Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.mft
File: 9YmCO6FHWAB83oc69L9H_Zw5c3s.mft (raw, json)
Hash identifier: LVmC/CKr4lWodCiFL9+MjD6SF0RjpA6meIR+VoKfqiM=
Subject key identifier: 1A:52:CD:AC:F0:24:74:C4:75:93:8C:E6:A2:1F:76:9D:D6:DB:73:2E
Authority key identifier: F5:89:82:3B:A1:47:58:00:7C:DE:87:3A:F4:BF:47:FD:9C:39:73:7B
Certificate issuer: /CN=f589823ba14758007cde873af4bf47fd9c39737b
Certificate serial: 0196D099144BF114DC2D15E933115EFB8F5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9YmCO6FHWAB83oc69L9H_Zw5c3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.mft
Manifest number: 101F
Signing time: Wed 14 May 2025 21:00:15 +0000
Manifest this update: Wed 14 May 2025 21:00:15 +0000
Manifest next update: Thu 15 May 2025 21:00:15 +0000
Files and hashes: 1: 9YmCO6FHWAB83oc69L9H_Zw5c3s.crl (hash: zQYYB/Xm7+zELyAI+cYlkPUIQ+ZtSIRYLXmUEJZhjGc=)
2: cwCE2hhjusn86QvOu2pcA9KTbHA.roa (hash: NxYhK1mgxO/73LOxU0Rf/stDIA61i1imewNDavbu5Zs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/9YmCO6FHWAB83oc69L9H_Zw5c3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 21:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d0:99:14:4b:f1:14:dc:2d:15:e9:33:11:5e:fb:8f:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f589823ba14758007cde873af4bf47fd9c39737b
Validity
Not Before: May 14 21:00:15 2025 GMT
Not After : May 15 21:00:15 2025 GMT
Subject: CN=1a52cdacf02474c475938ce6a21f769dd6db732e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:1b:df:56:99:24:2f:83:d7:32:97:0f:4c:af:
08:81:b7:87:3a:fe:d2:a4:d6:07:ef:c7:d2:90:9a:
41:aa:3a:00:57:91:bf:81:1d:2d:5f:96:b2:f4:ec:
29:34:55:98:35:4e:89:06:48:a1:64:78:58:f3:4f:
0a:a0:5c:e8:ea:10:fd:76:de:a5:86:28:94:a7:f8:
e2:6c:4a:72:5a:12:71:04:43:c0:ab:47:af:4b:e0:
3d:b4:dc:96:88:81:ca:2d:9f:ef:2c:f9:7b:ee:48:
56:6b:6a:26:bb:b4:75:07:b9:86:63:7f:55:87:e7:
b1:b0:d3:0c:35:89:fa:f9:57:bc:81:21:1e:cf:b5:
7e:86:7b:56:50:6d:c5:40:f6:ca:a1:34:2e:ea:ef:
a7:08:d3:00:74:fb:90:b7:13:25:61:ac:d3:02:27:
2b:06:0a:55:5e:e7:1d:24:52:f2:cd:02:f2:cd:27:
31:2c:93:01:df:88:db:81:45:25:c6:f7:0d:66:47:
6a:0a:57:55:42:9b:ad:ce:5b:e5:e4:71:ae:f2:3b:
bd:47:2a:11:e3:9f:6e:93:4d:a2:d3:bb:7c:ce:90:
96:24:6b:73:30:d4:c3:aa:ae:8e:5e:95:92:57:c3:
f3:47:c7:3a:c1:8a:d4:ce:fa:75:11:be:2b:c7:b5:
fa:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:52:CD:AC:F0:24:74:C4:75:93:8C:E6:A2:1F:76:9D:D6:DB:73:2E
X509v3 Authority Key Identifier:
keyid:F5:89:82:3B:A1:47:58:00:7C:DE:87:3A:F4:BF:47:FD:9C:39:73:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9YmCO6FHWAB83oc69L9H_Zw5c3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:d4:40:8d:e0:48:81:e8:c5:e5:c3:5c:af:96:d4:4d:68:b0:
c4:59:2f:79:83:60:b7:32:b2:00:d0:66:4e:6e:1f:bb:0d:1e:
30:0d:e2:3b:1f:49:67:6c:2b:fc:92:a7:fd:3e:58:4f:81:64:
a2:6e:80:2c:aa:f3:9c:68:f3:08:77:e2:f8:9c:26:98:eb:0b:
4b:dd:55:49:58:43:48:aa:dc:61:00:7b:ca:86:f4:9f:4c:7f:
02:8c:6f:11:b0:aa:fb:aa:93:0d:41:97:48:52:de:4c:d7:41:
bb:ae:1f:9f:ea:da:a9:42:c7:f2:c0:37:33:00:69:09:a6:53:
04:fe:02:05:d8:d5:fc:ab:50:d6:27:8b:af:2d:f9:bd:e8:5e:
ae:00:32:fc:f1:19:12:d7:28:b3:b3:b6:10:a7:e4:98:55:5a:
6f:5f:d7:75:cf:1c:16:a8:90:3a:1b:34:11:61:b3:b6:73:35:
78:7c:53:1d:5d:56:22:70:ba:f1:47:50:ec:fc:2d:b3:55:a3:
d0:95:5d:69:b0:a2:20:b0:9c:94:38:55:72:c0:cb:54:b4:43:
b9:f2:9f:50:85:84:24:e2:24:ce:39:78:1a:2a:23:ac:0e:bb:
30:cc:57:95:27:6e:30:58:52:30:38:4a:78:f6:ba:26:0e:7b:
81:c8:a2:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 04:26:22 2025 by rpki-client