Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft
File: A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft (raw, json)
Hash identifier: FKzHCHD8m+65IU5/Z82FsHTn/k+8BFDGSJM41uCfLR8=
Subject key identifier: 7B:E7:4E:4A:F1:85:85:5A:39:DA:4A:D0:30:09:3B:B1:C4:2A:6E:71
Authority key identifier: 03:D8:02:41:88:49:1A:31:9C:52:76:72:1F:94:0E:FA:E7:FC:21:AF
Certificate issuer: /CN=03d8024188491a319c5276721f940efae7fc21af
Certificate serial: 0196BF37960AD490BC7E8531205CA98FF832
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft
Manifest number: 1182
Signing time: Sun 11 May 2025 12:00:13 +0000
Manifest this update: Sun 11 May 2025 12:00:13 +0000
Manifest next update: Mon 12 May 2025 12:00:13 +0000
Files and hashes: 1: A9gCQYhJGjGcUnZyH5QO-uf8Ia8.crl (hash: w44TjadM8z5NAFH2YoNM3vRspkn19PQCdwk7FeBNeAs=)
2: PAFl-pG2JHaMz_7ipR6yMf63H8w.roa (hash: byy0wWUqy3xmET5bVuzwYGsa7Zk9Dk0kE6IQV8R/QgY=)
3: jZL5Xhdd_DQTPlseqK0seytctFM.roa (hash: iK3t86giIYaf8WbR2Oyl7XO/RS0ik8f6mwnnTPsecrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft
rsync://rpki.ripe.net/repository/DEFAULT/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:37:96:0a:d4:90:bc:7e:85:31:20:5c:a9:8f:f8:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03d8024188491a319c5276721f940efae7fc21af
Validity
Not Before: May 11 12:00:13 2025 GMT
Not After : May 12 12:00:13 2025 GMT
Subject: CN=7be74e4af185855a39da4ad030093bb1c42a6e71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:70:ff:c8:df:41:76:62:33:0c:2b:5e:2f:10:
39:c5:42:b7:5a:d5:29:2f:f2:77:3e:39:1e:89:30:
e9:54:1a:b6:32:1b:8f:ec:db:ba:52:e9:f5:b0:2f:
fe:ce:01:98:5e:84:fd:a3:cd:82:a3:c9:64:37:58:
15:86:f4:ab:18:a9:c1:23:7d:50:2d:17:25:8e:49:
9e:8d:59:4d:02:28:4d:71:42:3a:6d:ee:07:a4:5f:
c7:b7:ad:72:57:78:78:7f:da:cc:84:dd:e4:97:e8:
cf:80:ec:61:a9:32:05:c6:40:51:9e:40:2a:9a:b8:
2d:68:ef:1c:c3:47:3b:e7:b7:0a:7d:b7:93:d6:21:
16:43:82:58:96:e9:68:db:ec:4a:ae:4e:5e:bd:e3:
aa:50:6b:4f:4e:b0:b8:71:a5:cf:1e:c0:fa:94:b5:
3c:a6:0b:6d:48:f3:53:36:6b:63:77:68:33:f2:66:
26:df:30:e5:ab:45:8e:88:ad:47:0b:3d:34:23:08:
7b:f1:03:25:8a:0c:68:83:6b:08:7f:09:8f:64:7a:
e6:c4:25:16:d1:77:d9:5d:a4:07:c3:8d:02:2d:4d:
92:fa:a8:04:71:77:bf:ab:e5:81:ba:67:b6:ea:a2:
f9:ff:96:7f:3d:b5:17:42:97:54:58:75:cb:33:b6:
93:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:E7:4E:4A:F1:85:85:5A:39:DA:4A:D0:30:09:3B:B1:C4:2A:6E:71
X509v3 Authority Key Identifier:
keyid:03:D8:02:41:88:49:1A:31:9C:52:76:72:1F:94:0E:FA:E7:FC:21:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:10:1d:67:7b:6a:42:bd:6c:2e:6f:0b:84:9f:89:5f:59:46:
ad:8d:bb:bb:a3:0a:06:20:01:84:a6:55:de:a0:0f:22:40:28:
b6:2a:3e:49:65:5d:b9:c8:20:1c:80:e6:cd:2a:31:d7:a4:65:
a9:9b:01:c4:01:60:3b:3d:31:f4:89:96:c6:ce:fa:7b:78:d9:
a7:4a:b5:cb:a8:5a:63:a6:86:58:f6:2c:78:71:6f:f7:54:ee:
de:d2:50:47:ba:c6:ef:65:71:98:a4:4a:64:12:ce:f0:11:6a:
50:19:9e:df:bc:48:4e:92:59:d5:4e:90:8b:86:a6:1f:e6:88:
68:ca:9d:3c:6d:d7:33:96:6c:13:13:61:94:a1:e8:a0:07:3b:
68:64:ca:94:be:8c:f2:41:8f:02:bb:ad:57:f2:d4:ef:c3:92:
4e:36:df:43:1b:c8:66:e1:2d:44:e1:17:54:15:a9:1a:fd:40:
4d:08:ad:6d:6e:e2:0c:cb:1d:62:89:ad:98:a8:45:4d:ea:b9:
c1:a8:5d:3f:a4:cf:f3:b3:a7:ac:a6:52:b9:ba:e8:5b:93:5c:
1d:d7:78:e2:39:4a:1c:0d:75:fe:df:b7:96:9d:2a:67:e9:4c:
04:0b:59:46:85:29:41:14:a5:5e:e5:c0:70:b5:07:59:73:5d:
3c:a6:a6:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:09:48 2025 by rpki-client