Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/9b4900-085a-4a0e-a98f-c6db34c2f7e9/1/IiT9ZQA8OUkKvqqeHv5fICRtx3s.mft
File: IiT9ZQA8OUkKvqqeHv5fICRtx3s.mft (raw, json)
Hash identifier: whDyv4E9VGH5xHnaQHZ2HF6met/w0NMz9f+JrWfn/10=
Subject key identifier: C0:80:9A:F0:13:8B:94:D8:52:8B:95:F5:EE:25:F2:56:7F:8B:83:CE
Authority key identifier: 22:24:FD:65:00:3C:39:49:0A:BE:AA:9E:1E:FE:5F:20:24:6D:C7:7B
Certificate issuer: /CN=2224fd65003c39490abeaa9e1efe5f20246dc77b
Certificate serial: 0196A0519F0F4F42D4335630F5853BE5EEB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IiT9ZQA8OUkKvqqeHv5fICRtx3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/9b4900-085a-4a0e-a98f-c6db34c2f7e9/1/IiT9ZQA8OUkKvqqeHv5fICRtx3s.mft
Manifest number: 0BA1
Signing time: Mon 05 May 2025 12:00:25 +0000
Manifest this update: Mon 05 May 2025 12:00:25 +0000
Manifest next update: Tue 06 May 2025 12:00:25 +0000
Files and hashes: 1: IiT9ZQA8OUkKvqqeHv5fICRtx3s.crl (hash: DJ+i/HKJSsjjKeSbII5g6TNGZcPJqxKRhh34L9zODfo=)
2: gJhF5evxe8g-iDe3hBXACq-nKPk.roa (hash: qM5+n5uw27ndltKhnl7N0lO0fW10CmbET7TyhvcxHok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/9b4900-085a-4a0e-a98f-c6db34c2f7e9/1/IiT9ZQA8OUkKvqqeHv5fICRtx3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/9b4900-085a-4a0e-a98f-c6db34c2f7e9/1/IiT9ZQA8OUkKvqqeHv5fICRtx3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/IiT9ZQA8OUkKvqqeHv5fICRtx3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:51:9f:0f:4f:42:d4:33:56:30:f5:85:3b:e5:ee:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2224fd65003c39490abeaa9e1efe5f20246dc77b
Validity
Not Before: May 5 12:00:25 2025 GMT
Not After : May 6 12:00:25 2025 GMT
Subject: CN=c0809af0138b94d8528b95f5ee25f2567f8b83ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:29:e1:4f:29:ce:f3:0b:76:24:27:fc:27:ed:
d0:d2:2d:a7:d1:fa:52:79:21:ce:b3:dd:ef:8c:46:
2f:97:4d:3f:35:c3:25:83:ab:7c:c1:d7:e7:6f:33:
cc:98:41:a9:ea:a7:ac:2a:3b:68:2c:7d:0a:c1:3b:
5d:dc:b0:7c:10:cb:cc:76:30:14:12:fa:d3:4d:7f:
5e:4a:90:ec:dd:81:1c:2a:3f:c0:ce:00:6b:fc:de:
4b:53:47:d5:b4:1e:07:9e:21:b9:a1:85:61:4b:47:
08:25:ca:86:bd:0b:4f:48:95:8c:6e:f9:e4:fb:18:
54:20:4f:e7:77:5a:ae:44:05:bc:0f:44:18:90:75:
9b:bd:b2:0e:da:6a:f5:82:4b:98:12:e4:1d:3c:d6:
3a:8b:ce:f4:7f:a1:23:83:97:3c:3a:db:45:5f:0a:
58:49:47:8a:46:aa:42:db:9a:38:63:98:a1:d4:a9:
5f:bc:f4:2f:f5:76:87:33:40:5b:e8:3b:98:11:a3:
ce:13:d0:b5:12:87:bd:a4:8f:56:d5:d3:b0:9f:3c:
a0:89:1c:f8:ef:2d:9e:c2:94:d3:c9:ef:d1:00:2a:
5b:40:d6:0b:70:31:f7:2e:45:b4:f7:56:57:a3:b0:
ce:41:05:69:24:b5:91:61:84:3c:ee:38:21:b7:71:
0d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:80:9A:F0:13:8B:94:D8:52:8B:95:F5:EE:25:F2:56:7F:8B:83:CE
X509v3 Authority Key Identifier:
keyid:22:24:FD:65:00:3C:39:49:0A:BE:AA:9E:1E:FE:5F:20:24:6D:C7:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IiT9ZQA8OUkKvqqeHv5fICRtx3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b4900-085a-4a0e-a98f-c6db34c2f7e9/1/IiT9ZQA8OUkKvqqeHv5fICRtx3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b4900-085a-4a0e-a98f-c6db34c2f7e9/1/IiT9ZQA8OUkKvqqeHv5fICRtx3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:02:25:04:78:e1:0f:47:df:57:a5:fa:b2:b2:cc:08:7d:dc:
d0:7e:b4:fd:18:4e:db:2a:32:13:7f:ea:99:14:b8:f3:50:da:
5a:d1:a9:72:fe:db:71:e0:ab:5d:c0:a9:f4:45:1a:44:ea:53:
07:dd:81:76:a2:df:10:80:23:42:cf:73:b6:c8:e0:a7:68:24:
23:17:e1:26:df:92:54:f6:4b:03:6b:19:2f:29:78:4a:52:51:
db:36:df:38:d8:41:64:fc:dc:ed:6c:cc:79:17:83:3e:21:20:
24:6a:ef:99:2b:4e:bd:ec:2a:7a:29:65:bc:51:2e:1e:3d:42:
c2:a8:c7:b3:50:68:3d:0a:e7:0f:e4:95:c8:12:f4:8d:22:61:
0d:de:7a:7b:a2:33:41:c4:d6:09:5e:c8:69:8f:ff:58:fb:4d:
60:ef:04:52:6f:05:af:b5:09:23:2a:0d:74:da:8a:8b:ee:9e:
a3:49:ba:95:6b:33:aa:34:44:dc:33:ee:f9:be:57:55:81:15:
b5:66:15:ec:ee:e8:02:ed:0c:b0:9d:38:70:3d:c8:7e:8f:84:
a1:9c:0c:63:29:85:06:cf:d3:e4:bb:58:f2:67:e4:30:6a:ca:
9e:12:6d:3a:cc:53:0f:80:f2:64:a6:a2:5c:84:6a:0e:91:05:
37:86:38:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 18:50:08 2025 by rpki-client