Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
File: p9ha3isNTsHKCSqOJwPBkgDHLzI.mft (raw, json)
Hash identifier: Zd1e79tcJ5tU+QcT3QRHBKsdTvbvwxJH6grKrhwjImM=
Subject key identifier: 89:73:EF:50:03:46:2D:83:7B:4C:F0:0C:87:0C:BF:05:2F:8E:BC:28
Authority key identifier: A7:D8:5A:DE:2B:0D:4E:C1:CA:09:2A:8E:27:03:C1:92:00:C7:2F:32
Certificate issuer: /CN=a7d85ade2b0d4ec1ca092a8e2703c19200c72f32
Certificate serial: 0196A0F64A68698701312CA2103BF1AD199B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
Manifest number: 0D96
Signing time: Mon 05 May 2025 15:00:17 +0000
Manifest this update: Mon 05 May 2025 15:00:17 +0000
Manifest next update: Tue 06 May 2025 15:00:17 +0000
Files and hashes: 1: UFy4W10oicxgmbeQ9Qsjx3EgCQo.roa (hash: duZf8h2S3aFjJNNyhBun9TsZgrWqDeY96HLWVCbzObE=)
2: V78L3J5oIjHVBChvXIOgu9Ohs78.roa (hash: CdwTBRVREg2srUT+l5SA7LltUlSHpLsaVjkjqAH9C7o=)
3: p9ha3isNTsHKCSqOJwPBkgDHLzI.crl (hash: CyGnjJJZb/6NfiHC2xdxmtJzp6PipNfdvXMdsZAR3Zo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:f6:4a:68:69:87:01:31:2c:a2:10:3b:f1:ad:19:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7d85ade2b0d4ec1ca092a8e2703c19200c72f32
Validity
Not Before: May 5 15:00:17 2025 GMT
Not After : May 6 15:00:17 2025 GMT
Subject: CN=8973ef5003462d837b4cf00c870cbf052f8ebc28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c9:8a:83:41:3e:7a:68:23:a5:2f:87:7d:2f:
f8:b1:c6:a0:1c:e9:c2:0e:35:2a:11:e6:22:96:57:
41:cb:67:84:f2:dd:0a:a1:ab:f2:30:bc:bb:81:83:
91:84:0e:a7:be:c1:5d:45:79:13:89:55:b8:8b:09:
38:31:13:98:13:4d:73:36:32:cb:75:13:2a:a6:f8:
0d:9d:27:fe:3c:ad:2f:6f:b2:7f:f5:ac:49:7b:a5:
9a:50:01:8a:18:7e:63:50:68:d7:e0:bd:2c:7a:47:
9e:0f:20:2b:0c:f5:0c:54:3d:84:7f:71:35:0e:0c:
27:7d:8a:8c:7d:95:25:b8:e1:c5:81:0f:76:4e:d2:
c5:85:9a:c2:1d:8e:78:27:aa:e2:b4:3b:7e:40:26:
d1:61:0d:97:56:1d:75:69:11:c0:31:9b:30:85:f0:
c7:5c:52:b1:9c:1b:a0:5d:d9:06:4b:bf:28:19:a2:
bb:ae:4b:91:31:0b:0d:90:20:c8:04:11:b0:8a:b4:
d1:e0:82:51:32:52:e1:7f:bf:ea:4e:54:ac:f3:ee:
62:14:59:f7:55:b8:9d:20:1f:01:d7:57:06:14:6a:
0c:d8:a4:8b:b3:2b:4f:81:27:c2:2d:5d:d9:8f:65:
53:b5:f2:f4:74:b7:b9:86:03:1b:d2:39:77:91:bf:
2f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:73:EF:50:03:46:2D:83:7B:4C:F0:0C:87:0C:BF:05:2F:8E:BC:28
X509v3 Authority Key Identifier:
keyid:A7:D8:5A:DE:2B:0D:4E:C1:CA:09:2A:8E:27:03:C1:92:00:C7:2F:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:00:27:95:c8:d4:e1:2f:a0:3a:fc:47:8e:fe:fa:8f:20:84:
26:48:d2:0c:e7:a7:11:68:bd:27:7e:5d:7c:84:ea:e3:41:3f:
48:28:ec:cc:2a:10:78:90:ab:a3:14:d8:fd:14:fe:3e:d2:20:
ba:f0:c6:7e:6b:4f:c3:70:2b:0f:65:38:6e:63:73:cf:b7:b6:
11:3d:b5:f1:07:57:be:63:cd:72:f7:de:2f:0b:34:7e:fa:fc:
e6:73:6a:2c:91:f1:c9:0e:cb:80:4f:29:0d:85:6f:5e:0a:d0:
f3:7e:64:d9:4d:c2:94:0e:af:93:ca:d8:b2:8a:03:5a:e2:c7:
c7:ac:f2:81:a7:c6:6d:6c:97:b7:71:c2:dd:d9:95:b6:2c:4b:
91:7c:25:79:da:12:e5:3a:e8:14:5b:bb:d0:6f:41:19:fb:44:
a4:c8:29:98:ea:77:06:ad:21:73:dc:00:eb:41:98:e3:7f:14:
6d:fb:4c:be:f6:3c:93:13:64:07:3a:9c:2b:05:11:03:21:a9:
64:f5:ef:19:dd:af:48:09:70:cd:58:61:ed:cd:52:5b:76:0a:
8a:a8:bc:d3:b0:df:2c:4e:a6:51:c9:5e:c0:2f:33:87:8f:6b:
dc:9d:a6:90:0b:6c:e8:9d:89:2f:84:4d:c6:a9:ad:0f:3b:db:
69:ef:07:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 17:52:42 2025 by rpki-client