Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
File: 9TFMH54Rk8ICXLZytSNXOXjSVNk.mft (raw, json)
Hash identifier: inQt219dCjbQemD6xkL26RU9BrrDGnrVsBl4W37R/nM=
Subject key identifier: EB:07:A7:E9:AB:A4:6B:58:00:B9:A2:43:4B:A1:73:21:B7:E8:E8:FE
Authority key identifier: F5:31:4C:1F:9E:11:93:C2:02:5C:B6:72:B5:23:57:39:78:D2:54:D9
Certificate issuer: /CN=f5314c1f9e1193c2025cb672b523573978d254d9
Certificate serial: 0196C796AB6BAB568171D87256ACB68705A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9TFMH54Rk8ICXLZytSNXOXjSVNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
Manifest number: 08A2
Signing time: Tue 13 May 2025 03:01:02 +0000
Manifest this update: Tue 13 May 2025 03:01:02 +0000
Manifest next update: Wed 14 May 2025 03:01:02 +0000
Files and hashes: 1: 9TFMH54Rk8ICXLZytSNXOXjSVNk.crl (hash: mPwjcVbrYdaiHeZIrB5ddhciZwR3HmwndQgmHUrxQfM=)
2: vnQYA6POl1a8tK2ZzQU1CNh2rSU.roa (hash: cwo0eDB9nxSSyKe/qdMpdoKv9t3e96TKN+bq+LM4mpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9TFMH54Rk8ICXLZytSNXOXjSVNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c7:96:ab:6b:ab:56:81:71:d8:72:56:ac:b6:87:05:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5314c1f9e1193c2025cb672b523573978d254d9
Validity
Not Before: May 13 03:01:02 2025 GMT
Not After : May 14 03:01:02 2025 GMT
Subject: CN=eb07a7e9aba46b5800b9a2434ba17321b7e8e8fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6b:ba:b5:35:08:eb:16:80:93:14:b6:89:0d:
89:3e:19:97:40:1b:55:e9:47:32:d4:35:a5:32:4f:
71:e2:58:da:4c:04:b9:9b:35:c7:23:06:6e:65:ce:
5d:91:ba:5f:99:98:7d:9a:98:2d:83:0e:3c:86:68:
14:83:7d:02:3b:2a:37:f0:09:d7:de:ad:1f:80:b3:
5d:25:6f:6c:3a:67:ff:ca:43:57:76:74:9c:23:b1:
bf:6a:ff:a1:25:c4:ca:dc:38:63:7f:6a:6a:79:41:
7b:39:1e:8f:fc:87:92:2a:8d:aa:60:ad:9b:e3:55:
0c:0a:01:ad:9d:92:bc:cb:b1:59:16:10:9c:20:75:
b4:91:13:48:97:62:99:49:ee:da:8c:86:4f:8b:71:
68:a6:56:26:12:37:b3:70:fe:a3:af:9a:1b:c6:ca:
f8:f3:ca:ae:d9:47:3d:cc:d4:9a:4f:be:be:49:e2:
57:f9:82:9c:77:ce:fc:41:6f:78:4b:0e:53:98:f3:
6d:14:96:e9:0b:4f:18:fe:c9:33:f7:14:60:9f:64:
ff:ea:63:52:2d:81:5e:7a:c4:32:b2:43:d4:26:3f:
65:d0:88:41:8e:cb:fc:39:8f:26:3a:cb:57:68:5e:
08:93:9e:b8:18:b5:9e:2b:5b:14:8f:56:5a:4b:13:
e4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:07:A7:E9:AB:A4:6B:58:00:B9:A2:43:4B:A1:73:21:B7:E8:E8:FE
X509v3 Authority Key Identifier:
keyid:F5:31:4C:1F:9E:11:93:C2:02:5C:B6:72:B5:23:57:39:78:D2:54:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TFMH54Rk8ICXLZytSNXOXjSVNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:52:65:49:04:ed:ce:e9:19:01:4f:51:80:df:04:d9:3d:32:
e7:90:ce:93:27:51:03:85:c1:ea:84:d8:ad:f2:79:7c:78:2e:
6c:97:d3:10:ef:68:14:23:f4:95:76:9b:aa:86:f2:8d:b7:f3:
81:eb:60:41:9d:1c:c5:90:ad:a5:3c:2b:49:a2:ca:88:b8:ab:
63:19:a3:51:e2:ff:8a:86:02:db:f5:d7:14:14:24:e9:9e:ce:
32:d8:4e:29:0e:3d:2f:e4:57:28:b0:0d:0f:d0:7f:57:ed:4f:
3e:e3:3b:3b:a0:3b:98:34:5a:fc:37:4c:18:b5:b1:2f:d6:37:
a7:c2:9d:43:cc:0e:46:d6:e9:57:a2:63:c1:b3:36:12:8a:f0:
a9:64:3d:e0:fe:f2:80:e7:d1:6c:3c:c5:92:6c:be:90:a6:a0:
e0:ac:85:f4:d5:d9:64:d1:ee:a0:cc:21:a0:d0:11:78:0c:55:
16:7f:be:05:16:44:dc:8a:ec:ae:8b:b8:be:2e:a9:6e:0c:fa:
00:5a:e0:c0:64:54:50:98:b0:9e:c7:d6:e6:17:38:ad:a7:a4:
22:88:d7:b6:07:10:cb:d5:18:9a:53:2f:31:5e:43:f8:cb:56:
f7:a5:d5:1d:9f:7c:ff:a5:ba:57:66:c5:07:3f:03:e3:c4:06:
92:fe:bf:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 06:35:04 2025 by rpki-client