Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft
File: 9QtrQlYAolptwTLeUUeX4qpLAkc.mft (raw, json)
Hash identifier: 0Rhx4m9XYmVSqLNvfHbeT+O0x+gXieaEkntRziXseY8=
Subject key identifier: AD:49:CC:18:07:E0:52:CF:FC:2F:42:7D:68:74:2C:E7:61:54:35:A4
Authority key identifier: F5:0B:6B:42:56:00:A2:5A:6D:C1:32:DE:51:47:97:E2:AA:4B:02:47
Certificate issuer: /CN=f50b6b425600a25a6dc132de514797e2aa4b0247
Certificate serial: 01969FAD32D010BBFCD38E7412A16D2C6F41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9QtrQlYAolptwTLeUUeX4qpLAkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft
Manifest number: 1526
Signing time: Mon 05 May 2025 09:00:50 +0000
Manifest this update: Mon 05 May 2025 09:00:50 +0000
Manifest next update: Tue 06 May 2025 09:00:50 +0000
Files and hashes: 1: 9QtrQlYAolptwTLeUUeX4qpLAkc.crl (hash: DuJAlDuAzOHj1Kw3aqrOSEC6K0Z0r3DhL+CgyXTb9p0=)
2: LF_3HwZmRrCki2d-FP5TfnY-Yfo.roa (hash: OqUUHUSkyKdGpgaBU1hHW7IYtyTJfajGz9ID3t644ac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9QtrQlYAolptwTLeUUeX4qpLAkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 08:37:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:ad:32:d0:10:bb:fc:d3:8e:74:12:a1:6d:2c:6f:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f50b6b425600a25a6dc132de514797e2aa4b0247
Validity
Not Before: May 5 09:00:50 2025 GMT
Not After : May 6 09:00:50 2025 GMT
Subject: CN=ad49cc1807e052cffc2f427d68742ce7615435a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:64:89:72:72:ad:f6:4f:14:6c:b1:4d:32:e3:
b9:d6:52:13:e4:54:e6:5d:75:30:98:89:19:2b:2d:
6f:75:73:16:57:3f:a0:9f:48:11:88:24:6f:57:f6:
ec:58:58:70:2b:11:06:9a:76:18:4b:36:fb:f4:5f:
34:8e:bd:f1:c8:79:3f:76:f2:53:2c:48:c5:38:ac:
04:3a:b8:0a:15:8f:94:29:c7:09:c0:22:a6:a5:0e:
d4:ed:6a:b9:3f:82:9e:7c:35:79:b9:a4:95:86:f0:
d0:fd:84:0b:2e:ef:1d:db:c2:e5:db:02:f4:88:cd:
fb:3a:bb:6e:c8:b2:28:34:71:9a:6e:50:6f:a6:1a:
07:9b:34:ba:c3:8f:b9:42:97:b3:a3:ee:bb:81:f0:
e9:92:ea:20:b8:02:5f:48:ec:32:8a:1c:cc:00:fb:
21:c9:e2:61:e0:77:72:f1:17:d2:9d:9b:72:93:a9:
38:7e:c6:da:6e:75:04:36:bb:fa:b5:a4:7f:c8:5a:
41:a2:2e:9c:2a:50:da:74:ce:47:77:d8:4c:cd:fd:
39:d7:da:7a:56:f2:91:a4:87:72:ad:87:68:70:95:
fd:94:2e:41:e6:53:27:ea:51:80:50:3c:f6:9c:9a:
19:d9:3b:f2:45:42:09:d9:19:5d:e6:58:61:78:ac:
9b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:49:CC:18:07:E0:52:CF:FC:2F:42:7D:68:74:2C:E7:61:54:35:A4
X509v3 Authority Key Identifier:
keyid:F5:0B:6B:42:56:00:A2:5A:6D:C1:32:DE:51:47:97:E2:AA:4B:02:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QtrQlYAolptwTLeUUeX4qpLAkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:33:92:8e:ea:ee:a7:21:00:45:a8:9a:ea:60:e7:81:7f:c9:
54:21:3e:b4:a0:dd:f6:6c:16:a8:82:a8:cd:d6:02:cd:e8:b3:
e7:2f:0f:d9:5e:23:16:8f:9a:94:ce:aa:dc:7f:4a:74:4d:02:
bc:43:2f:3d:fb:5f:c5:f8:7e:0a:ce:8e:4f:e6:a4:38:41:2c:
5c:f6:f6:17:9f:31:15:14:05:38:d6:4f:1a:31:55:b7:d0:27:
53:16:45:1f:23:a6:1b:b1:ed:af:d6:d1:98:36:77:8b:73:14:
15:b5:c8:ac:31:d3:eb:59:9e:3d:9b:81:6d:39:7d:d4:d5:37:
d8:a2:c8:2e:4e:9c:35:58:48:aa:ce:18:66:19:dd:19:29:9f:
0c:f7:44:c0:35:18:4b:4f:eb:8a:d6:b9:d4:3e:a4:c7:48:82:
15:c3:ef:50:a0:f4:e6:8b:24:55:f4:df:0e:ec:dd:f0:b5:5e:
40:e5:e1:56:d1:ae:a6:cc:c9:53:a2:fb:06:f1:36:dc:30:fc:
23:27:fa:ba:b4:e0:05:bd:e5:79:df:de:0a:af:fb:6f:33:b5:
5c:1c:5b:36:d5:ea:d6:1b:58:f0:80:3a:93:6b:ac:2b:99:58:
64:e8:f1:a5:52:19:86:4a:82:92:78:ea:72:2f:c3:7a:94:a0:
f1:2b:c8:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 11:58:26 2025 by rpki-client