Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f30d2b-2abd-4872-b17e-fbdf94a11e6f/1/c9-R-zxozrhlDuGaY85As8WSpWs.mft
File: c9-R-zxozrhlDuGaY85As8WSpWs.mft (raw, json)
Hash identifier: tQPgGujcku3tOLPTYD0NfLtsILa1vcA+pHhm98y22Sc=
Subject key identifier: D8:CC:79:EF:BF:37:70:46:74:69:C2:E6:EE:F0:AF:94:4F:15:2A:98
Authority key identifier: 73:DF:91:FB:3C:68:CE:B8:65:0E:E1:9A:63:CE:40:B3:C5:92:A5:6B
Certificate issuer: /CN=73df91fb3c68ceb8650ee19a63ce40b3c592a56b
Certificate serial: 0196C7286D29F355D8A27FF66271B7226D59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c9-R-zxozrhlDuGaY85As8WSpWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f30d2b-2abd-4872-b17e-fbdf94a11e6f/1/c9-R-zxozrhlDuGaY85As8WSpWs.mft
Manifest number: 1532
Signing time: Tue 13 May 2025 01:00:37 +0000
Manifest this update: Tue 13 May 2025 01:00:37 +0000
Manifest next update: Wed 14 May 2025 01:00:37 +0000
Files and hashes: 1: 0amjr-ykBDXEbQi_cMXvoQKh8bk.roa (hash: pJpLLUDDlGjGkAROaE4HmHEdylVREbndXEfDAHQqlPs=)
2: c9-R-zxozrhlDuGaY85As8WSpWs.crl (hash: yY89ciFTsaQom4KMkOkbbVTnEyVZiwbIpbC8qH1/NEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/f30d2b-2abd-4872-b17e-fbdf94a11e6f/1/c9-R-zxozrhlDuGaY85As8WSpWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/f30d2b-2abd-4872-b17e-fbdf94a11e6f/1/c9-R-zxozrhlDuGaY85As8WSpWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/c9-R-zxozrhlDuGaY85As8WSpWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c7:28:6d:29:f3:55:d8:a2:7f:f6:62:71:b7:22:6d:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73df91fb3c68ceb8650ee19a63ce40b3c592a56b
Validity
Not Before: May 13 01:00:37 2025 GMT
Not After : May 14 01:00:37 2025 GMT
Subject: CN=d8cc79efbf3770467469c2e6eef0af944f152a98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0b:ab:29:bb:92:dc:2e:f8:fe:9e:7c:db:a5:
a4:80:b3:fb:e2:d1:1b:f2:96:8b:6f:7f:ac:24:9b:
ce:ba:21:3b:f6:ff:d1:83:b2:8a:3f:04:09:7c:a3:
b4:7f:70:0b:c3:82:5c:ba:61:07:02:bd:cb:df:f3:
d6:5c:d3:f7:f6:a5:aa:ec:1f:b9:49:fe:09:4b:67:
08:62:c7:5d:61:17:e5:de:56:1a:f1:d8:5d:2b:5f:
b4:57:a7:95:6e:53:55:68:e6:cd:9b:b8:e4:7d:54:
d8:da:17:47:0d:52:ea:9a:4c:86:1b:66:07:a9:91:
5b:f4:66:86:f7:f7:a1:01:73:21:5b:64:09:56:ff:
75:68:95:7d:25:fa:ce:62:76:80:79:60:a6:ff:52:
0f:91:c0:65:14:c6:0f:e6:1f:09:41:89:ed:d1:36:
dd:70:3b:cd:65:05:84:d2:f9:5f:98:b6:1c:9a:3d:
6f:08:18:d3:55:2f:00:0b:72:a5:a3:80:e1:a1:d6:
b0:74:76:e6:24:fb:dc:d3:81:c8:a2:7b:0e:78:43:
54:f1:db:c0:3d:b6:ce:cb:89:b3:2b:21:e6:88:e8:
59:e3:ed:5f:ad:dd:4d:38:e3:f7:a6:56:9d:60:6f:
b4:47:3c:15:be:fe:83:29:f0:07:18:1d:83:41:4e:
80:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:CC:79:EF:BF:37:70:46:74:69:C2:E6:EE:F0:AF:94:4F:15:2A:98
X509v3 Authority Key Identifier:
keyid:73:DF:91:FB:3C:68:CE:B8:65:0E:E1:9A:63:CE:40:B3:C5:92:A5:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9-R-zxozrhlDuGaY85As8WSpWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f30d2b-2abd-4872-b17e-fbdf94a11e6f/1/c9-R-zxozrhlDuGaY85As8WSpWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f30d2b-2abd-4872-b17e-fbdf94a11e6f/1/c9-R-zxozrhlDuGaY85As8WSpWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:c1:93:8e:d4:64:97:09:3c:e6:d5:79:8c:99:cc:cc:08:7e:
83:23:d6:fd:aa:5f:6c:d3:2d:10:28:71:f9:9a:1f:4d:58:25:
b7:8c:c5:57:c6:93:9b:d0:70:59:12:1e:9c:4d:da:f5:8c:47:
b4:93:61:30:75:4e:b0:34:67:f2:1c:3b:7b:3b:8f:5a:67:ac:
cb:5c:4c:a3:40:dd:5c:b6:9c:d8:c0:9c:8e:0a:2e:e9:a1:4f:
91:c6:70:34:f9:98:08:ac:94:89:65:9a:7e:fb:fb:65:c9:20:
15:07:f5:98:62:54:d6:2b:20:58:22:8b:b8:0f:4d:f6:b1:2a:
7f:eb:ed:35:c2:8b:be:fe:1f:66:cd:88:3b:0f:f9:08:e2:d1:
00:7a:07:a7:29:21:7f:85:69:ec:a4:d9:07:c6:f9:bc:13:33:
1e:18:33:67:ea:c0:d7:e0:e9:d2:a3:8f:c0:0d:ad:b4:bc:ab:
76:9e:11:de:ac:6c:fc:2a:f5:eb:da:42:bc:39:8a:87:11:7b:
c8:ae:fc:37:1e:02:91:e4:e4:27:24:51:de:3a:ed:8e:55:97:
94:5c:5d:61:08:0f:bd:d0:c9:5d:50:77:30:75:25:b2:6f:33:
53:5f:16:f3:a5:ad:72:ac:70:48:ca:2b:99:b4:4e:82:7e:22:
56:86:43:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 09:33:24 2025 by rpki-client