Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
File: 9WsgSbOpqm8jaObutL_NFnlTpek.mft (raw, json)
Hash identifier: 8cTyI5SqByu0Z6tL40vFis/FsicNmaMDu4pZpylww9s=
Subject key identifier: 1A:91:58:F9:BB:24:3D:68:D5:D5:62:A1:98:9A:F4:F8:B5:F8:DC:4A
Authority key identifier: F5:6B:20:49:B3:A9:AA:6F:23:68:E6:EE:B4:BF:CD:16:79:53:A5:E9
Certificate issuer: /CN=f56b2049b3a9aa6f2368e6eeb4bfcd167953a5e9
Certificate serial: 0196B822E94EF920542EB48ACCF66BF8736F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
Manifest number: 1531
Signing time: Sat 10 May 2025 03:00:17 +0000
Manifest this update: Sat 10 May 2025 03:00:17 +0000
Manifest next update: Sun 11 May 2025 03:00:17 +0000
Files and hashes: 1: 1-Rgkx9BsEfikK5eKOgyodd6h4gY.roa (hash: CT7Rp9+Jw7zWR3AQw89KWuUkHEx7Im+IKlsSdQ20Nq8=)
2: 9WsgSbOpqm8jaObutL_NFnlTpek.crl (hash: J4vieKXlLCOJkIjOVW7umAMlYWRLIHxjUxeBhe/KVP4=)
3: JOUMaPpHTLs0B4CR5_freWlNIso.roa (hash: lQdFlW5I+9SlK8gtAYGtz3jqfCmzmwfXYR3qnMqPbFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:22:e9:4e:f9:20:54:2e:b4:8a:cc:f6:6b:f8:73:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f56b2049b3a9aa6f2368e6eeb4bfcd167953a5e9
Validity
Not Before: May 10 03:00:17 2025 GMT
Not After : May 11 03:00:17 2025 GMT
Subject: CN=1a9158f9bb243d68d5d562a1989af4f8b5f8dc4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e3:ac:01:79:f3:b0:1d:bc:88:94:cf:63:c2:
e9:2b:89:19:85:a9:c8:65:ba:11:dd:e9:0b:59:a5:
76:15:cf:49:57:13:22:98:fb:b3:d6:c5:a0:e0:07:
de:f0:ae:54:4d:31:ac:34:c1:cd:25:b8:2b:bb:c0:
b5:9d:a7:42:6c:25:7e:c0:60:2f:51:9c:35:59:6f:
37:a0:1b:0a:70:fe:9e:e4:35:59:1b:7a:af:b7:bd:
71:34:c7:4e:a3:90:94:04:f5:c7:5e:fb:02:7a:ac:
08:7f:37:30:66:65:d0:50:a1:a0:f9:f9:89:1f:81:
6d:af:e3:b0:d4:02:58:4f:1e:bc:f3:b8:13:27:f9:
da:6e:0d:dd:bb:67:b6:c1:e3:5b:8c:26:9b:0f:47:
ee:ec:f9:16:4c:07:e3:9d:6b:58:06:c2:9f:8a:1d:
8d:40:a4:3e:51:d7:dd:bb:04:52:d5:40:60:e5:00:
a5:8c:13:57:c3:db:1e:63:70:58:cd:58:f8:55:7d:
df:0e:2c:48:89:e5:79:f2:af:ef:f6:ae:8a:28:6f:
af:bf:91:ab:0e:d0:86:39:a1:3e:e5:6c:c9:84:76:
08:2c:ee:7a:fa:63:f4:47:b3:c6:a1:80:d9:95:d7:
34:a7:04:6a:65:b4:fc:64:ca:c1:09:2c:64:f1:ca:
3d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:91:58:F9:BB:24:3D:68:D5:D5:62:A1:98:9A:F4:F8:B5:F8:DC:4A
X509v3 Authority Key Identifier:
keyid:F5:6B:20:49:B3:A9:AA:6F:23:68:E6:EE:B4:BF:CD:16:79:53:A5:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:a8:5c:f4:97:50:c6:bf:c1:23:68:48:e6:3c:17:ce:65:82:
15:06:45:05:47:9a:f4:b1:43:eb:66:97:31:c4:63:37:06:67:
0d:3f:fe:26:f3:9f:c7:39:9e:79:42:38:99:0f:17:26:d1:cc:
8a:67:4a:aa:f2:27:a6:7e:a6:f0:1c:ec:77:5b:33:31:25:26:
fc:ea:a6:56:b0:eb:07:27:2a:5e:39:5c:39:d4:74:92:ec:8e:
5c:24:6c:c1:9c:4c:0a:fc:29:39:6c:ff:51:0e:ae:71:91:95:
10:c3:38:f3:93:fd:da:40:16:80:7b:91:f4:e2:73:d8:ca:c9:
1d:b6:61:8a:3a:53:c2:3e:8d:e3:0a:26:c2:3c:2b:52:a1:8a:
50:3b:26:34:df:9c:7a:78:9d:8c:d7:45:83:80:8d:27:b9:17:
f3:71:fa:a9:b7:d9:09:b2:4d:40:cb:d1:56:0e:bc:57:d7:90:
69:87:46:c2:2f:89:d3:bc:c8:0e:5b:62:19:53:6e:eb:83:87:
41:4a:81:c9:44:50:a3:09:ff:61:17:fd:3b:21:ef:34:61:27:
c8:d4:f5:05:9c:6d:13:9b:70:55:8d:59:b6:62:0d:df:ef:d1:
78:ef:43:9a:ef:29:2c:00:a9:73:7b:47:82:07:17:a7:b9:b4:
5d:b3:32:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 04:52:52 2025 by rpki-client