Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.mft
File: 9X3FmWyBeMDeLqIEme696t5AI-s.mft (raw, json)
Hash identifier: ts7viGlVagNMrs+eK5YSNkn6NF5014IywFiYy3PpAnc=
Subject key identifier: 25:AB:F1:6C:E2:F0:AA:87:6D:71:7B:E6:BC:DD:FF:63:0B:2C:C6:FA
Authority key identifier: F5:7D:C5:99:6C:81:78:C0:DE:2E:A2:04:99:EE:BD:EA:DE:40:23:EB
Certificate issuer: /CN=f57dc5996c8178c0de2ea20499eebdeade4023eb
Certificate serial: 0196A01A98245B03937BCEEEFD5AF69DF0CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9X3FmWyBeMDeLqIEme696t5AI-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.mft
Manifest number: 1525
Signing time: Mon 05 May 2025 11:00:19 +0000
Manifest this update: Mon 05 May 2025 11:00:19 +0000
Manifest next update: Tue 06 May 2025 11:00:19 +0000
Files and hashes: 1: 9X3FmWyBeMDeLqIEme696t5AI-s.crl (hash: //VLdpMkUXVWRHcNEw+UhiawT7XdAV1MSdfa5kQxf9w=)
2: Ja-1OHflBPV5uzkrzsrUkckcSDQ.roa (hash: 5hTfi5zIdy0pksBzayRUkBZiz92X7DgH1Hnbmun+ujM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/9X3FmWyBeMDeLqIEme696t5AI-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:1a:98:24:5b:03:93:7b:ce:ee:fd:5a:f6:9d:f0:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57dc5996c8178c0de2ea20499eebdeade4023eb
Validity
Not Before: May 5 11:00:19 2025 GMT
Not After : May 6 11:00:19 2025 GMT
Subject: CN=25abf16ce2f0aa876d717be6bcddff630b2cc6fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ed:17:da:a7:0d:59:f2:45:ec:92:2a:5f:1b:
2f:21:d2:28:3d:3c:fc:79:d9:9e:d2:eb:26:42:04:
e7:1c:ec:a5:27:8c:8e:d2:c6:65:c4:d3:00:8b:7d:
28:78:12:43:9c:2c:d1:96:72:65:19:95:7e:fb:90:
f7:34:74:cb:68:93:ca:02:07:5e:ae:09:34:ae:f7:
b8:c0:ee:49:40:f4:b7:5d:d3:73:d0:82:17:c1:bd:
91:07:14:a4:ea:2a:06:c4:28:55:9e:af:d0:ec:81:
c2:8d:9f:fa:56:eb:04:1f:9d:82:32:45:db:be:c7:
72:a3:bf:ce:bc:27:44:a4:d3:3f:c9:f3:93:df:53:
ad:d7:bf:b5:cb:ae:f6:78:d1:ec:36:9f:f6:9c:50:
a2:ca:43:14:a9:8c:20:b7:9f:9c:22:84:e1:db:e9:
13:19:5f:60:7a:96:23:4a:01:8d:53:6b:7e:fd:fc:
b2:3f:80:48:32:57:d8:cc:4e:f2:1b:4b:76:e2:af:
bd:ef:01:65:9d:9e:4b:c5:8b:2f:d9:8c:b4:f6:30:
58:9d:3a:36:39:e8:e1:96:7c:eb:67:3d:9e:2c:2e:
e2:ed:40:3f:5e:54:47:bb:c2:26:79:30:fb:fe:af:
b8:9f:83:51:37:0c:ee:46:7e:69:9e:fb:5c:08:04:
62:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:AB:F1:6C:E2:F0:AA:87:6D:71:7B:E6:BC:DD:FF:63:0B:2C:C6:FA
X509v3 Authority Key Identifier:
keyid:F5:7D:C5:99:6C:81:78:C0:DE:2E:A2:04:99:EE:BD:EA:DE:40:23:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9X3FmWyBeMDeLqIEme696t5AI-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:29:89:46:88:c8:12:9d:38:95:54:21:34:0c:2a:1f:59:e1:
7e:72:ba:75:7c:53:bf:c1:77:3a:e1:aa:61:ae:21:a5:2f:7d:
5a:e8:95:3f:2e:71:0e:cb:01:ee:b0:de:d0:a7:e1:c7:7c:e9:
b5:6f:bd:89:15:29:a3:c7:e4:7e:84:8c:dd:57:c0:0c:4d:02:
b0:e0:51:7d:f4:29:e0:33:1a:0e:2d:71:e1:e7:6b:2a:6e:1e:
7f:bd:d0:69:2d:4b:a3:0f:23:cb:14:6b:80:ba:90:88:aa:28:
54:08:20:bd:61:52:02:3e:14:7a:46:f1:e5:fb:1b:a7:b8:69:
0c:32:72:af:b6:a3:d8:a0:2e:e6:34:a1:a6:de:81:b1:f7:6a:
c5:f9:fa:3c:31:b4:f1:9d:70:41:24:00:40:af:b2:b5:39:e3:
01:e8:98:6e:b9:69:fd:05:fc:1c:e8:5e:04:f2:07:d6:94:29:
dd:5d:17:c6:cb:fe:6d:8d:10:f8:c7:a0:ba:29:2e:39:16:57:
d0:db:0f:de:ec:58:46:eb:50:6e:b3:5b:d0:9c:4a:be:03:a9:
89:5f:13:88:d6:4b:67:f8:dd:d1:56:e6:e3:55:0f:0b:d6:dc:
57:88:9f:8b:3e:76:bb:2e:2e:5e:3c:90:af:0b:78:56:ac:be:
bc:66:1f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 17:15:57 2025 by rpki-client