Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.mft
File: 9X2cj_wgS2294BIFMDvfi1BjiqY.mft (raw, json)
Hash identifier: jI/nAM/Q8J8RQlJ0cSLMSVKavmTg02A6bOQIUUYsKF8=
Subject key identifier: 09:9B:7D:E2:6A:85:95:CA:A7:C6:04:DB:E5:04:95:6A:B5:7E:62:91
Authority key identifier: F5:7D:9C:8F:FC:20:4B:6D:BD:E0:12:05:30:3B:DF:8B:50:63:8A:A6
Certificate issuer: /CN=f57d9c8ffc204b6dbde01205303bdf8b50638aa6
Certificate serial: 01967B697A25BDBB2175B09FA3FD8F1C996A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9X2cj_wgS2294BIFMDvfi1BjiqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.mft
Manifest number: 17
Signing time: Mon 28 Apr 2025 08:00:32 +0000
Manifest this update: Mon 28 Apr 2025 08:00:32 +0000
Manifest next update: Tue 29 Apr 2025 08:00:32 +0000
Files and hashes: 1: 9X2cj_wgS2294BIFMDvfi1BjiqY.crl (hash: GRhmftyUmgDzMg8ayh4G/UnwLCo5Q99SP1XJPZBzJcQ=)
2: blFPI1QT3vGyXWS1-axkqAT7T1o.roa (hash: 9ZF4v61ldXuDLq/JdKEO0mrKJOTY13vVthxskJAXAEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9X2cj_wgS2294BIFMDvfi1BjiqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:69:7a:25:bd:bb:21:75:b0:9f:a3:fd:8f:1c:99:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57d9c8ffc204b6dbde01205303bdf8b50638aa6
Validity
Not Before: Apr 28 08:00:32 2025 GMT
Not After : Apr 29 08:00:32 2025 GMT
Subject: CN=099b7de26a8595caa7c604dbe504956ab57e6291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2b:c3:fb:41:19:90:52:8b:e5:86:24:b7:97:
79:b6:47:41:9c:d6:7e:74:67:50:6a:60:31:c6:7a:
e6:05:cb:9b:2f:36:8e:9d:69:dc:22:07:0c:85:b8:
35:17:f5:71:5f:b0:1f:81:fa:b9:4c:e9:03:9e:1c:
7b:ab:38:e0:88:c6:33:d9:c3:66:e6:75:90:a4:33:
64:ff:82:e3:dd:69:23:72:0e:49:ec:22:d7:37:4a:
26:10:f6:8a:70:ed:36:90:24:79:f5:c8:54:05:9b:
fb:b4:f2:b5:e7:ab:83:fe:1a:28:98:ad:0d:d6:32:
d1:a4:0c:6c:19:8e:6d:6e:35:ce:62:9a:43:da:8d:
f0:81:72:18:29:78:28:f4:36:1b:aa:8b:62:75:bf:
87:1c:f5:99:8e:30:47:a9:77:8f:ed:4d:58:61:ae:
e7:d5:ee:81:2a:53:a2:55:f1:b9:64:b7:a1:f8:d7:
05:52:b0:99:de:fc:fb:61:cb:77:30:bc:f3:22:8a:
3c:47:22:63:0c:7f:95:60:1c:45:34:f7:1c:a2:b6:
72:0f:bc:14:25:05:c9:fb:1f:f0:c9:0e:6e:b1:6e:
73:4a:6a:01:1b:a1:43:2f:bc:69:7e:1e:bd:c4:98:
6d:83:fb:d5:b2:f6:53:db:86:92:56:0e:e5:59:58:
f0:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:9B:7D:E2:6A:85:95:CA:A7:C6:04:DB:E5:04:95:6A:B5:7E:62:91
X509v3 Authority Key Identifier:
keyid:F5:7D:9C:8F:FC:20:4B:6D:BD:E0:12:05:30:3B:DF:8B:50:63:8A:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9X2cj_wgS2294BIFMDvfi1BjiqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:7c:3f:b1:52:0a:49:bb:0f:5f:dc:81:57:d1:a7:90:34:1e:
1d:ca:40:dd:c6:bf:85:55:7a:cf:e5:9f:7e:5e:70:64:dd:4d:
bf:29:2a:cd:51:7a:e7:89:5c:1b:11:1f:ce:2a:14:0c:75:f2:
91:d1:dc:86:85:9b:97:45:9b:7c:eb:4a:86:cd:56:b5:1a:c2:
fc:a8:11:41:8b:8b:68:96:62:7a:f7:ed:99:25:3f:06:a0:bd:
64:df:4e:68:9c:0c:07:2c:9f:e5:78:56:c3:46:83:1a:51:6c:
a1:de:6f:d5:44:11:6c:19:83:f4:65:ee:4c:3a:1e:8a:77:5a:
4c:0b:9d:8b:04:69:da:6a:38:65:90:6c:6f:c2:67:41:d3:1a:
80:8a:b3:16:78:6a:83:aa:3a:09:b0:60:31:4f:b4:a0:59:6e:
7a:bf:b9:31:9f:0a:e1:36:4e:97:59:ea:9d:b1:56:05:c6:72:
c6:8d:6c:1b:b9:18:6c:94:dc:43:b2:23:dd:1f:88:7a:22:d3:
41:29:8e:e3:e5:15:be:8b:7e:c8:c8:8c:cc:9b:61:34:fe:07:
fa:1e:2e:89:d0:ab:74:c7:16:65:8e:8b:fb:9a:60:f7:04:f5:
1a:de:ee:5d:15:b8:87:59:17:d8:8d:b0:28:70:15:89:de:14:
55:9f:ad:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 16:31:45 2025 by rpki-client