Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
File: 9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft (raw, json)
Hash identifier: 2KVMFgtjIjsBALu0XrwaGtPciC7WiYckG6nqCl/6PGI=
Subject key identifier: 75:B6:61:B0:A1:0F:4D:E8:29:0B:2A:5B:C2:97:ED:1A:89:19:5E:2B
Authority key identifier: F4:F6:7A:40:CF:5E:85:C2:D2:B6:55:8B:40:99:AF:12:5D:10:50:EE
Certificate issuer: /CN=f4f67a40cf5e85c2d2b6558b4099af125d1050ee
Certificate serial: 0196A0886342B3FCEF95F056EBB13D34FDC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
Manifest number: 06A0
Signing time: Mon 05 May 2025 13:00:14 +0000
Manifest this update: Mon 05 May 2025 13:00:14 +0000
Manifest next update: Tue 06 May 2025 13:00:14 +0000
Files and hashes: 1: 9PZ6QM9ehcLStlWLQJmvEl0QUO4.crl (hash: Oo1Gc7vy3FjD3C28/rJb4acdpI2iadLwgsaorkYRAzM=)
2: UDIr7Vq2PCUxH-_0XwBbpbKATWw.roa (hash: UYUs+F/DqN2VeFPscjP3XMb/LrOdKx6NTNq37FV037I=)
3: u0FRx2j9PY9XanBbcgTrVe_Co_s.roa (hash: 1340NaWcsmaESfpzP0gVpyoyLiK505bktgSP6n8xPII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:88:63:42:b3:fc:ef:95:f0:56:eb:b1:3d:34:fd:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f67a40cf5e85c2d2b6558b4099af125d1050ee
Validity
Not Before: May 5 13:00:14 2025 GMT
Not After : May 6 13:00:14 2025 GMT
Subject: CN=75b661b0a10f4de8290b2a5bc297ed1a89195e2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fb:64:06:d3:51:44:5b:fb:66:7e:21:f6:cb:
0d:e6:d9:07:12:8e:ba:db:b9:ae:cf:ec:3d:ff:58:
4a:45:66:ac:58:10:38:60:dc:67:8c:a3:44:41:77:
58:46:11:b6:54:56:23:de:4c:78:e7:a7:21:c9:5f:
d8:00:06:d4:5c:79:34:27:f6:a7:eb:ce:02:e4:a7:
d3:99:32:9e:26:6f:b0:7a:82:a7:46:cf:a5:11:2e:
6b:0b:38:74:6d:7e:b6:a5:0c:c4:02:1d:e7:f1:86:
13:bd:cd:a5:57:9a:f0:3f:25:19:59:8d:41:cb:5e:
c7:d4:d5:55:ba:fa:35:15:51:3b:66:83:fa:4d:52:
82:d0:b0:ed:76:e9:fc:ee:a5:f4:05:49:be:90:a4:
af:7d:79:33:bb:b7:6b:64:59:d2:7d:b5:49:f0:39:
a3:84:27:99:0d:11:21:d1:4c:cb:9e:17:50:7d:e1:
30:25:46:bb:f0:e4:b5:56:02:20:48:3a:07:79:95:
48:4f:20:2d:19:d5:df:c1:d6:a4:1b:e1:11:9a:3f:
b3:3f:da:6c:bc:95:b8:04:8d:c0:52:72:37:61:ab:
04:9b:84:86:12:34:c4:6a:80:29:84:72:7a:ac:d1:
39:bb:0d:f0:d1:e6:af:95:51:df:0e:a1:32:5b:7c:
fd:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:B6:61:B0:A1:0F:4D:E8:29:0B:2A:5B:C2:97:ED:1A:89:19:5E:2B
X509v3 Authority Key Identifier:
keyid:F4:F6:7A:40:CF:5E:85:C2:D2:B6:55:8B:40:99:AF:12:5D:10:50:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:f2:e6:ed:6a:1c:56:c9:a9:cb:96:a6:25:0d:05:d3:49:e4:
c8:b0:78:b3:22:19:68:d5:c6:8f:d9:ea:c0:16:5a:97:6c:0a:
f3:ec:da:1c:b5:b0:12:ae:c6:bb:d1:90:27:b0:4f:c4:b0:a2:
10:6e:e0:cf:23:f9:56:b8:ac:d7:90:92:23:62:3c:dc:58:7d:
d7:74:7b:2d:d1:f4:1c:57:7c:37:f6:ed:85:17:fb:91:2f:c0:
52:a4:de:9e:68:a8:b0:9a:da:ab:21:ba:64:0e:02:30:f1:4e:
fa:cc:c4:c1:96:82:09:09:ac:a5:d6:2d:03:c0:db:b7:8e:c3:
2f:55:b1:4d:b7:e4:6d:bf:2f:b7:aa:5c:ec:7a:e3:55:89:52:
39:72:8f:ac:10:88:71:a9:67:c4:74:9e:fc:40:25:39:0b:d3:
1b:91:d0:19:34:3b:c6:53:5c:19:43:39:4c:8b:ab:b9:ea:96:
04:d6:1a:1c:0e:f1:2c:56:e4:b2:45:d7:e2:46:fd:2e:fb:28:
f3:38:b9:8f:fb:93:3d:38:2b:fb:45:f9:2a:df:06:4c:58:20:
01:11:c9:f9:25:3d:cd:c1:ef:d7:f2:25:de:07:a6:2a:2d:6d:
37:09:51:bf:5b:54:6d:d2:d5:82:cf:87:bd:14:06:4e:55:e8:
00:aa:cc:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 17:50:19 2025 by rpki-client