Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.mft
File: r9rCQfMBCxrkhLwx9YStD50gZzQ.mft (raw, json)
Hash identifier: 9rg+E958QdVgzzOwoWtsgTbiLAgQN9HW4gKEIu+iAtQ=
Subject key identifier: 64:4A:44:C7:42:8A:C9:41:07:1C:92:B2:AA:AB:8D:09:DB:70:F6:A0
Authority key identifier: AF:DA:C2:41:F3:01:0B:1A:E4:84:BC:31:F5:84:AD:0F:9D:20:67:34
Certificate issuer: /CN=afdac241f3010b1ae484bc31f584ad0f9d206734
Certificate serial: 0196C2DDA56A843F43B3E5A338547ACE8B0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r9rCQfMBCxrkhLwx9YStD50gZzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.mft
Manifest number: 0AFD
Signing time: Mon 12 May 2025 05:00:27 +0000
Manifest this update: Mon 12 May 2025 05:00:27 +0000
Manifest next update: Tue 13 May 2025 05:00:27 +0000
Files and hashes: 1: Pyp3KZhgaPnGJ0klVfWstvZhAaA.roa (hash: 2zE2fETyOiknIdhnDsU5+xLMFz/vO5FngmYcWoMLhMg=)
2: r9rCQfMBCxrkhLwx9YStD50gZzQ.crl (hash: DxvLSDDmV4UiExCOhVK5QhgkvvkO7xXhNEvFrj6aFjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/r9rCQfMBCxrkhLwx9YStD50gZzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:dd:a5:6a:84:3f:43:b3:e5:a3:38:54:7a:ce:8b:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afdac241f3010b1ae484bc31f584ad0f9d206734
Validity
Not Before: May 12 05:00:27 2025 GMT
Not After : May 13 05:00:27 2025 GMT
Subject: CN=644a44c7428ac941071c92b2aaab8d09db70f6a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:a5:b8:e7:04:49:24:bc:b7:9d:58:37:90:d1:
17:23:b8:58:cd:db:ed:c8:be:d5:40:cf:25:c7:d1:
bc:26:60:1e:e0:9b:d2:ff:fc:50:a6:44:bd:9e:83:
b5:10:3c:5f:ba:32:0c:75:7f:b0:f1:4e:7e:96:72:
46:7f:a4:bc:c8:c0:e6:7a:78:58:25:05:a9:b3:3c:
7e:e4:f9:ae:fd:21:c7:ab:39:d1:11:80:a0:c7:9e:
75:9b:b3:b0:2b:6e:f1:ac:36:fc:ca:fa:01:3e:0f:
b1:76:0b:b8:b5:c4:13:f5:0e:65:9b:2c:f6:53:ef:
77:e0:40:b9:1c:32:ff:9c:d2:31:a5:77:ea:b2:b0:
39:b2:bb:91:2f:ba:e1:c5:14:83:fe:4e:65:35:06:
53:c2:b4:75:30:1f:cb:37:e9:9a:2d:6f:97:37:55:
95:29:34:19:0b:5c:4a:3a:fc:a2:29:21:9c:05:1e:
02:af:cd:3a:8b:ef:cf:6a:0f:c8:ff:32:81:af:bb:
58:f3:f8:3f:01:24:58:b6:9b:bf:c1:c2:3b:a0:d5:
29:4d:bf:f1:d3:b6:64:a3:2d:49:8c:a7:48:ad:94:
9e:8d:33:a5:e5:eb:77:09:e5:5a:4a:c4:dd:83:44:
39:f1:b9:d7:52:cf:09:d5:dd:88:e4:90:e2:ee:6d:
22:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:4A:44:C7:42:8A:C9:41:07:1C:92:B2:AA:AB:8D:09:DB:70:F6:A0
X509v3 Authority Key Identifier:
keyid:AF:DA:C2:41:F3:01:0B:1A:E4:84:BC:31:F5:84:AD:0F:9D:20:67:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r9rCQfMBCxrkhLwx9YStD50gZzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:86:6a:f7:67:b8:e2:62:3d:45:1e:d1:ea:ea:90:0f:b6:90:
4a:56:bf:55:5c:4e:65:04:c1:b4:78:46:11:df:4a:3f:32:1e:
ea:90:44:b1:f8:d9:f5:29:0b:36:6b:d4:f7:78:dd:21:3a:63:
00:27:b0:a2:3f:2a:2c:13:b3:10:0f:aa:a3:e5:c3:52:af:96:
1f:f5:4f:28:91:e4:98:52:bf:44:d1:c9:c4:a0:4b:d7:0b:82:
ea:c4:1e:50:da:5f:a4:23:7b:2a:10:6e:4d:22:3d:ae:13:4f:
0f:57:9e:e2:41:d2:4d:b2:41:5c:98:1b:9b:82:f5:4c:11:22:
62:f8:b7:f3:1e:45:11:f1:bf:78:3a:6e:9c:67:c9:29:f1:d8:
9b:37:cf:7a:32:25:5f:60:45:e5:87:1b:43:54:eb:e1:93:82:
fd:9d:67:ec:8a:ae:7a:dd:4e:73:c4:69:39:79:d2:24:6f:68:
17:42:c1:27:31:61:80:2b:36:b0:15:48:52:9e:9d:39:1b:57:
e2:5c:fb:af:3a:e9:37:4d:fd:ed:0a:f6:07:8b:f0:4e:17:60:
70:0f:a9:2c:42:21:2c:2b:c9:91:49:b9:0c:dc:ca:6f:ff:5b:
78:bc:1c:c7:13:5b:91:08:32:c5:bf:e2:ef:3c:99:d2:c4:53:
bc:5e:a6:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 15:51:50 2025 by rpki-client