Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft
File: 9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft (raw, json)
Hash identifier: t2H3sN3u7AvCL71YL499u9wSRDUewfKoVtuYcnS1kVw=
Subject key identifier: EE:01:13:D4:9B:81:C0:60:6A:C7:5C:9A:D3:69:9A:10:A4:D7:27:BC
Authority key identifier: F6:95:27:A0:6A:03:5C:BC:AE:CF:00:DA:CA:2F:D8:83:99:CF:9D:12
Certificate issuer: /CN=f69527a06a035cbcaecf00daca2fd88399cf9d12
Certificate serial: 0196B1EA757B99EF57709520F19A73820ECB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9pUnoGoDXLyuzwDayi_Yg5nPnRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft
Manifest number: 0AF6
Signing time: Thu 08 May 2025 22:00:54 +0000
Manifest this update: Thu 08 May 2025 22:00:54 +0000
Manifest next update: Fri 09 May 2025 22:00:54 +0000
Files and hashes: 1: 9pUnoGoDXLyuzwDayi_Yg5nPnRI.crl (hash: RU00G/geTHCZR50MZZPcMourk7rC7UD9OTzRActFlqk=)
2: HnZ1VjQW735MMUi4UDqiepCAdeM.roa (hash: 31a3rYl8qptlSMbknXPbZIkMQ7iUM4ri0d4GzZPfheM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9pUnoGoDXLyuzwDayi_Yg5nPnRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 15:42:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b1:ea:75:7b:99:ef:57:70:95:20:f1:9a:73:82:0e:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69527a06a035cbcaecf00daca2fd88399cf9d12
Validity
Not Before: May 8 22:00:54 2025 GMT
Not After : May 9 22:00:54 2025 GMT
Subject: CN=ee0113d49b81c0606ac75c9ad3699a10a4d727bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:9d:17:f6:86:9a:d5:6f:07:c9:64:95:1d:a8:
ad:06:a1:97:62:0b:2c:4f:3b:93:7f:20:a1:60:12:
74:35:18:96:7c:7c:4a:89:b4:fd:50:e2:11:f2:31:
d2:3f:fb:d0:83:63:fe:9e:78:3e:42:a7:8b:33:5d:
9d:60:ae:97:85:e1:02:e0:18:73:4f:7a:f3:bd:4c:
19:6e:8a:ac:5b:4c:0f:32:4d:c0:c2:12:c6:96:6d:
74:c6:f6:1d:6f:65:fd:ab:8e:e7:fd:ef:fe:4c:05:
87:f4:32:93:56:cd:1d:22:c5:9a:48:55:4c:41:ad:
fb:c9:13:7d:6f:04:7a:dd:d5:54:ac:81:31:7e:74:
b2:a1:28:db:2a:c1:34:3b:b0:5c:35:2d:c7:a0:7d:
bb:6e:65:9f:5c:0d:63:e5:4e:32:51:58:9f:49:18:
7f:e1:45:4d:c1:ac:f0:6d:17:20:67:e0:d0:4e:26:
2d:71:ff:21:d9:16:bc:c8:fd:9c:63:6d:fd:45:a5:
ac:2e:d7:76:60:62:5c:87:db:d9:17:f3:0e:ec:92:
69:14:a6:e8:d5:48:ff:99:91:1c:d4:83:4c:15:21:
0e:9f:34:eb:c6:00:d7:3a:6a:20:49:ca:b1:39:7c:
91:67:28:24:1f:f0:c2:d9:4b:d6:7e:5a:55:81:a8:
7a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:01:13:D4:9B:81:C0:60:6A:C7:5C:9A:D3:69:9A:10:A4:D7:27:BC
X509v3 Authority Key Identifier:
keyid:F6:95:27:A0:6A:03:5C:BC:AE:CF:00:DA:CA:2F:D8:83:99:CF:9D:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pUnoGoDXLyuzwDayi_Yg5nPnRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:7d:8d:c7:e4:d8:ab:55:17:fa:81:57:4a:ad:86:25:83:93:
fa:35:da:64:6a:b7:5d:33:4a:51:e6:9d:30:4d:47:9f:c2:21:
db:26:fc:02:85:77:b2:91:6c:91:d8:71:89:37:6e:4a:80:e5:
52:fa:36:ad:07:34:2b:e3:c0:fe:78:6f:f5:da:7f:83:56:0b:
78:b1:bc:c3:7c:8b:c2:27:ca:e3:99:ca:a2:1a:60:80:59:bf:
48:7d:e6:64:0b:a4:aa:90:f5:b0:3b:71:0d:b3:9e:e8:24:04:
5c:fe:6e:2d:e5:6e:d5:1e:4d:cb:0e:4f:9b:71:84:d9:52:d4:
b7:92:7a:9f:3f:f2:72:9b:d2:4d:95:18:8c:a1:a1:c3:94:9e:
b0:fb:9f:f3:44:37:99:01:ab:f0:d4:84:78:2c:ef:64:db:d5:
57:2f:25:88:95:43:94:95:c5:d3:31:a0:b4:64:ef:02:3a:4e:
eb:e0:00:ab:d1:51:f1:ad:e2:c5:cc:0c:b0:b5:63:be:cf:05:
9d:76:85:65:02:24:58:ff:13:dd:3f:87:78:97:a6:b3:58:db:
7d:3a:3d:dd:89:f3:a0:63:ac:38:d3:6e:96:8b:9c:5e:8b:10:
89:42:86:70:83:9f:8a:ca:ed:32:ea:b8:f2:ee:ed:f7:35:42:
b4:38:93:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 00:35:48 2025 by rpki-client