Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.mft
File: 9iwrcwAEBoJN-8euOIbreGf47G4.mft (raw, json)
Hash identifier: 3PlcMb0kpk/Bz2zuxuFejyZyKYLFpNgIY1o1Fs08ej0=
Subject key identifier: 25:D8:FF:AC:AA:13:CC:1B:26:34:9D:A2:F3:16:B2:2C:E3:AE:AD:5F
Authority key identifier: F6:2C:2B:73:00:04:06:82:4D:FB:C7:AE:38:86:EB:78:67:F8:EC:6E
Certificate issuer: /CN=f62c2b73000406824dfbc7ae3886eb7867f8ec6e
Certificate serial: 0196C5DE7E13C2BAB7B3992D1E2FDB96399A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9iwrcwAEBoJN-8euOIbreGf47G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.mft
Manifest number: 1537
Signing time: Mon 12 May 2025 19:00:14 +0000
Manifest this update: Mon 12 May 2025 19:00:14 +0000
Manifest next update: Tue 13 May 2025 19:00:14 +0000
Files and hashes: 1: 9iwrcwAEBoJN-8euOIbreGf47G4.crl (hash: 2amKENpSLi0z0Fwgt6YpdaSJe9PKLBSBh5Mvpz/q1b4=)
2: ceDg72YenqK4_dFvq8QBAcGglOc.roa (hash: Zws7AOUBGinLUnjZoVBw7x3JkyX35Jt03arL9swrd5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9iwrcwAEBoJN-8euOIbreGf47G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:de:7e:13:c2:ba:b7:b3:99:2d:1e:2f:db:96:39:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f62c2b73000406824dfbc7ae3886eb7867f8ec6e
Validity
Not Before: May 12 19:00:14 2025 GMT
Not After : May 13 19:00:14 2025 GMT
Subject: CN=25d8ffacaa13cc1b26349da2f316b22ce3aead5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:49:ec:73:a1:05:fd:b1:7c:fe:09:27:40:96:
2b:64:0d:bf:76:a3:fb:27:a2:05:af:55:77:d1:f9:
39:db:f9:18:c5:a4:27:92:cd:65:53:00:8e:4c:01:
f1:7e:64:1f:d2:8b:0e:1d:de:da:ac:9c:43:6d:0f:
ce:66:dc:76:29:60:a7:ec:b8:61:99:b2:3c:21:48:
9e:6f:9c:88:4d:11:71:7a:6e:99:64:7d:25:fd:df:
30:8f:dc:6b:00:d2:e0:e3:19:94:9f:13:d2:dc:9b:
6b:cb:51:c3:27:63:2c:e1:52:44:35:ee:be:dd:86:
35:3e:4f:30:8d:c2:e4:3b:7e:bb:81:9f:4b:cb:56:
ac:b9:e8:b1:3f:c5:0e:92:a0:62:65:17:c3:39:80:
0d:8f:f4:60:e0:ac:f2:a9:cc:2d:4c:0d:e3:66:97:
4d:7e:c8:66:68:e6:f0:59:95:94:db:26:94:c7:ad:
72:86:c7:c9:5d:e3:8f:15:ac:07:ee:62:d7:bf:a4:
9d:a7:f0:22:2a:d0:40:0e:47:b9:88:38:e1:25:a6:
3b:0d:b4:c7:4c:d3:9d:81:df:e9:46:4a:3a:e4:c5:
bc:4c:35:ed:0f:31:15:8f:9f:74:97:72:6d:93:b5:
46:78:7a:07:56:5e:1c:ef:36:2f:7f:1d:3d:5c:56:
06:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:D8:FF:AC:AA:13:CC:1B:26:34:9D:A2:F3:16:B2:2C:E3:AE:AD:5F
X509v3 Authority Key Identifier:
keyid:F6:2C:2B:73:00:04:06:82:4D:FB:C7:AE:38:86:EB:78:67:F8:EC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9iwrcwAEBoJN-8euOIbreGf47G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:86:a4:df:84:d3:c7:8a:5e:a4:9c:91:2b:a4:e0:46:81:81:
e4:f5:30:a6:a1:c1:5e:c9:d4:d9:d6:00:cc:fd:9d:2e:39:4e:
23:fa:5d:8c:ca:32:1a:5c:e0:fa:37:59:8f:52:bf:8e:d4:eb:
86:42:bf:a8:45:88:fe:33:00:bf:cf:5c:a5:3e:1f:f9:8c:f1:
fb:e4:25:b3:0c:d4:0a:62:24:24:93:6f:c5:1a:b6:e6:ed:2f:
af:12:85:1c:c3:60:b5:a3:c0:b3:4f:1b:c4:80:d0:ef:24:ca:
54:a7:a8:42:d1:42:2d:f0:bf:1f:ff:71:69:8f:51:83:5b:70:
d2:63:4d:cd:6b:38:f5:eb:36:f9:f4:5a:8f:fc:52:ec:ee:42:
77:50:4c:fb:c5:b5:62:f2:15:5c:2c:13:47:88:01:7c:1f:21:
70:fb:3f:26:23:48:93:c3:10:65:c3:c3:cd:2c:a0:03:70:37:
81:98:96:74:bd:53:cb:1b:30:98:63:ef:e0:fc:f0:89:71:c5:
b8:c8:98:0d:4d:5c:d9:97:a8:53:9d:a1:c6:51:9d:14:83:40:
ee:e3:6b:4b:34:a8:eb:7a:46:4a:6c:d8:80:33:ea:d1:d9:da:
ab:ce:ec:49:07:9f:6b:45:53:2d:59:01:1e:98:3d:e8:cf:4b:
3b:5d:d7:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 23:09:50 2025 by rpki-client