Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.mft
File: 9PerRYfmkCLl4rwkEHtQHQMcNyA.mft (raw, json)
Hash identifier: hed0S8lHXrOOAHyucbmCNxv/qmWeAokNknenOnZBbsA=
Subject key identifier: F5:4E:24:EC:50:0E:C2:A5:0B:B9:8B:9D:41:AA:17:50:82:02:08:47
Authority key identifier: F4:F7:AB:45:87:E6:90:22:E5:E2:BC:24:10:7B:50:1D:03:1C:37:20
Certificate issuer: /CN=f4f7ab4587e69022e5e2bc24107b501d031c3720
Certificate serial: 0196BC000DDEBCECD50AD1EC78469BE8BED3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PerRYfmkCLl4rwkEHtQHQMcNyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.mft
Manifest number: 1536
Signing time: Sat 10 May 2025 21:00:42 +0000
Manifest this update: Sat 10 May 2025 21:00:42 +0000
Manifest next update: Sun 11 May 2025 21:00:42 +0000
Files and hashes: 1: 4uOHcGP0XRhUQP9FQOI9ooL1PSk.roa (hash: A3c3lK9eOK2+oXlJyN8L6YhZDvbwMKgjDORS3hJPEzI=)
2: 9PerRYfmkCLl4rwkEHtQHQMcNyA.crl (hash: MXV5JA9Nlz0bitMj2Wt9SjOm+VbwQXdcOnQQYvIGw1w=)
3: C-VlGkt4UijcXV6P3p4QA_nv8Uc.roa (hash: I6wlUhROKZbhSUVuQLxUOY2F8mo+U4zrTtPsYJyoX+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PerRYfmkCLl4rwkEHtQHQMcNyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 21:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:00:0d:de:bc:ec:d5:0a:d1:ec:78:46:9b:e8:be:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f7ab4587e69022e5e2bc24107b501d031c3720
Validity
Not Before: May 10 21:00:42 2025 GMT
Not After : May 11 21:00:42 2025 GMT
Subject: CN=f54e24ec500ec2a50bb98b9d41aa175082020847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:44:7c:e6:19:0f:ba:ff:99:39:c2:d8:75:ad:
19:ee:44:ee:7c:1e:3f:e5:21:3a:c5:3c:c1:a9:73:
28:7a:c4:6a:ce:c7:c2:66:73:fa:4a:1a:5d:56:ac:
27:16:e8:19:58:4f:2d:ae:ba:a6:1b:ff:8e:34:eb:
b7:9e:96:5f:cf:82:89:cf:d5:b2:96:bb:7c:05:96:
0c:1c:dd:14:6a:15:51:18:ad:6a:bf:c5:b7:c4:7a:
34:a3:72:ab:ae:29:e0:af:f4:ec:10:a2:71:d7:97:
1b:dd:f6:90:7a:a9:26:82:e1:98:a6:64:31:a0:f0:
8c:e2:4a:b0:73:8d:63:7d:1b:ee:98:f2:94:93:6e:
f6:ca:2a:ea:c8:68:41:b0:85:64:7f:17:a8:bd:1c:
23:b1:02:1d:23:85:88:8b:3a:50:5f:9c:5c:c7:2e:
b7:77:f6:00:4d:f8:28:de:70:2b:0d:42:b9:1c:01:
9d:fe:d9:b9:9f:04:fc:8a:e1:52:f7:04:fa:32:52:
23:62:bf:07:0c:f5:fd:5a:ae:de:23:e2:28:2c:4a:
43:ad:ba:35:aa:a3:66:54:c0:c5:c7:51:81:b6:68:
41:91:2d:8f:00:89:07:27:a3:88:ef:cf:4a:aa:b1:
e0:79:8f:10:4f:b1:4d:3e:2d:5f:3c:7e:71:23:26:
f9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:4E:24:EC:50:0E:C2:A5:0B:B9:8B:9D:41:AA:17:50:82:02:08:47
X509v3 Authority Key Identifier:
keyid:F4:F7:AB:45:87:E6:90:22:E5:E2:BC:24:10:7B:50:1D:03:1C:37:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PerRYfmkCLl4rwkEHtQHQMcNyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:e9:03:87:af:c1:8e:50:06:a2:ec:a8:38:12:d1:ef:a7:52:
ce:8d:a7:c6:da:c8:a8:1b:07:d1:fc:13:5d:80:e3:a7:de:c9:
34:13:c5:40:27:b1:f2:fc:4b:84:97:c2:6a:6e:d1:3b:af:fa:
54:51:83:fd:f6:bf:57:6d:bc:dd:9f:28:a8:ee:bf:bb:b4:af:
d1:28:02:dc:00:70:3e:d3:b4:a6:bf:ec:95:0e:09:57:3a:da:
49:13:c0:d9:ff:94:9d:ee:aa:7a:28:02:11:18:78:a6:e5:3e:
9d:d9:3e:06:41:cd:b8:ca:5a:95:a2:c6:e2:ca:2b:58:29:ed:
ce:a0:14:16:3f:b8:7e:dc:5d:95:ce:ff:d6:90:79:7f:28:fa:
c3:31:d5:2a:5a:0e:7a:22:b3:86:a0:82:10:d7:0a:27:2c:81:
9d:33:a3:7f:7c:0c:05:b2:5a:cc:92:a9:07:d8:3c:49:86:60:
e4:6d:3e:50:26:f9:6e:2b:ee:66:8f:1c:bb:5d:38:e5:30:19:
8e:4c:9e:60:98:91:d2:cb:e9:88:e7:ec:98:c6:40:97:1a:d5:
9c:62:a1:06:fe:63:f1:d4:f5:71:eb:87:c0:c3:54:97:f4:64:
a0:cd:8c:f0:35:5c:18:67:52:19:1e:cf:43:bf:f6:85:a7:b2:
43:f8:ab:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:39:05 2025 by rpki-client