
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft
File: 9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft (raw, json)
Hash identifier: WDSDROlQLpmC1XMk/jRQD1Ud6uejCRJsb9Z7F2UYy4g=
Subject key identifier: 0F:FA:31:AC:22:53:C8:6F:27:CA:2A:52:1C:19:2F:56:E0:E6:D1:0A
Authority key identifier: F7:09:52:8B:88:28:B4:D8:26:35:5E:2C:52:23:7D:64:20:71:CD:54
Certificate issuer: /CN=f709528b8828b4d826355e2c52237d642071cd54
Certificate serial: 0196C5031632CF4E7174C9170CED99DAF091
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft
Manifest number: 051C
Signing time: Mon 12 May 2025 15:00:35 +0000
Manifest this update: Mon 12 May 2025 15:00:35 +0000
Manifest next update: Tue 13 May 2025 15:00:35 +0000
Files and hashes: 1: 9wlSi4gotNgmNV4sUiN9ZCBxzVQ.crl (hash: SmSCdSUsjav/93Nn+UQsOnEjmGW6KwGZ3gYY1GqPqlM=)
2: I5lxuXg8Kfbx7zXSiGma80fdzJ0.roa (hash: H4ThFxj2wgOGFGxz87hZLwfWFdZQqMGoVJJaZVtoaOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:03:16:32:cf:4e:71:74:c9:17:0c:ed:99:da:f0:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f709528b8828b4d826355e2c52237d642071cd54
Validity
Not Before: May 12 15:00:35 2025 GMT
Not After : May 13 15:00:35 2025 GMT
Subject: CN=0ffa31ac2253c86f27ca2a521c192f56e0e6d10a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:74:bb:c5:09:be:3f:3c:42:e4:11:11:ce:b6:
0e:5d:cc:f5:75:b7:13:ab:4a:ba:68:98:94:51:d4:
05:a7:78:62:b6:06:cc:e1:35:d6:38:29:02:7e:d6:
df:6a:3a:10:3e:ed:71:ae:4e:f9:47:5f:df:fe:30:
c8:ec:cb:71:3e:3d:d0:73:93:13:47:ea:a7:8e:69:
58:2d:f4:f5:4c:e5:80:1c:e2:ed:2e:38:f2:6f:c7:
c6:19:df:e5:f0:3c:57:b7:7d:b5:26:f9:ad:ca:a1:
ae:3c:83:18:a0:42:68:d6:b0:dc:d4:2f:e6:fa:9d:
ee:18:24:31:99:91:ec:24:6f:a1:7b:17:ec:df:cd:
08:5b:2b:9a:d5:d7:5e:5c:2b:16:e4:f2:ea:f2:48:
36:52:9c:d5:51:f7:79:a7:21:59:b6:52:a1:a7:15:
b4:08:1e:da:b7:68:92:4e:d7:ae:85:04:c1:91:16:
69:61:6e:42:24:b1:78:15:52:25:2c:88:19:41:ac:
d3:50:0c:fd:1a:a1:76:07:fd:d9:d5:83:9d:12:1a:
90:e0:8d:ef:71:d0:03:7f:75:4d:d1:03:fc:fe:c9:
69:75:85:09:72:c5:84:c3:e7:50:f3:8d:eb:cc:6b:
b1:66:4a:b7:04:c4:fe:c5:3a:1a:c4:88:33:87:c2:
e7:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:FA:31:AC:22:53:C8:6F:27:CA:2A:52:1C:19:2F:56:E0:E6:D1:0A
X509v3 Authority Key Identifier:
keyid:F7:09:52:8B:88:28:B4:D8:26:35:5E:2C:52:23:7D:64:20:71:CD:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:2b:e2:0b:34:e9:7e:35:ef:ed:7e:c5:44:d6:86:ab:c0:79:
8a:4e:a2:9e:17:f3:12:29:80:34:5d:31:f0:e6:3d:a1:03:5d:
93:bd:f1:cf:6b:bd:92:5a:b4:8a:80:5b:0b:a9:83:35:63:e0:
58:a3:ed:dd:8a:2a:65:88:2d:65:12:04:b7:15:53:d9:19:08:
f6:71:26:cf:b0:7e:96:36:14:7b:fe:02:fd:f0:89:bf:dd:f7:
2b:4c:ae:14:9f:8e:f6:4c:ef:c7:18:75:29:6e:d5:3c:ec:53:
d0:b2:73:65:52:ad:73:c4:2a:5b:0f:65:f1:f4:1c:40:35:e7:
af:7a:ec:3f:ff:46:74:37:ec:c8:d5:f9:5a:7c:e4:3d:f8:78:
33:5b:af:15:44:7b:2a:58:c7:91:27:94:53:85:b8:09:4b:97:
1f:d9:98:b9:83:60:1a:b5:c7:dd:f1:5f:a0:6a:78:f3:9a:7b:
21:fa:e7:79:17:a2:12:fe:b1:3e:6c:57:29:d5:6e:60:f4:dc:
c4:06:4f:f4:f2:6b:4e:62:80:6c:ad:54:3f:80:c9:2b:52:26:
64:d5:84:2b:67:3c:e4:46:ad:64:79:5b:57:f3:24:90:37:72:
56:cd:1f:68:50:3c:7d:4d:0f:3c:6f:27:4f:40:c7:51:fd:bf:
f7:c0:cc:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:16:49 2025 by rpki-client