Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.mft
File: lC9WXtFtjDN6jIqzzcVy7xFQ9ak.mft (raw, json)
Hash identifier: eNoUPtig6Fo5HW0TuL1jlUWizxJcq/Vw5TudQ+8pTZ8=
Subject key identifier: 2E:8B:6C:9C:E5:6C:F7:6C:1E:07:49:D8:F9:23:4C:46:10:40:E3:29
Authority key identifier: 94:2F:56:5E:D1:6D:8C:33:7A:8C:8A:B3:CD:C5:72:EF:11:50:F5:A9
Certificate issuer: /CN=942f565ed16d8c337a8c8ab3cdc572ef1150f5a9
Certificate serial: 0196BDB7470835F9C3CB7D10B7B75925227A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.mft
Manifest number: 1539
Signing time: Sun 11 May 2025 05:00:27 +0000
Manifest this update: Sun 11 May 2025 05:00:27 +0000
Manifest next update: Mon 12 May 2025 05:00:27 +0000
Files and hashes: 1: Aw8VCCK2oT1v-RRBTzm1Icy2wl0.roa (hash: XRXIYDE3PMP8HGRW9qlh0nIOPSOFPTF1lsWNuSlfpmY=)
2: P9x64-P6Zc5aUoIHika_YUJSpL4.roa (hash: wA4s5vuet/tgGLY4KlSltkNzg/nbmHYvEtESrfXIJ8U=)
3: i9LUKRMFfrn-zZJPck6ZTY7F8F4.roa (hash: vYGYhqvVpW6XCnxzEEe+vdIqrrsrJBwJSKWJ04MFhOg=)
4: lC9WXtFtjDN6jIqzzcVy7xFQ9ak.crl (hash: Sxa6QJ7WBoevDFBDMv+59IB60frRMOuaFe34qvXxE0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:b7:47:08:35:f9:c3:cb:7d:10:b7:b7:59:25:22:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=942f565ed16d8c337a8c8ab3cdc572ef1150f5a9
Validity
Not Before: May 11 05:00:27 2025 GMT
Not After : May 12 05:00:27 2025 GMT
Subject: CN=2e8b6c9ce56cf76c1e0749d8f9234c461040e329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:3d:a8:18:7a:45:29:7b:25:df:5c:76:02:14:
cb:3c:5f:a6:fc:27:b6:97:b6:8d:84:a0:f1:58:6a:
97:15:c3:30:2f:34:46:59:90:db:d3:30:6a:5d:8c:
3c:09:68:9d:cc:6e:88:c3:bc:2f:cd:c1:f1:fe:c4:
08:1a:3e:4a:d6:af:4e:e9:39:23:40:8b:c1:72:45:
0f:bd:3b:05:08:1c:40:13:76:cf:a5:08:51:42:36:
d8:fe:42:93:db:a9:aa:10:e0:67:70:ed:3a:11:65:
8f:14:ba:13:2c:42:fb:a3:08:3b:67:c0:8f:0c:70:
b7:54:e8:92:ea:ab:a9:26:1b:3f:49:00:51:09:b7:
d9:e0:69:b0:6a:6d:fb:26:6b:e7:da:c2:a2:66:c7:
e7:41:50:c3:1f:bd:f1:4a:4e:1f:37:a2:ed:76:2a:
83:b9:fb:72:c4:30:34:9c:e7:bf:5b:e6:fd:ed:8c:
f2:5f:29:a2:13:c8:52:4e:e6:2a:0d:62:6f:32:c3:
5f:aa:92:69:6a:47:6e:c1:4a:e4:a2:68:c0:13:ca:
16:b4:0d:fe:c5:59:0e:b1:de:19:9e:72:ad:e5:72:
06:2a:82:30:73:4e:9c:8c:a9:3d:f4:84:33:3b:58:
c4:f0:f6:4c:e9:c4:e0:66:66:c5:b9:53:58:0b:c6:
11:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:8B:6C:9C:E5:6C:F7:6C:1E:07:49:D8:F9:23:4C:46:10:40:E3:29
X509v3 Authority Key Identifier:
keyid:94:2F:56:5E:D1:6D:8C:33:7A:8C:8A:B3:CD:C5:72:EF:11:50:F5:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:2f:e2:0a:43:0e:04:84:57:99:9e:bc:92:48:6c:88:db:21:
11:94:1f:5d:f4:b2:a8:d0:7b:99:8b:d1:0a:88:3e:59:ac:55:
9a:fb:03:69:69:1f:e9:29:e3:d0:8c:7d:95:ba:66:a5:17:e6:
1f:6e:c3:18:50:85:c6:e3:00:1e:bf:38:3a:4e:8b:54:be:10:
94:4b:8d:61:28:0c:b9:49:3e:f0:dd:c7:f1:b4:59:00:26:a8:
af:a8:34:af:1a:d6:92:de:c0:f1:1c:ff:a3:77:a3:2e:73:48:
8a:dc:5b:8c:63:70:35:3f:d6:11:80:d5:36:e1:e3:be:83:3d:
5b:06:dc:29:6b:f2:09:6b:ad:96:e4:f6:fc:35:35:1a:eb:a6:
6e:e5:70:47:23:01:dc:ab:41:bb:13:85:84:6e:c6:b4:69:47:
2b:bb:0b:a2:b3:ab:b6:9a:9a:14:24:a9:d6:92:46:f1:b4:c9:
1e:f8:36:74:b1:0e:1e:2a:bc:e8:65:bd:de:84:71:86:34:42:
d0:ff:78:5a:17:b7:f4:e0:da:52:8e:a7:8c:de:d1:43:16:59:
e3:16:b4:c1:32:40:a3:f0:bd:4b:b4:6e:ff:ce:8f:1f:45:4a:
5f:c2:64:f0:0e:d5:2f:49:4e:1a:3f:8b:91:65:0d:7c:9d:b5:
f4:88:e7:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 11:32:17 2025 by rpki-client