Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.mft
File: 25v841gk9uybXJ85qBFQzhYYEic.mft (raw, json)
Hash identifier: g9H1OIjqJCyROmmKLrrARVqnfhCYPrkZWptR8OXElnQ=
Subject key identifier: 2C:03:A9:86:2E:9A:C0:78:21:65:69:0A:05:61:1E:D7:30:11:4B:30
Authority key identifier: DB:9B:FC:E3:58:24:F6:EC:9B:5C:9F:39:A8:11:50:CE:16:18:12:27
Certificate issuer: /CN=db9bfce35824f6ec9b5c9f39a81150ce16181227
Certificate serial: 0196BFDC7A9D5E71F406F09D5FB1BCAB3E1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25v841gk9uybXJ85qBFQzhYYEic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.mft
Manifest number: 01B9
Signing time: Sun 11 May 2025 15:00:19 +0000
Manifest this update: Sun 11 May 2025 15:00:19 +0000
Manifest next update: Mon 12 May 2025 15:00:19 +0000
Files and hashes: 1: 0Bo64BgX0hylRoEuTO1mVFUAcSM.roa (hash: k/E5TUmiripioDJT6E/uQgRfu9E1lOiyhVTdC1Kwllc=)
2: 25v841gk9uybXJ85qBFQzhYYEic.crl (hash: I3T+RtAoeBCNEWWCgdlm3hBZKeiHqOqLDk3Z094rv1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.mft
rsync://rpki.ripe.net/repository/DEFAULT/25v841gk9uybXJ85qBFQzhYYEic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 15:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:dc:7a:9d:5e:71:f4:06:f0:9d:5f:b1:bc:ab:3e:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9bfce35824f6ec9b5c9f39a81150ce16181227
Validity
Not Before: May 11 15:00:19 2025 GMT
Not After : May 12 15:00:19 2025 GMT
Subject: CN=2c03a9862e9ac0782165690a05611ed730114b30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9d:0b:dd:19:1d:9c:c9:10:59:86:fc:40:5c:
0d:51:0f:87:2a:17:a3:36:25:ae:d6:64:94:c0:ed:
ce:b0:53:4d:36:82:c5:91:dd:f9:6d:3d:0e:bb:32:
28:ce:bd:d0:9e:18:37:3f:63:7a:70:b6:4e:52:ee:
f7:87:66:81:50:e8:1c:82:c9:22:31:4b:53:5c:b8:
9d:25:18:a7:7d:5b:9b:f5:a7:38:e4:3b:ae:63:b6:
b1:ec:cb:d0:ce:f0:90:b3:19:d7:0d:65:4e:76:5b:
14:c3:73:72:6f:82:28:db:ff:4c:2b:33:04:34:e9:
0a:66:b8:d2:f6:55:93:52:a5:50:c2:fb:5d:78:f0:
d9:21:47:de:5f:71:9f:35:70:89:98:3f:9f:49:22:
d8:5a:62:a1:c2:97:f6:9b:2f:5b:a6:5f:19:47:dd:
f9:6e:65:a7:c2:35:50:a2:9c:1d:69:23:f4:44:35:
c8:88:f8:7d:71:ee:89:14:8f:b4:4c:5d:b6:a1:c0:
a1:35:11:1f:70:06:18:04:26:0f:fc:a7:16:04:a6:
13:66:46:84:ea:da:2b:54:9c:d1:2d:0e:f4:8c:e9:
3d:89:a7:83:73:58:2e:f9:a4:94:be:b5:85:f4:6d:
a0:74:41:62:2b:89:02:1e:6b:91:e7:c6:10:98:58:
32:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:03:A9:86:2E:9A:C0:78:21:65:69:0A:05:61:1E:D7:30:11:4B:30
X509v3 Authority Key Identifier:
keyid:DB:9B:FC:E3:58:24:F6:EC:9B:5C:9F:39:A8:11:50:CE:16:18:12:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25v841gk9uybXJ85qBFQzhYYEic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:23:10:31:29:ae:e4:03:1d:3c:98:27:4c:91:a5:0d:4b:21:
77:cd:3a:89:31:28:24:2e:42:a1:0b:44:e6:5f:1e:29:1b:ea:
68:d5:7b:7b:61:cf:42:31:08:7e:65:64:97:cf:54:36:cb:99:
56:c5:ed:a2:e2:c8:45:b0:3b:aa:0f:b5:b2:c6:b8:45:08:7e:
da:3d:d6:66:ba:24:d6:0f:0e:b9:a1:df:82:76:ea:21:bf:77:
57:47:cc:3e:4a:32:41:f5:a3:48:46:5f:76:6c:c3:fc:db:e1:
42:cb:05:26:94:43:36:28:a0:f6:e5:94:da:60:d2:b0:f9:b2:
02:f8:10:fe:5a:3e:46:76:56:73:66:da:5b:2f:ef:f7:c1:4f:
bd:8a:e3:c6:3c:31:b0:47:5d:94:49:f7:32:74:12:55:d9:d5:
d6:4a:39:78:b7:b0:75:ed:d7:b8:10:dd:b8:47:24:74:57:90:
39:1f:ae:2a:56:ca:fa:2f:1e:68:0b:bd:31:58:fd:47:7d:cc:
7d:eb:a4:96:48:4a:6a:ad:7e:6e:6d:d8:8e:46:35:ff:15:74:
c4:55:d7:d5:87:48:95:5a:1b:6c:15:3d:16:f2:af:06:76:d3:
b0:a8:cc:12:c2:07:47:23:ec:6a:4c:81:b7:7d:dc:3f:ba:31:
46:91:57:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:28:09 2025 by rpki-client