Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/d20c0e-6385-4ab7-b5ff-d15bdb886c6d/1/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.mft
File: C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.mft (raw, json)
Hash identifier: 0E2YyJlbJnAONYpwFwKFII8Y9d8RL71IObG2g21oH4I=
Subject key identifier: EE:63:F7:9C:47:1E:81:C3:36:BA:C0:8C:CC:FB:D2:CD:5C:C1:2F:2B
Authority key identifier: 0B:D6:4F:E7:F4:38:78:2E:C8:AF:A9:EE:F5:48:7B:5D:B8:0E:4D:EA
Certificate issuer: /CN=0bd64fe7f438782ec8afa9eef5487b5db80e4dea
Certificate serial: 0196A38A3D60B869934DC8F94AE3BF956BB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/d20c0e-6385-4ab7-b5ff-d15bdb886c6d/1/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.mft
Manifest number: 0149
Signing time: Tue 06 May 2025 03:01:07 +0000
Manifest this update: Tue 06 May 2025 03:01:07 +0000
Manifest next update: Wed 07 May 2025 03:01:07 +0000
Files and hashes: 1: C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.crl (hash: qAzstIbDoUuTZ8wNnKxnRFBANNnMsMLIdgjhOOb/fY0=)
2: wD9ir4CCy4E7zOefD7Z-y5RvpRY.roa (hash: 7sn9k3wlZ/27RuueZ6o2qKtcwJI5H5fdnvFFf1ud6xU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/d20c0e-6385-4ab7-b5ff-d15bdb886c6d/1/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/d20c0e-6385-4ab7-b5ff-d15bdb886c6d/1/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:8a:3d:60:b8:69:93:4d:c8:f9:4a:e3:bf:95:6b:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bd64fe7f438782ec8afa9eef5487b5db80e4dea
Validity
Not Before: May 6 03:01:07 2025 GMT
Not After : May 7 03:01:07 2025 GMT
Subject: CN=ee63f79c471e81c336bac08cccfbd2cd5cc12f2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:47:7b:ca:19:f2:04:ba:b2:c0:60:3c:3c:7a:
d6:96:18:73:d6:31:a1:75:50:ea:9c:66:47:5e:c5:
94:4d:fd:77:85:f7:45:0b:14:52:25:ff:69:24:7d:
df:5c:f6:0f:66:6f:df:25:a8:a9:b5:d8:fc:ec:70:
e0:d1:bf:e2:7c:69:30:20:eb:ce:cd:2c:2b:4f:5c:
86:54:fc:a4:7a:5a:14:44:1a:61:ae:b0:c1:3c:02:
2d:bc:81:31:67:4f:c3:2c:27:5a:f4:01:b5:1f:45:
a7:22:71:13:44:6e:d4:b7:e3:a9:29:b5:91:ab:dc:
23:8a:77:ab:ef:3f:83:b8:db:60:6b:f9:3c:54:80:
7a:0c:ca:26:06:23:10:7a:00:8f:d7:4e:18:66:49:
40:b7:11:9c:56:31:b3:73:35:12:75:11:ef:81:1e:
c2:e6:a5:f3:82:55:c1:60:47:76:6d:67:9b:59:e4:
55:ae:b7:c1:bb:e8:6d:7d:69:8e:b1:2b:ac:02:c0:
03:59:40:28:bc:e7:9b:57:6d:8e:7f:79:bd:9e:9d:
f6:ed:6c:d8:7a:cc:e4:23:4f:b1:7e:a0:57:0e:4d:
25:6e:1c:53:c5:3d:6d:6c:02:c2:ad:7b:5c:a1:a7:
44:57:db:5d:ea:5c:7d:75:8a:d5:24:bb:be:b2:76:
1f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:63:F7:9C:47:1E:81:C3:36:BA:C0:8C:CC:FB:D2:CD:5C:C1:2F:2B
X509v3 Authority Key Identifier:
keyid:0B:D6:4F:E7:F4:38:78:2E:C8:AF:A9:EE:F5:48:7B:5D:B8:0E:4D:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d20c0e-6385-4ab7-b5ff-d15bdb886c6d/1/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d20c0e-6385-4ab7-b5ff-d15bdb886c6d/1/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:2d:95:d2:5e:c2:b3:b1:6d:59:29:e1:2f:e0:c1:69:b1:ae:
56:81:39:b9:66:93:f4:d3:25:26:62:96:63:b8:9b:54:67:3e:
0d:83:68:1d:cb:6b:a3:d8:3b:4e:e9:93:62:c0:1f:b7:42:c4:
ce:70:66:e4:cc:ca:24:69:3c:bf:28:5a:c6:40:97:91:23:17:
82:9b:0e:02:f9:74:ea:a7:43:be:13:4e:c1:dc:97:61:48:9e:
fb:ce:ee:39:df:cb:76:e9:88:28:56:76:60:b8:ab:81:a1:cb:
57:6b:65:b8:d3:68:c7:ca:64:fe:c5:96:2d:a7:c9:90:1a:58:
3e:cd:45:4d:8f:b7:d7:6b:d0:a2:34:de:65:02:f0:e4:fa:7a:
df:4b:32:c8:48:9f:41:1a:c8:1c:80:e7:7e:b6:c8:7e:e1:aa:
4e:4a:99:fd:70:fb:ec:5b:96:42:35:53:99:19:c7:19:31:e2:
55:95:d6:e5:f4:3e:e2:fd:49:c5:4f:da:b7:92:83:24:c2:98:
22:47:99:2d:1d:69:e2:bb:8a:ff:60:d2:e0:8a:a2:cc:78:75:
f0:ef:ae:6c:0f:24:51:81:6a:b5:48:ea:9b:ff:76:53:ab:bc:
a2:97:17:1e:e3:fa:0b:1a:76:25:e2:83:88:83:a3:36:8d:a2:
20:80:56:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 05:14:52 2025 by rpki-client