Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft
File: 9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft (raw, json)
Hash identifier: lIxgBK2HCWycNleq5+mooSEpYWv7KxqS9qaumq4x308=
Subject key identifier: 0A:C1:7A:F9:AF:F1:B6:F3:70:8A:21:F3:03:C6:D2:C0:F9:88:50:6B
Authority key identifier: F5:41:D4:68:93:AA:A1:64:FE:26:73:99:0D:07:AA:6C:07:10:03:C0
Certificate issuer: /CN=f541d46893aaa164fe2673990d07aa6c071003c0
Certificate serial: 019686C912B7A683EC1329A01583DFACDACB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9UHUaJOqoWT-JnOZDQeqbAcQA8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft
Manifest number: 12BF
Signing time: Wed 30 Apr 2025 13:00:46 +0000
Manifest this update: Wed 30 Apr 2025 13:00:46 +0000
Manifest next update: Thu 01 May 2025 13:00:46 +0000
Files and hashes: 1: 9UHUaJOqoWT-JnOZDQeqbAcQA8A.crl (hash: UTsu0CCzcQsAEvua3yqhhfYIPJrTyhnLh5A/wM9Gn8s=)
2: JYVK5YIo9oFduSfdge32BhR1llk.roa (hash: MLgxgkj7xVD4j08JzP+4k7sw1diRLF6XHz+tW1zn9ms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/9UHUaJOqoWT-JnOZDQeqbAcQA8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:c9:12:b7:a6:83:ec:13:29:a0:15:83:df:ac:da:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f541d46893aaa164fe2673990d07aa6c071003c0
Validity
Not Before: Apr 30 13:00:46 2025 GMT
Not After : May 1 13:00:46 2025 GMT
Subject: CN=0ac17af9aff1b6f3708a21f303c6d2c0f988506b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1d:7b:09:36:86:cc:f7:6d:95:4d:d0:4e:61:
42:19:1d:d2:0d:c6:b7:93:b0:2a:a3:6e:a9:24:a8:
0f:70:25:66:9a:ef:1f:a4:9d:79:53:4e:d6:30:43:
7c:fe:26:cc:5e:43:96:1c:02:65:33:6f:82:cb:81:
fa:6d:86:71:de:a4:6c:4a:5c:46:8f:53:6a:a2:35:
9a:ea:60:9c:24:28:51:27:0f:56:be:26:28:41:08:
1f:e0:0e:57:02:1f:65:ce:68:5c:0d:09:4e:ea:b2:
05:e4:a4:50:65:ab:57:c1:05:92:37:46:9e:52:65:
3b:ee:de:c2:d5:cc:3e:88:ea:6e:e0:db:84:fa:46:
01:bf:e7:ca:e4:91:c6:b1:cd:3a:16:12:1e:a5:59:
31:89:2c:b4:a6:e3:bf:c1:66:4f:5a:18:67:83:b5:
4f:b2:86:82:f6:c3:55:3e:e3:6c:d9:8d:6b:0f:ac:
af:cc:54:af:fe:4d:cc:e8:48:9d:94:9f:fa:c9:e1:
cd:4b:b0:8e:0c:61:f0:de:75:c3:6f:b2:70:73:68:
52:c9:43:a8:a5:ce:71:d1:73:4d:c6:f2:fa:ab:1d:
9c:2c:27:33:56:66:f4:62:2f:11:54:1f:92:62:fd:
64:3b:d5:dc:5f:dd:76:ab:b3:80:79:eb:f6:53:ad:
8c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C1:7A:F9:AF:F1:B6:F3:70:8A:21:F3:03:C6:D2:C0:F9:88:50:6B
X509v3 Authority Key Identifier:
keyid:F5:41:D4:68:93:AA:A1:64:FE:26:73:99:0D:07:AA:6C:07:10:03:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9UHUaJOqoWT-JnOZDQeqbAcQA8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:b2:28:fc:f2:33:d5:90:9f:04:90:3f:03:94:a6:91:8e:c8:
f7:c8:02:91:96:4b:3d:be:b6:71:5a:d3:0e:ee:f5:64:aa:37:
64:22:81:33:cb:0c:0d:e4:aa:e0:20:f3:ea:c5:51:fb:d6:4a:
82:53:36:71:3f:7c:b7:76:fe:36:e5:4c:c7:a3:d1:c0:d8:e3:
36:97:6c:1d:86:da:d3:f7:11:ee:8a:6e:ff:93:27:ae:b9:e8:
99:c1:7a:3f:0c:67:c9:0f:10:92:96:2c:17:68:31:8a:68:91:
06:3f:35:1a:ff:91:3f:0c:95:37:9c:00:88:74:ac:0b:09:3a:
ba:76:3b:2e:42:63:f8:10:30:3c:ae:4a:9c:eb:c5:14:2a:81:
b8:34:46:72:dc:f3:8b:53:e6:75:f4:d6:3a:e0:6e:d6:85:94:
a0:9b:9f:30:36:50:0d:35:c8:66:d6:c0:4a:51:ab:be:c6:ff:
6d:e1:0e:ea:be:cc:2e:8c:35:db:56:0e:fd:7c:7c:81:b7:97:
08:dc:ce:27:f8:bf:f1:3a:01:2a:e8:29:8c:ac:87:8c:9d:39:
f5:ae:7d:95:24:be:98:df:a3:11:6c:a5:31:2c:fa:b0:5a:7f:
3f:3d:cd:d6:e2:ee:74:60:29:1e:23:42:e9:0e:bf:62:86:90:
76:0a:51:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:37:38 2025 by rpki-client