Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.mft
File: 9C0MrQ6u0aYfR4-wkZx6QyJyRpU.mft (raw, json)
Hash identifier: UPa6B5yyJpLhmM9wWgXycO9bn1WBLmoiDEfBywTls9c=
Subject key identifier: A3:F9:88:C9:DA:2F:E6:9B:48:B2:D4:20:23:6B:4D:32:38:FA:4A:0A
Authority key identifier: F4:2D:0C:AD:0E:AE:D1:A6:1F:47:8F:B0:91:9C:7A:43:22:72:46:95
Certificate issuer: /CN=f42d0cad0eaed1a61f478fb0919c7a4322724695
Certificate serial: 0196BFA5967407FEA950A24B0CA3D0E4E8B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.mft
Manifest number: 0A69
Signing time: Sun 11 May 2025 14:00:22 +0000
Manifest this update: Sun 11 May 2025 14:00:22 +0000
Manifest next update: Mon 12 May 2025 14:00:22 +0000
Files and hashes: 1: 9C0MrQ6u0aYfR4-wkZx6QyJyRpU.crl (hash: IZcyM5o3tGRfO8uLfAfb0lQ+n5+4VsCDIWgXfrjIByQ=)
2: BfiNOagjub-Q5UhmAEUO1BegvlM.roa (hash: z7UGbr4hGM96gAGkSVL5gy0uNjYzSjUeofOhu3xqo/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:a5:96:74:07:fe:a9:50:a2:4b:0c:a3:d0:e4:e8:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f42d0cad0eaed1a61f478fb0919c7a4322724695
Validity
Not Before: May 11 14:00:22 2025 GMT
Not After : May 12 14:00:22 2025 GMT
Subject: CN=a3f988c9da2fe69b48b2d420236b4d3238fa4a0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4a:08:c0:51:73:2e:08:8c:68:42:2d:97:b3:
1a:18:e4:88:fc:46:dc:ac:82:40:8f:93:34:ed:34:
64:28:01:73:31:3d:81:31:a6:34:96:5c:d8:c3:08:
be:32:6f:53:ae:bf:a2:b2:15:96:20:86:4f:99:fc:
56:33:75:ef:0a:43:3a:be:53:89:4d:eb:4a:77:a1:
01:90:d4:11:5e:fa:df:f2:e3:d2:9b:29:71:11:fb:
7e:30:ca:b8:eb:6f:a7:ed:20:5a:90:16:5b:3c:b7:
fb:00:6e:d0:79:4f:ba:31:24:cf:ed:f9:ca:f3:62:
34:a1:3c:08:2c:38:2f:ad:3a:79:c5:b1:35:16:84:
2e:dc:23:5b:2a:92:3a:d9:ce:31:04:5a:cb:10:7f:
57:7b:21:6a:16:44:09:8a:71:36:26:1c:6c:0c:32:
db:c9:ee:5d:02:ec:1f:18:43:1c:d3:a1:06:ae:b9:
d6:d4:07:c7:bd:7e:bb:3b:b4:b5:0a:ea:4f:fa:c6:
4c:df:e9:99:77:8b:a1:c4:e1:fa:4b:34:50:26:5b:
eb:df:cf:71:23:c2:dd:d9:19:ce:8b:8b:83:59:42:
9f:c7:35:c0:1c:ff:09:82:d6:5a:be:39:86:99:ce:
a8:bc:a0:68:40:40:a4:72:f4:34:57:11:e7:e1:62:
83:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:F9:88:C9:DA:2F:E6:9B:48:B2:D4:20:23:6B:4D:32:38:FA:4A:0A
X509v3 Authority Key Identifier:
keyid:F4:2D:0C:AD:0E:AE:D1:A6:1F:47:8F:B0:91:9C:7A:43:22:72:46:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:6c:55:95:ec:06:c7:46:27:d3:7c:b8:b0:a4:19:fa:d6:08:
91:2d:cd:ad:b4:05:fc:b3:ca:55:3b:24:2b:cb:81:61:bd:f3:
c0:03:74:37:71:ec:65:e5:eb:5c:b9:cf:ba:a8:1e:fe:cf:c2:
54:51:a6:92:ce:55:76:ad:9b:23:58:c5:01:10:9f:ef:a3:dc:
98:33:0b:7a:1b:d8:c9:48:1a:48:62:ff:af:2f:44:49:20:9d:
e1:31:9e:87:68:ed:a2:de:4f:e4:5c:29:d3:5c:27:9f:e1:53:
54:86:de:c3:2e:74:19:58:5a:16:83:2b:9b:80:17:97:78:eb:
c9:42:87:64:0b:2a:a3:c9:4b:5d:90:ff:15:73:6e:d6:97:fb:
bf:3c:04:d7:b7:89:1a:a4:ea:a7:97:58:89:69:c3:9e:2f:d5:
82:ad:e0:a5:bf:b2:46:79:f7:ee:9e:f4:3e:fd:1f:d5:ff:4e:
0a:c7:8b:48:1d:7e:bc:e2:c6:e1:91:77:34:9b:9b:91:5c:f8:
14:2b:0c:b3:f1:01:86:08:d9:fb:d1:b0:ec:d2:c5:72:ab:51:
77:eb:27:01:4a:68:e6:5c:ff:74:e1:09:82:68:75:75:52:96:
44:5d:14:a6:20:eb:27:9c:37:3a:80:9b:4b:ca:a6:0a:8f:3f:
f4:1c:85:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:48:28 2025 by rpki-client