Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/1e9621-626e-4032-9b54-76e3349c97c2/1/9Y3yxGnJeIlfhFgCTFBugByPsho.mft
File: 9Y3yxGnJeIlfhFgCTFBugByPsho.mft (raw, json)
Hash identifier: pVSboPRXzd4Pcr7paZNSsB7cBpdejSr2BObwXcvf6/k=
Subject key identifier: 93:E1:20:F9:1B:FA:7F:46:57:EC:87:FB:28:9E:01:F6:4A:FB:CE:50
Authority key identifier: F5:8D:F2:C4:69:C9:78:89:5F:84:58:02:4C:50:6E:80:1C:8F:B2:1A
Certificate issuer: /CN=f58df2c469c978895f8458024c506e801c8fb21a
Certificate serial: 01969D87AEC2BB8884B196D7B061EBC367A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Y3yxGnJeIlfhFgCTFBugByPsho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/1e9621-626e-4032-9b54-76e3349c97c2/1/9Y3yxGnJeIlfhFgCTFBugByPsho.mft
Manifest number: 12AB
Signing time: Sun 04 May 2025 23:00:36 +0000
Manifest this update: Sun 04 May 2025 23:00:36 +0000
Manifest next update: Mon 05 May 2025 23:00:36 +0000
Files and hashes: 1: 9Y3yxGnJeIlfhFgCTFBugByPsho.crl (hash: kWrXcK1G9z+ukqezsX8mfv93yXpHAV8aOvjaYlcCI+c=)
2: uTgF90O7aHLO_G7cSzTbj_nzdao.roa (hash: lwZMpyCYU1xDcN6IVFSHMP6G+054GMvXirawB6lbtsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/1e9621-626e-4032-9b54-76e3349c97c2/1/9Y3yxGnJeIlfhFgCTFBugByPsho.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/1e9621-626e-4032-9b54-76e3349c97c2/1/9Y3yxGnJeIlfhFgCTFBugByPsho.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Y3yxGnJeIlfhFgCTFBugByPsho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:87:ae:c2:bb:88:84:b1:96:d7:b0:61:eb:c3:67:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f58df2c469c978895f8458024c506e801c8fb21a
Validity
Not Before: May 4 23:00:36 2025 GMT
Not After : May 5 23:00:36 2025 GMT
Subject: CN=93e120f91bfa7f4657ec87fb289e01f64afbce50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:47:b0:64:c3:fe:9f:01:92:b7:7d:e5:07:98:
ad:05:bf:40:ee:1f:95:30:03:53:fd:2a:e9:09:95:
30:e1:37:d0:a9:88:62:28:87:1a:18:37:97:23:bb:
f7:16:ed:6e:67:70:ce:82:5a:97:dc:7d:37:bc:9f:
f0:99:da:d0:08:6e:fc:17:3e:4d:10:38:c8:93:54:
22:f5:2e:52:a3:58:9c:8f:0d:b7:14:55:e9:54:1f:
82:c2:2f:07:52:04:c3:61:d8:22:8a:0e:60:f0:79:
dd:8c:00:4f:fa:98:5b:2f:61:24:98:75:ea:13:84:
9f:ed:22:65:bd:6d:0e:7c:fd:e3:f3:bd:fb:d3:df:
d4:e4:2c:a9:86:24:86:a0:95:7c:eb:cb:75:15:e9:
5d:b0:cb:bd:03:92:09:2c:e2:bd:c7:bd:24:01:65:
60:99:4d:17:e0:a5:35:a8:50:05:27:eb:c7:ec:dd:
4e:94:45:41:07:b4:df:92:95:21:4b:e9:f9:82:99:
21:2b:a8:9c:97:85:b4:11:3f:f1:63:e9:1e:15:c4:
fa:a6:32:c1:3e:09:bd:cb:24:14:b4:30:a3:d3:08:
bb:74:10:eb:29:be:af:3f:d9:8d:da:98:70:8a:13:
6f:4b:d0:a1:9d:83:98:38:ca:dc:3d:c2:e6:b0:2e:
c8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:E1:20:F9:1B:FA:7F:46:57:EC:87:FB:28:9E:01:F6:4A:FB:CE:50
X509v3 Authority Key Identifier:
keyid:F5:8D:F2:C4:69:C9:78:89:5F:84:58:02:4C:50:6E:80:1C:8F:B2:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Y3yxGnJeIlfhFgCTFBugByPsho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1e9621-626e-4032-9b54-76e3349c97c2/1/9Y3yxGnJeIlfhFgCTFBugByPsho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1e9621-626e-4032-9b54-76e3349c97c2/1/9Y3yxGnJeIlfhFgCTFBugByPsho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:bb:d0:4e:c4:7f:09:f2:9d:16:01:37:43:c9:59:d1:ed:00:
61:aa:b7:7e:84:e1:34:62:7f:45:ec:39:fb:3a:73:d1:c3:e5:
36:2c:dc:5b:12:06:c7:6d:ba:59:52:aa:4c:f7:3e:c0:02:32:
7a:31:64:43:6b:44:b0:7c:aa:65:ca:72:fb:2b:75:a7:0d:c4:
97:33:ce:8c:b1:2b:7c:ec:ab:67:73:05:ed:cb:96:14:a5:44:
73:c5:93:3d:d3:a2:73:3a:92:1e:1f:bb:3d:ed:47:d6:4e:a3:
7e:aa:c7:64:89:e3:b3:0a:16:29:97:d3:e3:ad:f6:b3:da:e7:
0a:44:00:5a:c3:d2:24:2c:9f:d4:02:e8:75:9e:8f:3b:93:e5:
da:f6:c7:ae:7b:64:a5:8c:75:62:17:06:67:90:0c:31:2e:97:
d9:eb:46:e5:5c:61:ad:54:65:9f:8a:cc:31:68:6a:97:c7:11:
e4:26:4e:b0:42:4d:f9:3e:9d:56:a0:e9:20:a8:fc:ff:67:a5:
ae:c9:f4:9c:0f:a6:e8:6e:66:9c:46:b9:29:b8:64:f5:85:70:
39:00:4b:92:84:c6:10:c6:f0:61:51:4d:4a:80:d8:93:be:a9:
e3:b2:a0:08:1c:97:2a:78:cf:ab:93:ad:ae:88:97:7d:f5:7d:
20:50:d5:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 08:52:24 2025 by rpki-client