Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft
File: l9I64ozYYMjt_WGDVvizH15NySg.mft (raw, json)
Hash identifier: HrGsz0UvVoNHJqgUi1B2Be4UNC6s2+t2VoaGE2HCzUM=
Subject key identifier: 69:F6:76:C0:54:BA:2E:EF:6A:AA:CE:E8:63:81:2C:5C:BB:93:57:09
Authority key identifier: 97:D2:3A:E2:8C:D8:60:C8:ED:FD:61:83:56:F8:B3:1F:5E:4D:C9:28
Certificate issuer: /CN=97d23ae28cd860c8edfd618356f8b31f5e4dc928
Certificate serial: 01969F3F0E47249C06CDA02DDEFD741B6DA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l9I64ozYYMjt_WGDVvizH15NySg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft
Manifest number: 0833
Signing time: Mon 05 May 2025 07:00:31 +0000
Manifest this update: Mon 05 May 2025 07:00:31 +0000
Manifest next update: Tue 06 May 2025 07:00:31 +0000
Files and hashes: 1: jODSDZiB_9CDcQXiT4tsxNlR8Ac.roa (hash: JEMeTXjwzca2z04dyMlf/bVf4aF3EAXQNY7E1cjOdx4=)
2: l9I64ozYYMjt_WGDVvizH15NySg.crl (hash: +ym1IOX2VDSbgjLlC7dnW2MWGHRXzS/E6FDZxQBYTak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft
rsync://rpki.ripe.net/repository/DEFAULT/l9I64ozYYMjt_WGDVvizH15NySg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:3f:0e:47:24:9c:06:cd:a0:2d:de:fd:74:1b:6d:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97d23ae28cd860c8edfd618356f8b31f5e4dc928
Validity
Not Before: May 5 07:00:31 2025 GMT
Not After : May 6 07:00:31 2025 GMT
Subject: CN=69f676c054ba2eef6aaacee863812c5cbb935709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cc:01:ef:42:35:21:f8:90:66:15:07:8a:a4:
3e:72:24:e8:60:f9:3d:d8:7e:72:4f:3f:ad:d1:80:
7b:00:e2:17:ff:fa:52:8a:dc:c2:9a:23:ae:2b:e9:
40:f1:d7:43:ad:e1:9f:06:60:d3:3b:cc:3c:ca:d8:
d8:c1:6b:37:04:62:cb:d1:db:ac:8e:ad:70:64:65:
52:7c:18:33:1a:86:ca:f3:16:34:55:5f:59:94:e1:
9c:1e:30:f5:fe:00:47:86:27:5a:cb:f8:b9:45:87:
b8:b4:46:05:ac:40:09:ec:f3:c6:6f:d0:91:81:f8:
95:27:b1:24:8d:a3:13:a2:be:06:f4:ba:bd:3f:db:
4c:4e:e2:a2:d7:7b:22:eb:e9:fe:f7:21:0a:89:4c:
cd:d8:b6:5e:b7:65:22:9d:73:2e:74:20:c3:ff:98:
6d:00:f1:61:79:5f:01:31:7d:13:aa:6d:15:e6:4b:
7e:c9:d8:31:c7:c1:8e:e7:77:e6:26:d1:f4:5f:c6:
5a:94:76:54:01:46:65:a1:74:ea:8c:a0:0e:6d:85:
3f:2a:94:4b:dd:e4:b9:33:81:2a:b3:30:14:2f:f2:
84:7b:a3:a6:ad:3d:2b:dd:b1:11:71:fb:c6:bf:0b:
47:0c:58:92:04:28:75:d8:e6:14:b2:af:e5:f3:af:
e5:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:F6:76:C0:54:BA:2E:EF:6A:AA:CE:E8:63:81:2C:5C:BB:93:57:09
X509v3 Authority Key Identifier:
keyid:97:D2:3A:E2:8C:D8:60:C8:ED:FD:61:83:56:F8:B3:1F:5E:4D:C9:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l9I64ozYYMjt_WGDVvizH15NySg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:c7:15:68:99:2c:33:c1:e1:e3:9b:62:6e:99:1a:81:e3:38:
03:a1:ce:7f:82:fc:00:c5:0a:62:9d:7f:f8:ee:bd:94:e8:d9:
ec:6c:b2:39:81:48:e1:c7:fd:3d:1c:ff:a5:c8:be:8b:81:b5:
e3:1d:31:7e:23:8a:21:4e:54:22:5b:d4:9c:df:f3:ea:ba:7f:
3e:06:b5:0f:12:6e:36:23:ed:cc:82:05:d5:4b:1c:f8:d2:30:
d4:9c:f9:f6:bb:6e:c8:d4:78:18:81:85:ac:54:c9:dc:42:d8:
07:7f:e0:b9:12:8b:7f:d6:27:20:3e:d5:c2:2a:3d:c8:cd:23:
39:d9:af:74:d7:64:26:02:df:00:c9:8b:4c:17:af:61:3e:50:
80:39:6a:35:5c:56:b4:79:84:92:8d:c6:e2:46:a6:fc:b8:a0:
d9:75:92:52:bb:a0:97:10:dd:41:28:b8:34:61:4a:0a:dc:9f:
66:bf:dd:07:6b:61:3f:fd:10:92:26:cd:b0:e8:ae:87:67:41:
2e:fc:9e:ad:56:78:8c:40:5c:4b:82:75:22:35:0e:dc:dd:bb:
bd:9b:ea:c6:6e:f9:e0:24:ca:11:ba:15:26:fd:c7:2e:cb:be:
b1:0a:d2:aa:7c:16:25:28:11:b5:8e:97:a8:20:ed:d3:0f:c7:
95:4f:ec:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 16:00:43 2025 by rpki-client