Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft
File: 9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft (raw, json)
Hash identifier: vnWJuOSX9ZQYVbGKW4WTuw3Adk+4zL4m8fjvbXURT0k=
Subject key identifier: 0A:F8:FA:82:30:56:D1:BF:07:62:95:CC:43:F9:B9:D7:D1:B6:35:2D
Authority key identifier: F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F
Certificate issuer: /CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f
Certificate serial: 0196B3336C42B610F0D4DB980B68AACD8F4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft
Manifest number: 0D47
Signing time: Fri 09 May 2025 04:00:13 +0000
Manifest this update: Fri 09 May 2025 04:00:13 +0000
Manifest next update: Sat 10 May 2025 04:00:13 +0000
Files and hashes: 1: 1-FnvQqT9mIqxipsRqFjYsNQSlBM.roa (hash: +uFY0K06aPvv+IH1erLogXQwEEO2k+DY8eNZLIXFHV4=)
2: 9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl (hash: XniSwfyq2USFh6oWe4Oq6+lnCrUCG4MQWrhu/LwwxaE=)
3: EpH20P4xP3V2g4vErHJO-EvTAVU.roa (hash: jeooPDRiBjDAUPoIXhITPTt2zTmHZ7KLWf5fCQG5sIo=)
4: S5ZKnLfz4DstONEqZm_YmyZ8kvY.roa (hash: X0rSxal4LbSgFqA0+FsHMQ78+/EIGLIojbhDJzOesXI=)
5: SI90qQvScrNKS-02paw66Vtte1g.roa (hash: CoRUrg+WB47FS25HKQ2HVa4e+itGukiRC6ZwlYviHec=)
6: VunL007YcgdB0SQwEVqZksZS8Fs.roa (hash: 216WPQB/uK03AqzN7nO6bEUvYIaYzP3vD9//CYpZtZI=)
7: mvmUvaM2JRysTq3IiKyyysU6GY8.roa (hash: dMiGawP2eEnw55fXqAakbpr7IIQ2Da7zAMRfk+xhjuE=)
8: xfkDaLGtqI9S0koDwH1ibKq86PQ.roa (hash: 9SMgRbgNtClui+eod+bviRGqIN366+5FDeHZRxM9wm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 04:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:33:6c:42:b6:10:f0:d4:db:98:0b:68:aa:cd:8f:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f
Validity
Not Before: May 9 04:00:13 2025 GMT
Not After : May 10 04:00:13 2025 GMT
Subject: CN=0af8fa823056d1bf076295cc43f9b9d7d1b6352d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:70:38:4a:e3:62:a1:0b:bf:58:98:73:a1:13:
bf:29:3a:b4:b5:c2:0b:9d:ee:7b:d4:b8:cb:35:b0:
32:e2:cf:c6:56:75:1d:6a:9d:1e:3a:79:9b:fe:98:
4e:38:3d:59:b1:cc:4e:62:11:1d:16:14:7f:ea:2d:
03:a3:d2:32:72:5e:86:80:b3:3d:e9:e6:12:a2:1c:
05:01:9e:19:95:4f:db:c6:00:bb:05:52:53:08:69:
a1:b6:48:90:a4:2a:3a:93:10:84:b9:fa:c7:3d:79:
0c:3e:57:42:8b:c9:ee:92:30:00:77:60:28:dd:e5:
f6:08:6c:bd:79:78:2e:8f:78:51:0b:f0:b4:7c:6c:
26:27:95:80:6a:e9:1b:47:6c:72:22:3e:0a:00:46:
6e:db:5d:12:54:e1:24:83:66:4a:ee:43:50:08:87:
56:72:eb:4a:1d:12:7e:14:af:c1:3f:a4:af:3e:29:
de:76:c0:b6:f9:dd:61:3a:89:ce:b0:b4:f2:fe:2b:
79:c5:9b:79:a5:4c:ba:f2:5b:7f:f0:20:61:aa:17:
c1:17:cb:fb:c5:52:a9:89:49:9a:e3:81:5b:71:8c:
cd:5d:ae:79:db:dd:e2:48:ed:66:69:29:82:b5:cd:
02:4d:1f:d2:02:de:21:d2:44:09:75:3f:57:c3:97:
0a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:F8:FA:82:30:56:D1:BF:07:62:95:CC:43:F9:B9:D7:D1:B6:35:2D
X509v3 Authority Key Identifier:
keyid:F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:6f:02:4b:99:98:06:ac:04:be:dd:a9:ca:0f:7f:b3:6d:a1:
31:4d:96:ff:a2:af:06:c7:91:c7:2c:8e:c1:fe:7f:21:16:a0:
19:19:46:12:af:a8:43:a7:dc:5d:31:69:55:7c:de:1d:38:14:
8b:ce:3a:13:84:8e:52:f7:df:e0:74:8e:81:52:e1:a9:06:15:
f2:12:28:c9:e3:ec:2c:2c:e0:b9:d1:4f:52:92:39:f2:dd:f6:
30:e8:c1:94:8f:3f:2e:02:80:cd:92:b1:c5:33:a9:01:f2:48:
2c:b5:e6:b4:ee:da:34:d6:a1:55:ad:03:67:50:bf:98:d1:82:
22:84:98:5d:b0:8c:89:88:9d:74:1f:13:7c:a7:1c:9f:8e:71:
27:c0:77:c3:c7:fb:10:07:b8:aa:b8:29:97:c7:f5:19:5d:6e:
4d:db:05:d3:05:2b:8c:ed:90:ed:53:8e:01:ef:1d:b0:62:cd:
3b:b3:fc:17:5e:68:fb:9d:4f:c1:c1:71:ad:b4:f0:f5:f4:2b:
58:c2:eb:f4:38:97:0f:c1:3f:c7:d2:91:0e:03:27:d8:3d:5f:
4f:68:64:b4:d0:8f:9c:20:6f:db:28:bd:ea:7a:6b:d4:08:42:
ab:52:21:2f:a0:9c:bc:c1:10:07:ce:1f:3d:1d:03:33:0e:82:
4f:a0:91:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 13:47:02 2025 by rpki-client