxl0sF0.roa (hash: eSAhW4RnAw7ADORjlu0cqCQYDrohrcWD+tFP2jcz56I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:56:b6:80:8c:f7:ec:b2:85:86:a6:15:28:d1:86:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f43bf90808ae7eca063f746a8f1d88865734c8a3
Validity
Not Before: May 8 10:00:17 2025 GMT
Not After : May 9 10:00:17 2025 GMT
Subject: CN=10a26d4bb3789c245fb75455f6f39ea1758fe248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9d:b6:10:59:4c:0c:c3:4a:4a:ed:c3:51:25:
06:1e:a6:0f:2d:ad:a7:fe:b7:9d:11:62:ca:19:2b:
48:72:6b:1a:2e:0c:f7:bf:48:cf:b1:fa:94:ba:10:
ab:13:db:f0:fe:67:fb:57:ac:2f:84:43:73:4d:de:
66:8a:a8:aa:df:a0:44:d1:83:88:36:f8:e2:30:ca:
6e:b0:45:54:b2:c8:f8:36:4f:44:ed:d2:c4:f8:21:
02:76:57:d7:d1:97:58:9c:58:f6:6b:ae:35:74:20:
80:dd:9c:eb:e0:38:9f:69:41:15:48:17:c0:d5:c3:
19:2a:dd:68:ed:1b:27:65:8c:b6:3b:8e:42:7b:e7:
61:77:0c:4f:6c:29:ec:7f:e9:4d:8d:5c:5b:cf:9a:
35:ff:e6:60:e4:0f:8b:f1:94:e1:af:b3:ee:d2:49:
56:56:67:64:1b:79:0b:63:e1:f2:0c:e6:af:09:6e:
fa:ed:67:92:31:1d:ab:f4:8f:0e:e5:41:15:45:bb:
f1:90:b0:6f:cd:1e:5c:0e:11:f0:61:81:87:d5:d4:
e3:e5:0c:12:16:3f:bc:23:a8:1a:b7:72:84:69:b4:
00:67:39:12:43:b7:ee:fb:ba:8e:ac:73:ca:dc:3b:
08:02:da:3e:77:3a:7b:63:f1:ea:75:c2:c4:0a:c8:
58:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:A2:6D:4B:B3:78:9C:24:5F:B7:54:55:F6:F3:9E:A1:75:8F:E2:48
X509v3 Authority Key Identifier:
keyid:F4:3B:F9:08:08:AE:7E:CA:06:3F:74:6A:8F:1D:88:86:57:34:C8:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:7f:26:a2:5c:72:d9:2e:0d:d3:45:b1:91:57:88:28:35:fa:
ab:ed:1d:ce:3f:05:30:e6:2c:1a:e4:96:87:c6:5b:f6:c3:d6:
0d:24:2b:ff:aa:26:26:69:b0:80:5e:ae:73:ec:31:df:5e:dd:
81:42:13:66:79:7d:60:70:f8:67:32:1a:85:b5:08:f7:95:f4:
2a:2c:eb:df:c7:bb:5f:57:79:bf:76:99:2c:5b:d1:51:bb:78:
25:92:f6:e2:bd:42:73:23:c5:08:81:a5:18:3f:c5:ef:7a:a1:
ce:a4:a5:e9:44:5e:af:c3:f7:c2:8e:2d:24:5c:d3:3a:4e:ae:
fd:ab:af:18:fd:f9:7e:6d:53:22:ac:c9:03:f7:43:f3:3a:1a:
52:19:b6:ea:49:c4:c1:44:3b:3e:89:5f:11:11:56:18:63:2f:
12:98:b2:ac:c5:68:97:21:a7:56:cd:b6:4d:89:63:76:d3:e9:
91:e7:60:a5:5d:2a:1d:9a:bd:02:9f:8f:a7:fa:94:c2:20:26:
2f:a7:dc:76:9c:72:14:66:89:5c:24:a6:5e:28:2f:01:c4:b1:
45:00:43:c6:9d:87:a6:8c:6b:bd:44:c4:bd:1c:3c:e4:f0:00:
55:cf:4d:a3:ae:ad:ee:52:0b:60:82:e4:f6:85:df:81:9a:2e:
4d:50:20:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 12:23:50 2025 by rpki-client