Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.mft
File: c_9LHL6vndddO17z7pp11XmfcoA.mft (raw, json)
Hash identifier: q44yPrR9rfB03IBxKOCEnyHmQif//0oDtUK7yPVgPrM=
Subject key identifier: 68:24:0E:B2:FF:57:17:38:C9:8B:2A:67:ED:D6:06:A4:8A:FD:9C:F6
Authority key identifier: 73:FF:4B:1C:BE:AF:9D:D7:5D:3B:5E:F3:EE:9A:75:D5:79:9F:72:80
Certificate issuer: /CN=73ff4b1cbeaf9dd75d3b5ef3ee9a75d5799f7280
Certificate serial: 0196C3147C346D992F292605FA3A92BBFD5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_9LHL6vndddO17z7pp11XmfcoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.mft
Manifest number: 0979
Signing time: Mon 12 May 2025 06:00:21 +0000
Manifest this update: Mon 12 May 2025 06:00:21 +0000
Manifest next update: Tue 13 May 2025 06:00:21 +0000
Files and hashes: 1: ag-XVm500Ink_y9Z543W0cYT2e4.roa (hash: LTklb1ptuKPn0530SuHC20oeHYTlb0YVhREmYDi0qn8=)
2: c_9LHL6vndddO17z7pp11XmfcoA.crl (hash: PeD+mBtNTK8jOOU6ELbrP+KReesy1M/TvB1G1k0KBhY=)
3: xqtuxbgfgKOQAXDLHhW5kYSASLM.roa (hash: Akx0xbIbgUFrWIKc+N3GbCju1aCG4ckavEzXznoEvO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/c_9LHL6vndddO17z7pp11XmfcoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 06:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:14:7c:34:6d:99:2f:29:26:05:fa:3a:92:bb:fd:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73ff4b1cbeaf9dd75d3b5ef3ee9a75d5799f7280
Validity
Not Before: May 12 06:00:21 2025 GMT
Not After : May 13 06:00:21 2025 GMT
Subject: CN=68240eb2ff571738c98b2a67edd606a48afd9cf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b7:4a:85:74:24:ba:0a:67:80:60:3f:17:64:
5a:5a:ac:fa:d3:16:cb:51:62:cd:d4:61:25:51:0c:
ed:a9:b0:31:51:ed:ef:76:8d:99:50:17:dc:31:dd:
90:f8:fa:2a:eb:a3:85:21:03:75:b9:b6:3d:dc:e8:
05:92:da:bf:03:03:84:7c:90:bf:f1:a7:a2:65:18:
59:fc:2d:01:6c:b2:9a:6f:a7:1e:95:b7:81:b3:31:
cb:d1:72:c5:44:3d:a8:22:70:76:c5:e1:94:2b:4d:
c9:e7:a4:a3:37:d7:bf:c1:41:e2:a8:94:01:1b:f6:
b5:24:c6:4c:fc:41:e1:90:6f:54:76:1d:78:b6:26:
0d:dd:72:49:e0:9b:f8:97:7c:4d:13:75:ed:c5:0c:
3e:f8:3b:a5:6c:dd:3c:c2:c7:f0:fe:ed:c6:c5:53:
01:1b:50:32:8e:1e:13:cc:a0:77:e2:2e:98:db:a3:
5a:ca:8c:2d:a9:13:27:00:3e:f9:eb:f3:09:99:b5:
b1:e2:45:d6:f1:fd:b1:29:d4:1c:bb:30:33:6f:41:
1c:80:be:fd:a4:1c:39:3f:92:55:77:df:6f:01:60:
ea:de:3f:1e:ac:1c:39:af:7b:12:55:57:d0:bd:a4:
44:bc:1b:13:76:a3:c9:1c:23:80:e3:49:e3:3f:7c:
3b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:24:0E:B2:FF:57:17:38:C9:8B:2A:67:ED:D6:06:A4:8A:FD:9C:F6
X509v3 Authority Key Identifier:
keyid:73:FF:4B:1C:BE:AF:9D:D7:5D:3B:5E:F3:EE:9A:75:D5:79:9F:72:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_9LHL6vndddO17z7pp11XmfcoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:bd:8b:86:16:09:a6:bf:bc:90:16:3c:5e:f3:e3:da:45:54:
15:0b:cf:42:f7:36:6f:c9:89:b6:74:0b:3c:e9:82:6d:04:85:
c5:c0:de:34:60:c4:03:de:b1:e9:1e:15:66:55:8f:34:c6:0d:
42:c6:38:a0:c5:fb:8c:ed:d9:58:9a:37:56:f0:3c:51:04:3b:
bc:83:48:c8:6b:be:45:1d:e0:85:c1:ea:ce:bf:dc:fc:5f:9a:
f9:4e:9e:43:a8:59:1f:35:80:11:45:92:f4:af:2e:a6:a0:6b:
83:20:42:b1:8b:2e:a5:7c:2a:95:01:16:4f:35:69:39:a9:3e:
de:2f:90:e0:92:69:e6:44:0d:d3:59:81:79:a8:58:2c:8d:a2:
48:50:ed:9b:97:b8:e1:f8:d8:ba:e2:3d:df:4e:f8:01:db:e1:
f7:93:96:24:bd:2a:f7:7d:b2:83:a5:cb:45:5d:52:3c:a6:c8:
15:f1:24:ca:0b:fa:7d:0a:3e:7e:cc:1c:e7:cc:58:53:30:18:
f0:fa:ea:9c:1c:05:7d:16:30:da:33:d3:ac:a1:17:7f:ac:7c:
45:5c:9f:2e:45:e1:ca:59:58:85:33:48:3b:2d:15:bd:46:7e:
25:c0:99:09:d4:27:59:9d:e4:71:97:a5:fd:dd:d1:8a:cc:08:
d9:e8:a6:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 13:33:16 2025 by rpki-client