Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.mft
File: 90REoIZ_zKmjVpwf0JITNUajf0s.mft (raw, json)
Hash identifier: dapsIBS9KJ8iBgkyhU7ZoT3N9p+wtVSgFNZdt3VQ8zg=
Subject key identifier: E1:32:9B:90:E8:C6:43:1B:93:45:C2:9B:8C:CB:AD:EF:1E:63:47:28
Authority key identifier: F7:44:44:A0:86:7F:CC:A9:A3:56:9C:1F:D0:92:13:35:46:A3:7F:4B
Certificate issuer: /CN=f74444a0867fcca9a3569c1fd092133546a37f4b
Certificate serial: 0196A879397000F62B559E7CF1C9CA6A3CA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/90REoIZ_zKmjVpwf0JITNUajf0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.mft
Manifest number: 14B9
Signing time: Wed 07 May 2025 02:00:38 +0000
Manifest this update: Wed 07 May 2025 02:00:38 +0000
Manifest next update: Thu 08 May 2025 02:00:38 +0000
Files and hashes: 1: 90REoIZ_zKmjVpwf0JITNUajf0s.crl (hash: L8le3sMABag3ej1DoVLQKREj3gxoN+SPEMcpPu8w4eA=)
2: b9lO4JuPU_XGDEIOyFIyTFoywlI.roa (hash: sqBT/bZlTljLi10b8NxaSvoAN6hXGjYEttvRj2Pm9N4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/90REoIZ_zKmjVpwf0JITNUajf0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a8:79:39:70:00:f6:2b:55:9e:7c:f1:c9:ca:6a:3c:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f74444a0867fcca9a3569c1fd092133546a37f4b
Validity
Not Before: May 7 02:00:38 2025 GMT
Not After : May 8 02:00:38 2025 GMT
Subject: CN=e1329b90e8c6431b9345c29b8ccbadef1e634728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b8:75:65:1e:85:71:e9:ef:c3:f2:58:e2:df:
04:87:15:9f:6f:78:c5:a6:d7:05:9a:4f:9c:38:93:
01:f1:85:fb:82:e7:e7:cf:a7:9c:f0:57:54:07:ea:
f1:75:ce:5d:61:a8:be:0b:33:54:55:40:10:00:24:
2a:5b:b2:83:d4:96:d0:9d:35:90:12:99:c2:79:58:
b5:5c:ca:70:3f:f8:34:eb:d2:89:79:c1:07:26:ae:
c8:fd:04:d6:ad:82:4f:e4:52:9e:0b:14:c4:c8:1e:
c0:c7:58:fa:ec:28:33:84:29:6b:3e:11:0e:32:32:
94:53:54:b1:c5:f8:8a:41:86:37:06:74:24:fe:29:
67:20:c5:8d:f2:e4:bb:d8:20:3e:c7:24:61:df:bd:
bc:a9:dc:80:59:e7:ad:6a:9b:99:27:b3:f0:2c:6c:
fe:20:22:26:90:28:1c:30:fa:36:63:24:52:4a:27:
e8:af:d7:16:85:53:52:39:e0:68:65:bc:f1:da:ac:
a8:c6:c0:dd:50:d8:79:2e:bb:5a:5e:7e:86:cc:1a:
71:c5:a2:c7:ad:4a:89:3f:b9:1b:75:82:c2:3c:74:
0b:b5:d6:a5:eb:d6:87:9c:e0:4d:8e:ad:f1:dc:21:
b9:e4:63:d7:9f:d2:f9:8b:3e:3b:d9:ef:60:9f:5f:
3b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:32:9B:90:E8:C6:43:1B:93:45:C2:9B:8C:CB:AD:EF:1E:63:47:28
X509v3 Authority Key Identifier:
keyid:F7:44:44:A0:86:7F:CC:A9:A3:56:9C:1F:D0:92:13:35:46:A3:7F:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/90REoIZ_zKmjVpwf0JITNUajf0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:80:ab:3f:8b:bb:ae:69:85:1f:0e:5b:19:fa:54:e4:01:a4:
f1:16:36:d5:16:53:3f:e0:a8:c9:e8:6c:be:4a:b2:3c:3e:33:
9e:c9:72:af:64:c5:48:a8:66:19:5e:bd:28:b1:e4:2b:31:ac:
7d:74:3a:be:4a:7a:18:50:01:34:a4:f9:1f:a8:10:53:17:1c:
c6:d2:04:1f:76:bf:93:a0:b0:81:4a:3d:8a:01:57:27:ee:20:
51:d7:79:c1:46:60:09:ed:e3:e8:ee:aa:33:90:c0:d9:8a:6f:
15:e3:cb:b1:4d:3d:a5:aa:77:1d:fe:96:dd:2d:e3:9a:7c:7b:
e8:07:05:32:d1:a4:1c:e1:db:72:d7:c2:79:bf:2b:3d:eb:90:
2d:48:c0:8d:8e:b5:ac:95:86:52:9d:28:14:77:d6:d5:56:23:
bd:f0:41:c6:84:46:90:f1:55:48:42:e6:99:c9:c8:31:ea:0b:
e2:35:bc:82:12:88:70:68:9f:75:d0:12:d4:34:89:60:65:51:
3e:44:c2:a3:f7:27:7c:f6:af:78:d0:d3:7c:63:03:bd:9b:8b:
d9:46:77:12:fc:2f:7b:9c:5f:71:c6:0f:9a:41:8b:b1:76:b8:
8b:f4:2a:30:12:6f:fb:43:c5:01:ec:b7:10:fe:0b:38:5d:52:
e6:27:9d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 05:47:16 2025 by rpki-client