Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.mft
File: f9YuQsCOFgHEVx4NiKNJoFCd6l4.mft (raw, json)
Hash identifier: 4NZ8Y+T+zn1m907sqSjiecm0RCIOHzrobxEqixjhQ+4=
Subject key identifier: C8:4F:78:05:F2:8A:54:25:94:2B:97:94:4E:BB:B2:1E:C3:F4:34:C6
Authority key identifier: 7F:D6:2E:42:C0:8E:16:01:C4:57:1E:0D:88:A3:49:A0:50:9D:EA:5E
Certificate issuer: /CN=7fd62e42c08e1601c4571e0d88a349a0509dea5e
Certificate serial: 0196B6D97D017A9F53FF481D78641E38273F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f9YuQsCOFgHEVx4NiKNJoFCd6l4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.mft
Manifest number: 10B8
Signing time: Fri 09 May 2025 21:00:28 +0000
Manifest this update: Fri 09 May 2025 21:00:28 +0000
Manifest next update: Sat 10 May 2025 21:00:28 +0000
Files and hashes: 1: CrYUOPAFPEtuHkKyJhzQE8UrUoM.roa (hash: 9NqhKYyaxDuqPrOUEVd5P1RqZQxAPP5YeCq0DGdnu/4=)
2: f9YuQsCOFgHEVx4NiKNJoFCd6l4.crl (hash: bi1zxF3s9c7ezuX6g0qoLyrTF8s5knSIGaQsBXzu14o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.mft
rsync://rpki.ripe.net/repository/DEFAULT/f9YuQsCOFgHEVx4NiKNJoFCd6l4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b6:d9:7d:01:7a:9f:53:ff:48:1d:78:64:1e:38:27:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fd62e42c08e1601c4571e0d88a349a0509dea5e
Validity
Not Before: May 9 21:00:28 2025 GMT
Not After : May 10 21:00:28 2025 GMT
Subject: CN=c84f7805f28a5425942b97944ebbb21ec3f434c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:7d:64:90:a6:24:10:bd:bf:32:38:c3:8b:6a:
d1:7b:cd:2d:61:65:9f:4b:95:cb:d3:72:f9:37:7e:
b5:9e:f9:c2:fb:ab:32:08:f7:fc:1e:9b:9c:45:a9:
bf:70:f3:45:6b:25:80:23:88:b5:01:69:0c:9e:98:
e1:9b:fc:8a:b4:50:fe:a4:6d:52:89:58:fd:fc:8b:
38:28:39:23:9c:f5:16:7a:34:11:88:b5:d3:c9:b8:
92:44:40:2d:6b:30:77:56:91:1a:95:49:4c:f2:96:
e1:7a:92:60:01:4e:2d:dc:9b:cf:1c:96:9e:24:49:
ae:4d:af:69:c7:88:9c:1c:7a:b7:4f:f7:a6:32:19:
f5:c9:a6:cb:43:40:94:86:b6:7d:66:c3:ff:f8:4a:
af:59:96:77:8a:91:9d:5d:0f:e2:bd:33:53:b1:48:
ad:b3:09:63:e2:81:66:57:d7:58:6a:13:4e:12:e7:
0c:8c:2d:33:d9:e4:08:a9:54:1a:2a:f3:1b:76:93:
27:4a:60:c6:51:6c:1f:7c:22:4c:6c:72:84:e0:c5:
9e:f2:35:fe:de:24:3e:b8:de:7c:26:da:6a:24:cb:
2d:40:34:60:9b:33:eb:2e:5d:f6:03:d0:e8:c2:1c:
be:18:58:bb:69:fd:4e:68:2d:84:c8:20:69:46:a3:
16:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:4F:78:05:F2:8A:54:25:94:2B:97:94:4E:BB:B2:1E:C3:F4:34:C6
X509v3 Authority Key Identifier:
keyid:7F:D6:2E:42:C0:8E:16:01:C4:57:1E:0D:88:A3:49:A0:50:9D:EA:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9YuQsCOFgHEVx4NiKNJoFCd6l4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:3e:55:83:4f:28:f9:9a:67:b5:d4:17:99:e1:10:51:80:61:
92:07:eb:5f:28:2e:3a:9d:32:0d:54:0f:b5:4e:79:a0:c9:ac:
e5:20:22:42:51:7e:c3:64:be:0c:c1:4d:c5:ac:12:0b:09:d4:
9d:b7:f9:29:28:01:d7:0e:0e:99:5c:6b:02:3e:23:2e:69:65:
ee:25:e3:fa:db:74:b0:c2:13:38:f2:f5:63:4c:f2:1a:03:3c:
a3:21:98:e4:a2:8f:87:aa:fd:12:9d:b0:91:05:a7:e6:01:45:
25:1f:2b:2b:26:d0:36:40:6e:06:85:d6:a0:06:36:49:e6:36:
24:17:34:44:0c:7a:55:bb:60:98:46:c5:a2:01:f0:7a:83:c2:
34:a8:e3:b0:22:4b:6f:4a:2a:d8:9a:ba:47:8d:dd:e6:74:ff:
0a:59:04:d0:fa:55:23:8d:e0:ac:90:d7:50:2c:40:0a:6e:ad:
10:cd:f0:c2:f4:16:34:c4:96:63:45:bc:72:32:d2:0d:60:6a:
f4:af:66:98:6e:24:c8:b6:70:8c:40:bd:ee:d0:d2:4f:43:f4:
b6:5f:62:e4:ca:d4:f2:d8:99:52:25:08:57:32:5d:3c:8c:a6:
19:de:81:3c:b5:25:dd:62:27:72:2d:63:c6:32:6e:a8:b0:bf:
62:c1:2e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:23:32 2025 by rpki-client