Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.mft
File: 9_38M32M4OBe9_e3KvJ-thzUcDc.mft (raw, json)
Hash identifier: 7Amb3668ms22zx+n7SaD/XnJgleDOyowtBl17EBEm+o=
Subject key identifier: CF:66:23:C9:15:78:FD:7D:3B:85:AA:93:2B:92:5A:0E:7E:97:4F:6D
Authority key identifier: F7:FD:FC:33:7D:8C:E0:E0:5E:F7:F7:B7:2A:F2:7E:B6:1C:D4:70:37
Certificate issuer: /CN=f7fdfc337d8ce0e05ef7f7b72af27eb61cd47037
Certificate serial: 0196C2DDCF1FDC4D9A074321A2D9551D4648
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9_38M32M4OBe9_e3KvJ-thzUcDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.mft
Manifest number: 153B
Signing time: Mon 12 May 2025 05:00:38 +0000
Manifest this update: Mon 12 May 2025 05:00:38 +0000
Manifest next update: Tue 13 May 2025 05:00:38 +0000
Files and hashes: 1: 9_38M32M4OBe9_e3KvJ-thzUcDc.crl (hash: dcyVV80dC892bM7MtBabqozZRzd7TbTik8ZIzKRSe3o=)
2: fCHzIX3PF5IX4vTpqhp12B4ANgE.roa (hash: 56hifj5pI9Tipd1DppPjnl4odiFdle6vhykV6J1DFck=)
3: g7wXivy3539LtXi_LoOdOIVbDx8.roa (hash: +5hEq5/dYKWbMKLOksJvPEMNRWQVyUVWOFEW1b0Bio8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9_38M32M4OBe9_e3KvJ-thzUcDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:dd:cf:1f:dc:4d:9a:07:43:21:a2:d9:55:1d:46:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7fdfc337d8ce0e05ef7f7b72af27eb61cd47037
Validity
Not Before: May 12 05:00:38 2025 GMT
Not After : May 13 05:00:38 2025 GMT
Subject: CN=cf6623c91578fd7d3b85aa932b925a0e7e974f6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:97:02:62:68:79:7a:46:6f:93:61:3c:68:83:
61:6c:a0:86:0c:8b:0a:e2:c3:07:3d:b0:12:3b:90:
1f:df:1a:31:5b:b6:72:7b:68:89:24:64:42:d0:5c:
ec:ce:a3:a2:30:8e:ae:71:8e:49:46:32:95:14:20:
c4:f7:9e:f5:e1:6d:1a:3e:51:53:bf:80:4e:fa:2e:
9c:a5:47:44:33:b1:d8:56:8c:4c:02:49:67:24:04:
74:1e:d1:f2:5f:94:d7:2a:f8:df:a3:7e:64:3e:45:
02:27:35:8a:ff:f7:ff:7f:fc:10:a4:b8:70:66:c8:
01:18:73:7e:00:aa:47:5c:09:44:e4:5c:c0:25:ed:
ca:63:64:82:35:38:97:a8:f1:82:a3:07:2b:91:7b:
ba:32:02:70:c4:93:4c:9c:bd:b9:26:f3:7d:e8:e5:
91:16:b8:87:66:8a:cd:5a:16:3e:06:84:79:af:d7:
23:12:a1:97:40:64:8d:92:30:6a:22:ed:73:9e:10:
89:03:9a:92:b3:1b:b3:8e:37:9d:71:62:f7:67:05:
f0:89:20:1c:b9:67:f1:20:67:0e:c0:e1:c4:57:4e:
37:7b:3b:e3:2a:a2:88:dc:fd:5d:48:01:8f:44:ec:
76:b9:a4:d4:58:97:ea:7f:12:7c:1f:93:c3:3b:5e:
a5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:66:23:C9:15:78:FD:7D:3B:85:AA:93:2B:92:5A:0E:7E:97:4F:6D
X509v3 Authority Key Identifier:
keyid:F7:FD:FC:33:7D:8C:E0:E0:5E:F7:F7:B7:2A:F2:7E:B6:1C:D4:70:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9_38M32M4OBe9_e3KvJ-thzUcDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:16:9f:90:f5:94:de:5f:b1:81:a6:37:1b:88:02:04:d2:fc:
1a:ad:bb:ab:d0:9d:95:67:9b:01:f9:b0:e2:07:49:b5:e1:86:
b4:c4:93:7f:41:16:ed:62:96:9a:3b:60:20:33:4c:35:39:43:
1d:d3:38:72:78:39:55:5c:a2:03:48:3d:bf:92:5a:3c:e4:69:
c4:18:6f:c6:8a:93:2b:16:a6:65:df:0f:52:30:6f:9d:46:25:
62:fb:a1:49:ae:12:5a:a9:76:cb:c4:e4:6c:6f:b9:f7:f8:ce:
3e:fa:59:70:4d:22:e4:80:45:b0:d4:8b:5b:ba:cf:b9:34:72:
53:92:4c:74:54:c9:15:16:76:eb:18:23:ee:4e:16:64:d6:27:
2a:fc:bf:9a:7c:a1:ee:a8:06:b4:4b:a4:88:3a:a3:a1:48:e3:
55:2e:01:8c:5e:82:db:1c:6a:13:fe:51:7f:75:f7:e6:70:b5:
63:2f:41:c5:1f:bb:a0:64:16:0e:73:6b:c7:b2:00:b0:5e:ae:
9d:23:4d:9d:6e:26:de:14:fd:31:bf:65:a9:43:1e:a7:71:5c:
f7:03:9b:87:0e:a3:26:a6:88:37:08:eb:84:85:1f:df:40:80:
49:0d:72:9e:06:5d:cb:79:bf:6a:27:0c:9f:80:a6:1b:b4:b7:
8b:e5:69:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:13:48 2025 by rpki-client