Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/44cbb0-1aee-4490-ac52-c941e6a9139f/1/1-cJWdFvSc8kYauKWNoohF9PSytk.mft
File: 1-cJWdFvSc8kYauKWNoohF9PSytk.mft (raw, json)
Hash identifier: CarWPyvoJ32zKluXk18jVxYMrNE5oBfuWOPMNOC71KA=
Subject key identifier: 9F:9C:12:D2:38:3D:C1:36:66:9A:57:6B:05:8C:50:B5:11:4E:88:EC
Authority key identifier: F9:C2:56:74:5B:D2:73:C9:18:6A:E2:96:36:8A:21:17:D3:D2:CA:D9
Certificate issuer: /CN=f9c256745bd273c9186ae296368a2117d3d2cad9
Certificate serial: 0196B17C248ACB73C819570451B026D6D197
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cJWdFvSc8kYauKWNoohF9PSytk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/44cbb0-1aee-4490-ac52-c941e6a9139f/1/1-cJWdFvSc8kYauKWNoohF9PSytk.mft
Manifest number: 0B01
Signing time: Thu 08 May 2025 20:00:25 +0000
Manifest this update: Thu 08 May 2025 20:00:25 +0000
Manifest next update: Fri 09 May 2025 20:00:25 +0000
Files and hashes: 1: 1-cJWdFvSc8kYauKWNoohF9PSytk.crl (hash: +iRf6++xEiarMylIg5BxDEUz3zsbixtt4vscr+3inM8=)
2: N0McjdXZl5TUnCSac35uIbLCfTQ.roa (hash: 3oYd1qltvihRo6bFoxlQSV7suemsf1IDfXlwXxFseIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/44cbb0-1aee-4490-ac52-c941e6a9139f/1/1-cJWdFvSc8kYauKWNoohF9PSytk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/44cbb0-1aee-4490-ac52-c941e6a9139f/1/1-cJWdFvSc8kYauKWNoohF9PSytk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-cJWdFvSc8kYauKWNoohF9PSytk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b1:7c:24:8a:cb:73:c8:19:57:04:51:b0:26:d6:d1:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9c256745bd273c9186ae296368a2117d3d2cad9
Validity
Not Before: May 8 20:00:25 2025 GMT
Not After : May 9 20:00:25 2025 GMT
Subject: CN=9f9c12d2383dc136669a576b058c50b5114e88ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3f:3e:83:40:b8:3c:90:37:3a:a1:52:19:66:
b9:21:f9:ba:05:8c:00:5d:75:d0:c8:ff:a2:52:aa:
27:d4:14:1a:93:fd:dd:80:ee:5f:3b:75:65:fe:d9:
d5:54:ec:59:00:23:9e:1a:1a:81:1a:e5:b5:8d:a4:
37:e6:b9:6a:8b:eb:68:de:7e:52:7d:f1:c6:48:8c:
cd:39:12:df:6d:33:30:c4:ab:ef:e4:2a:02:f8:ca:
b0:86:48:af:f3:5a:ea:6a:07:be:25:84:a5:fe:89:
55:76:0b:6d:2e:d6:4d:e9:cf:ae:d7:57:fb:a7:e3:
fc:9e:5d:6e:34:83:3a:3e:9b:c5:8c:aa:23:f8:85:
fe:73:ac:6b:5a:50:04:61:21:ba:61:f1:43:10:de:
7b:fa:95:86:b5:00:ed:9a:17:99:01:3e:e0:5b:c1:
cc:f1:55:e8:7e:2f:2e:fe:1d:a6:0b:6d:43:01:e6:
9f:15:71:37:d6:18:cb:95:53:15:6d:c8:e1:0e:e1:
7f:d2:a7:f1:d5:53:e1:63:6f:f3:92:69:e6:fc:3f:
60:1c:44:b2:cc:81:9d:4d:88:42:a4:f5:cc:d8:fb:
8d:e9:aa:9c:a8:48:78:ae:40:b9:98:e7:1d:2d:3a:
c0:f8:01:c1:c9:8c:e5:b1:1c:70:91:fc:d5:4d:e5:
bf:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:9C:12:D2:38:3D:C1:36:66:9A:57:6B:05:8C:50:B5:11:4E:88:EC
X509v3 Authority Key Identifier:
keyid:F9:C2:56:74:5B:D2:73:C9:18:6A:E2:96:36:8A:21:17:D3:D2:CA:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cJWdFvSc8kYauKWNoohF9PSytk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/44cbb0-1aee-4490-ac52-c941e6a9139f/1/1-cJWdFvSc8kYauKWNoohF9PSytk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/44cbb0-1aee-4490-ac52-c941e6a9139f/1/1-cJWdFvSc8kYauKWNoohF9PSytk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:1e:74:2b:f0:13:e4:85:be:67:59:cc:34:9d:ba:d5:d8:df:
eb:de:80:de:a3:12:75:eb:67:bb:06:7c:9c:fe:da:65:06:72:
66:51:28:77:37:9d:d0:c6:21:da:44:78:10:07:34:f4:27:af:
80:cf:7b:63:4a:23:74:1f:7a:bd:e7:68:3a:7d:61:69:91:fa:
db:df:06:b7:6b:23:cc:d0:f7:e5:5f:68:ed:fa:ee:63:90:5d:
90:8c:eb:17:cc:8e:2e:f1:30:d8:e3:2c:5c:74:bd:81:45:34:
72:74:3e:23:c9:4c:12:14:63:b1:6f:35:f4:70:aa:6d:97:9b:
0a:1f:d8:d8:48:e2:aa:8f:8f:b8:3e:84:80:b6:09:a7:3b:98:
01:4f:c2:49:bd:4e:7d:7a:1d:13:fe:48:62:e8:68:0b:cc:55:
23:31:cd:e5:4b:87:b0:be:7c:5f:3c:9b:0e:c7:92:52:a9:ac:
4e:58:9b:66:d6:b7:ed:fc:29:30:66:c5:ed:d8:73:0b:9a:b9:
20:29:c0:d1:9d:c7:fb:50:e4:7f:a0:b4:61:6c:03:ee:c2:e2:
e4:5f:1a:f2:42:4d:e3:2b:5c:2c:ff:b1:bd:b1:5b:b8:c9:c6:
e9:8e:94:37:f0:c1:c1:8f:47:de:4a:7a:07:a6:26:2c:55:3e:
20:2d:9c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:45:56 2025 by rpki-client