Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/a9af0e-e91a-4f1c-b72c-1e2b1c87d317/1/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.mft
File: Cjn5oAJ45p0bPd2qC_DNF9LmZwg.mft (raw, json)
Hash identifier: yA7PG4WO12OfO29uvzG5IykRsaLcvsMgI1AK3EA/M4c=
Subject key identifier: 2E:2D:FA:1C:C4:E2:CD:D1:D8:F0:CF:04:59:E5:BC:E7:F8:F8:10:54
Authority key identifier: 0A:39:F9:A0:02:78:E6:9D:1B:3D:DD:AA:0B:F0:CD:17:D2:E6:67:08
Certificate issuer: /CN=0a39f9a00278e69d1b3dddaa0bf0cd17d2e66708
Certificate serial: 0196B2FC82BB5078BEE14033212487989C0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/a9af0e-e91a-4f1c-b72c-1e2b1c87d317/1/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.mft
Manifest number: 09AA
Signing time: Fri 09 May 2025 03:00:15 +0000
Manifest this update: Fri 09 May 2025 03:00:15 +0000
Manifest next update: Sat 10 May 2025 03:00:15 +0000
Files and hashes: 1: CjdcUk3MOW8Rqup07x2jVDEldW4.roa (hash: UaK7I7Eqw7jf6XsvMkrSjnKfCYZKST8b3TEli5jiSHk=)
2: Cjn5oAJ45p0bPd2qC_DNF9LmZwg.crl (hash: ZJmXcf7NXipq5jqUR3odD2WbLPiIMyPnMJfc//Cx1Z4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/a9af0e-e91a-4f1c-b72c-1e2b1c87d317/1/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/a9af0e-e91a-4f1c-b72c-1e2b1c87d317/1/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 03:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b2:fc:82:bb:50:78:be:e1:40:33:21:24:87:98:9c:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a39f9a00278e69d1b3dddaa0bf0cd17d2e66708
Validity
Not Before: May 9 03:00:15 2025 GMT
Not After : May 10 03:00:15 2025 GMT
Subject: CN=2e2dfa1cc4e2cdd1d8f0cf0459e5bce7f8f81054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b2:2b:f9:f7:50:28:c0:cc:6c:74:ce:73:bc:
97:37:94:d1:6a:16:99:8f:a5:0e:11:45:6f:da:9e:
50:4f:c5:48:8c:2e:ce:59:5e:45:c6:16:2a:ac:59:
63:43:23:3b:93:f3:1e:91:50:d6:96:75:20:49:ea:
77:f3:cb:2a:a6:ef:07:5e:59:0d:41:9a:3a:bc:73:
a6:b2:0e:11:e7:a0:ee:c3:19:03:c6:fb:a7:1e:87:
19:96:22:61:51:96:af:58:12:3a:08:34:5f:7c:95:
ad:d8:06:00:57:f2:96:a2:d6:fc:ba:7c:9b:f5:27:
d9:8a:0c:5b:77:f3:c2:f8:4a:87:be:26:9d:96:af:
c9:34:e9:c3:58:43:2d:e7:1d:4a:37:68:f3:cd:8c:
25:47:e6:e8:ca:fd:e8:00:04:31:90:c6:46:a0:e1:
ac:21:23:4c:42:be:13:00:fd:24:d5:3f:f9:26:08:
65:39:d8:ab:e4:e2:4f:9e:fe:8b:2e:d7:a0:93:be:
d8:df:f5:f4:b8:7d:dd:8e:fc:cf:fc:b0:94:b7:d3:
1f:92:ce:b4:0c:0b:1c:8f:2c:d3:96:48:be:69:2a:
8a:21:a2:fb:4f:1d:ca:6c:98:14:6b:ff:c7:a0:9f:
43:f6:46:f7:b9:82:92:f8:c7:83:43:fd:e7:9a:d5:
b7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:2D:FA:1C:C4:E2:CD:D1:D8:F0:CF:04:59:E5:BC:E7:F8:F8:10:54
X509v3 Authority Key Identifier:
keyid:0A:39:F9:A0:02:78:E6:9D:1B:3D:DD:AA:0B:F0:CD:17:D2:E6:67:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/a9af0e-e91a-4f1c-b72c-1e2b1c87d317/1/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/a9af0e-e91a-4f1c-b72c-1e2b1c87d317/1/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:1a:24:e5:65:dd:73:4b:30:16:b0:2c:ec:c6:a1:36:67:bb:
39:5c:e8:12:d6:ab:38:26:e0:7d:7a:c8:d6:61:e7:5d:6e:3e:
8f:f2:34:2d:ac:6f:ad:a4:6b:53:40:18:4b:15:a8:a0:a5:34:
aa:a0:e3:b1:ea:60:e5:55:40:d7:e6:b8:a7:d8:91:42:97:a9:
eb:04:2a:71:7e:83:42:95:aa:a2:db:0b:7a:96:ce:80:e6:2d:
6c:70:7b:5e:53:a1:d7:80:93:62:d6:0f:eb:1b:7e:62:c6:58:
ca:c9:28:06:a0:3b:91:b3:fc:63:74:95:2d:28:d0:28:3f:3e:
1a:bf:b9:94:44:da:d3:2b:ee:e3:f5:b5:ca:2f:8d:2f:09:88:
6a:cb:89:b2:9f:f5:6a:f1:1c:a9:24:07:97:32:12:d6:d2:54:
7c:19:db:a9:1a:3e:8f:a0:b8:a6:07:2e:15:0c:4b:b2:1c:7b:
e5:a8:c8:ba:67:0a:de:34:49:ff:b7:64:a5:07:b9:72:f7:35:
00:05:eb:36:af:ae:dd:c6:07:d1:7a:b0:af:d7:85:28:a6:5b:
54:f1:a3:ac:cb:56:95:66:2d:73:69:16:a0:e0:22:2c:5e:66:
5b:1d:dc:01:3f:a9:8d:c6:de:09:c2:52:46:aa:50:63:d9:a2:
d0:45:15:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:18:01 2025 by rpki-client