Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/0157a2-9076-4a80-be23-053f3dfc1521/1/m9_8i9uESXC44oubS-bywG39eYU.mft
File: m9_8i9uESXC44oubS-bywG39eYU.mft (raw, json)
Hash identifier: SMTucaCB/Z71K152/9nAZBaDpqIuC0KX8+edt2JQMow=
Subject key identifier: 42:96:61:C0:3B:4E:DB:B1:41:77:40:AF:AD:58:2F:93:1C:9C:BA:89
Authority key identifier: 9B:DF:FC:8B:DB:84:49:70:B8:E2:8B:9B:4B:E6:F2:C0:6D:FD:79:85
Certificate issuer: /CN=9bdffc8bdb844970b8e28b9b4be6f2c06dfd7985
Certificate serial: 01967A8E016EC34AA93529739AB1F0AC6730
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9_8i9uESXC44oubS-bywG39eYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/0157a2-9076-4a80-be23-053f3dfc1521/1/m9_8i9uESXC44oubS-bywG39eYU.mft
Manifest number: 12EC
Signing time: Mon 28 Apr 2025 04:00:48 +0000
Manifest this update: Mon 28 Apr 2025 04:00:48 +0000
Manifest next update: Tue 29 Apr 2025 04:00:48 +0000
Files and hashes: 1: QAk6JCs2jjSqyiQ-YA0VdOCDCeI.roa (hash: FpR2ZM6Bp7jsZvcIkRbwo6z9Bs9HecznXsZ9i9f2MH4=)
2: m9_8i9uESXC44oubS-bywG39eYU.crl (hash: VxkLgEXeW7PlmjIYlzLzcf41mdYfojd5hVWYMJCoKDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/0157a2-9076-4a80-be23-053f3dfc1521/1/m9_8i9uESXC44oubS-bywG39eYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/0157a2-9076-4a80-be23-053f3dfc1521/1/m9_8i9uESXC44oubS-bywG39eYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9_8i9uESXC44oubS-bywG39eYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:8e:01:6e:c3:4a:a9:35:29:73:9a:b1:f0:ac:67:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bdffc8bdb844970b8e28b9b4be6f2c06dfd7985
Validity
Not Before: Apr 28 04:00:48 2025 GMT
Not After : Apr 29 04:00:48 2025 GMT
Subject: CN=429661c03b4edbb1417740afad582f931c9cba89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:29:ca:46:79:61:dc:f4:74:b7:13:b2:36:1a:
36:b6:c5:fa:4b:85:9b:58:06:26:85:41:fa:57:d0:
1f:b6:6f:38:dd:96:f8:d4:d8:dd:e3:c7:3e:69:79:
18:3f:09:91:e8:c9:fe:53:0c:1d:0e:ae:92:c4:73:
cf:03:a1:1f:4e:24:70:b0:d4:03:22:06:bb:f0:10:
03:c7:bd:b9:cd:21:0e:bf:40:00:06:e8:83:44:14:
91:39:c5:86:93:19:1d:fa:50:cf:04:2a:d4:2d:87:
ca:f9:89:ab:7a:9f:ce:b4:c2:78:8d:5e:69:ba:c2:
ff:09:8a:16:b8:f2:e2:65:ed:ae:51:6a:24:8d:de:
1c:37:42:2d:54:2a:13:80:12:7c:0f:cc:e7:bc:a4:
62:58:7d:ac:1a:35:79:f3:a4:eb:c5:b8:81:c7:8c:
09:34:a2:0b:9d:3f:90:66:6d:98:88:f9:ce:7d:7d:
78:f5:9a:d6:04:53:7e:d5:ae:5e:33:96:08:08:1f:
22:69:0c:b3:fb:c5:17:22:e5:92:83:dd:0f:2b:4a:
49:82:9e:46:3a:18:02:3f:33:d6:46:a9:41:86:13:
08:ee:99:0b:22:4c:e4:ea:92:5e:90:d3:44:b9:e1:
66:f5:bc:b0:e2:2b:16:54:f6:21:34:35:4a:15:9e:
74:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:96:61:C0:3B:4E:DB:B1:41:77:40:AF:AD:58:2F:93:1C:9C:BA:89
X509v3 Authority Key Identifier:
keyid:9B:DF:FC:8B:DB:84:49:70:B8:E2:8B:9B:4B:E6:F2:C0:6D:FD:79:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9_8i9uESXC44oubS-bywG39eYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0157a2-9076-4a80-be23-053f3dfc1521/1/m9_8i9uESXC44oubS-bywG39eYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0157a2-9076-4a80-be23-053f3dfc1521/1/m9_8i9uESXC44oubS-bywG39eYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:1e:3d:b3:33:bd:21:44:ea:11:b4:1a:e4:67:dd:f0:58:af:
f6:d7:c3:d3:44:0e:23:9b:cb:06:28:7c:0b:b6:56:25:56:4f:
27:3d:aa:3e:17:0f:ef:01:de:54:48:e0:11:4c:2c:24:fc:8b:
c5:80:e0:1b:3a:ec:71:83:21:00:e2:68:d3:f2:7b:1f:7b:f0:
e6:24:85:ea:5e:07:d6:39:93:89:dc:f1:1d:b1:88:b6:1f:3c:
8f:ea:20:3c:a9:b7:ed:37:ca:cc:0f:94:a3:e3:b9:1a:8b:95:
84:a4:b6:1d:9a:3a:65:c4:01:7a:19:b7:e8:b4:b7:c1:b1:f3:
2a:bd:98:62:bc:35:51:88:05:17:ad:12:82:d7:ae:9c:4f:eb:
8f:eb:8a:cc:ee:d7:94:fd:5b:ed:b0:a3:e8:0e:c7:d3:89:b6:
09:a9:c6:47:ff:44:ce:36:85:47:64:82:c6:ff:ea:54:b5:9b:
b1:c7:37:a6:55:a0:b4:b4:91:da:a2:57:69:53:74:b2:a7:2f:
7b:00:b9:9c:b7:cb:93:a7:d5:ab:88:84:e0:39:47:31:d0:8e:
b4:28:be:ff:1f:94:df:15:6d:24:80:87:7a:08:84:4e:1f:19:
ce:09:88:81:45:e8:32:22:70:ae:21:af:01:2f:26:65:9f:0a:
be:ec:87:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:35:51 2025 by rpki-client