Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.mft
File: 9XwaqtuDIN2EMjVFjPLFy_RwStY.mft (raw, json)
Hash identifier: FHLny4POt1ye+rAfkgtbIbPkSATkP0yQleILeEgvHes=
Subject key identifier: 08:3D:22:8E:35:C5:F2:5E:C7:18:89:A2:88:36:29:0D:0E:A0:07:10
Authority key identifier: F5:7C:1A:AA:DB:83:20:DD:84:32:35:45:8C:F2:C5:CB:F4:70:4A:D6
Certificate issuer: /CN=f57c1aaadb8320dd843235458cf2c5cbf4704ad6
Certificate serial: 0196B9DA8C8F90EF10162262C88E7AD4373F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XwaqtuDIN2EMjVFjPLFy_RwStY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.mft
Manifest number: 071E
Signing time: Sat 10 May 2025 11:00:29 +0000
Manifest this update: Sat 10 May 2025 11:00:29 +0000
Manifest next update: Sun 11 May 2025 11:00:29 +0000
Files and hashes: 1: 9XwaqtuDIN2EMjVFjPLFy_RwStY.crl (hash: Jpt2M16yFND94oTKk7XN+2mERNcomcT+DLRVvCaWKu0=)
2: MP9C5tlE4sTN1JTDz4jlrkAW_YU.roa (hash: 2Qb7MzrDpByF3hW1GYmCH1FHWyuhYVmQ2YbJ0M55AAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XwaqtuDIN2EMjVFjPLFy_RwStY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:da:8c:8f:90:ef:10:16:22:62:c8:8e:7a:d4:37:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57c1aaadb8320dd843235458cf2c5cbf4704ad6
Validity
Not Before: May 10 11:00:29 2025 GMT
Not After : May 11 11:00:29 2025 GMT
Subject: CN=083d228e35c5f25ec71889a28836290d0ea00710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a5:5c:47:1f:41:77:33:6c:5f:8b:e4:1d:c8:
2f:58:9a:94:ed:90:0d:a7:01:b5:b5:99:44:f7:71:
8e:87:c3:09:13:59:72:0f:80:a0:25:8a:77:95:48:
ec:0d:30:c0:84:85:7e:a8:10:95:06:cc:9b:62:14:
7d:b7:7c:d6:9a:0b:81:88:4b:6b:c9:cc:1f:d5:64:
72:25:96:1b:9d:e7:4a:3e:b2:ee:6f:24:41:d7:97:
a5:3c:29:45:5e:23:9a:63:50:cf:51:a4:85:20:66:
76:ac:2e:68:d9:17:bf:60:9d:e5:e1:66:68:be:d3:
d0:c0:d5:e5:10:7a:fb:a2:3c:01:5d:68:0b:46:fe:
ab:68:ab:5a:6f:0d:44:45:2b:13:fd:f1:f8:57:9d:
3f:dd:6e:cb:4a:72:d1:39:de:09:78:de:f3:c9:6b:
68:db:d0:7f:5f:51:71:86:49:f0:44:f9:b8:62:6b:
10:00:dc:74:8d:15:3a:ad:88:86:2c:69:83:cc:0c:
7c:f6:f9:96:08:b3:37:6e:49:a7:c5:0b:d9:6d:18:
89:01:3f:f1:55:ad:ff:30:72:b0:c2:2f:c2:b6:be:
12:02:ed:96:72:9e:63:59:85:5e:04:79:be:5d:d8:
53:f0:a7:7f:d9:a7:a7:22:e1:af:19:21:07:de:1b:
2d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:3D:22:8E:35:C5:F2:5E:C7:18:89:A2:88:36:29:0D:0E:A0:07:10
X509v3 Authority Key Identifier:
keyid:F5:7C:1A:AA:DB:83:20:DD:84:32:35:45:8C:F2:C5:CB:F4:70:4A:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XwaqtuDIN2EMjVFjPLFy_RwStY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:9a:bb:e8:4b:fc:3c:df:d9:8d:7d:d4:d6:89:81:3b:d6:a6:
17:4f:2c:91:30:02:3f:77:cb:58:55:f6:ec:62:51:4f:69:22:
55:75:10:5d:89:4c:7b:cf:e9:fd:69:44:6d:2a:68:59:64:40:
c2:b4:39:cd:0d:b1:79:f6:9e:f0:70:ef:0d:43:91:61:5e:20:
7b:f3:94:a2:8c:54:20:b2:44:29:82:40:a0:44:cf:28:4c:6b:
db:13:00:d2:2b:52:fc:1a:2f:96:cc:03:ef:ef:d1:09:c3:c9:
61:8b:9b:45:d4:a2:dc:d2:aa:03:06:04:bb:b9:8c:df:07:12:
e4:34:1c:b3:27:33:64:fc:14:56:b7:06:7d:30:9b:ac:bb:d1:
64:09:e7:18:70:d0:32:84:71:d5:ca:17:31:29:45:3f:7b:2b:
ac:cf:16:7c:6e:33:84:14:d9:05:a0:ef:33:d0:4d:4d:b7:b4:
d1:9a:55:cb:13:ad:4c:bd:c5:19:16:9e:8b:ef:4d:45:3c:25:
bd:0e:e2:80:7a:a3:d0:f2:2f:3b:ad:91:e1:3f:f8:45:4d:e8:
ea:5c:3c:54:01:21:de:78:7c:76:06:d7:cf:13:72:ce:6a:31:
82:16:3d:1f:88:05:05:3b:25:43:ba:59:11:19:8b:5d:4c:f2:
8a:e4:f5:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:39:17 2025 by rpki-client