Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft
File: A9YCueHaK1aN9US9pQ5BV5m7seI.mft (raw, json)
Hash identifier: C74/6E7L0tuqPvN5Sdd5DH8tug+7rOt/sa+7PAf9e3w=
Subject key identifier: CE:F6:67:43:C4:DD:DA:AB:A2:15:DB:B7:F6:F4:BB:9F:18:6F:4B:D4
Authority key identifier: 03:D6:02:B9:E1:DA:2B:56:8D:F5:44:BD:A5:0E:41:57:99:BB:B1:E2
Certificate issuer: /CN=03d602b9e1da2b568df544bda50e415799bbb1e2
Certificate serial: 019677FB2D3816B75252C0B5FFC1B7D16581
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft
Manifest number: 0924
Signing time: Sun 27 Apr 2025 16:01:11 +0000
Manifest this update: Sun 27 Apr 2025 16:01:11 +0000
Manifest next update: Mon 28 Apr 2025 16:01:11 +0000
Files and hashes: 1: 1-Gv3E907MTfXuMPmsscWz1qmn78.roa (hash: uBQT6rIDTqX3BYBvMNRkEwe9KRdLtsmbFCKT0keUzwo=)
2: A9YCueHaK1aN9US9pQ5BV5m7seI.crl (hash: YxBKwDW4lC2wgybimTonrrCkME1EIRiJ6uCRdYgk7Ug=)
3: I8ts4VChZIvxCXnk3zghDL9Bmu4.roa (hash: Md6prX/mk6M2hIPa7lBG6X8P2VoqSBLYC0PebMg3Wr4=)
4: hHiGsmfrhsgON9dzVYozxtuCCDg.roa (hash: z4ZF0Gqq/BQZKQszFHzmotHi4BZqgEpR8VtVskzydjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft
rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fb:2d:38:16:b7:52:52:c0:b5:ff:c1:b7:d1:65:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03d602b9e1da2b568df544bda50e415799bbb1e2
Validity
Not Before: Apr 27 16:01:11 2025 GMT
Not After : Apr 28 16:01:11 2025 GMT
Subject: CN=cef66743c4dddaaba215dbb7f6f4bb9f186f4bd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:44:c9:fd:61:c0:db:96:78:92:a2:ec:37:4c:
ad:4d:f6:ef:70:be:e3:b4:02:1d:1e:5f:c1:88:ed:
6a:42:f1:7b:72:bc:32:18:94:a9:47:a3:6c:25:9c:
e5:9a:95:16:b4:af:4c:99:e2:f2:01:ae:73:a7:58:
f4:db:ec:21:d4:9b:60:22:9d:4b:ae:51:dd:ce:3a:
eb:d3:6f:74:04:77:d8:17:e2:3a:f4:42:63:ef:0a:
81:58:2d:74:32:f4:a5:99:82:51:17:64:1e:04:98:
67:66:9d:42:e6:02:17:0b:cd:49:5d:43:6d:c2:6e:
f7:f0:d7:47:cc:9a:28:c2:06:67:b4:4a:59:29:3b:
62:6d:31:6a:7b:ae:fa:51:8d:7a:31:ee:1f:ad:f6:
cf:02:35:88:29:ec:d7:01:d8:9e:62:ee:d1:61:d2:
3d:03:ba:0b:5e:47:cd:38:5f:a4:d8:55:7d:a6:2f:
a9:cf:13:2d:7f:5c:e4:bd:d8:e5:71:c8:a0:66:70:
43:a1:c2:a5:81:8b:01:ef:c3:cb:bb:dc:79:52:5f:
35:54:ed:9a:77:b8:47:76:a4:3c:a2:99:4b:bb:8c:
a0:03:23:29:8b:3f:10:d5:17:8d:cd:f6:dd:9a:e0:
69:a2:41:c5:61:62:4a:8c:0a:68:e5:23:ba:57:6d:
62:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F6:67:43:C4:DD:DA:AB:A2:15:DB:B7:F6:F4:BB:9F:18:6F:4B:D4
X509v3 Authority Key Identifier:
keyid:03:D6:02:B9:E1:DA:2B:56:8D:F5:44:BD:A5:0E:41:57:99:BB:B1:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:95:95:85:99:31:52:eb:f2:44:c2:11:a9:d1:2a:e5:fc:a4:
56:d2:b6:c9:c1:f1:4a:e0:d1:16:27:3e:43:70:bc:27:a3:59:
a9:b6:03:26:f7:c6:f6:c1:f5:20:9a:c2:fa:90:25:0a:17:7a:
ae:6d:b5:d5:fb:dd:d9:6e:44:7c:6c:06:ea:dc:d2:b5:46:5d:
65:58:f7:08:ec:33:e5:88:7e:4f:c0:48:89:f6:0b:5c:ea:56:
fe:49:f5:c8:2e:d2:35:11:66:43:22:93:4b:77:52:66:84:49:
00:fd:7e:1b:3e:60:45:0e:74:e5:44:40:65:5c:6b:80:ab:ad:
79:59:c0:80:1c:65:97:5c:95:8c:ff:ba:90:f1:51:c1:62:19:
91:d7:61:82:0d:c0:2a:cf:05:bb:01:0b:84:e4:9e:09:fd:f6:
31:84:9d:91:50:b4:0b:a0:2f:ef:94:6c:ea:6a:f9:07:68:8b:
29:c5:4f:64:b9:46:06:93:a3:9f:16:5f:86:7c:34:8d:6a:e1:
d0:ae:ac:ce:0c:74:50:b5:a2:bc:16:9f:b7:1e:b0:d7:68:7f:
33:0f:61:1e:be:83:46:7a:a1:44:9c:0e:8e:ca:1f:1c:a4:17:
46:2d:1c:15:30:8d:21:eb:b1:ac:0b:75:2a:e2:15:ef:db:f1:
9f:b6:eb:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:15:01 2025 by rpki-client