Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.mft
File: c_9LHL6vndddO17z7pp11XmfcoA.mft (raw, json)
Hash identifier: wwgx37xHp4wpATZDPXBX5A346PRuvoYZLQ5ntPk+MFc=
Subject key identifier: 14:1C:14:01:6E:90:1D:E3:9E:FD:BB:F1:1A:A8:96:42:3F:81:1A:FC
Authority key identifier: 73:FF:4B:1C:BE:AF:9D:D7:5D:3B:5E:F3:EE:9A:75:D5:79:9F:72:80
Certificate issuer: /CN=73ff4b1cbeaf9dd75d3b5ef3ee9a75d5799f7280
Certificate serial: 01968B13AA2A239548B7DCF3BE39C76CF0F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_9LHL6vndddO17z7pp11XmfcoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.mft
Manifest number: 095C
Signing time: Thu 01 May 2025 09:00:43 +0000
Manifest this update: Thu 01 May 2025 09:00:43 +0000
Manifest next update: Fri 02 May 2025 09:00:43 +0000
Files and hashes: 1: ag-XVm500Ink_y9Z543W0cYT2e4.roa (hash: LTklb1ptuKPn0530SuHC20oeHYTlb0YVhREmYDi0qn8=)
2: c_9LHL6vndddO17z7pp11XmfcoA.crl (hash: Te9Hg16tR0nImasbaIi1NGirDUaTCZbNNHGMv6r31/4=)
3: xqtuxbgfgKOQAXDLHhW5kYSASLM.roa (hash: Akx0xbIbgUFrWIKc+N3GbCju1aCG4ckavEzXznoEvO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/c_9LHL6vndddO17z7pp11XmfcoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 09:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:13:aa:2a:23:95:48:b7:dc:f3:be:39:c7:6c:f0:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73ff4b1cbeaf9dd75d3b5ef3ee9a75d5799f7280
Validity
Not Before: May 1 09:00:43 2025 GMT
Not After : May 2 09:00:43 2025 GMT
Subject: CN=141c14016e901de39efdbbf11aa896423f811afc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c5:4b:b2:4f:db:c5:d3:ae:56:73:f2:1b:10:
7e:b4:df:c1:a3:8e:f7:e5:75:51:21:c9:34:51:ba:
97:46:c0:91:b7:5a:fd:cd:3d:f7:36:1e:c5:dd:c4:
e2:d9:77:58:f7:49:b1:07:1d:8b:b4:78:56:63:0c:
74:39:32:da:48:c8:c6:9f:a6:fc:99:e3:7c:fa:16:
e2:05:4c:99:7f:bb:53:f9:2b:2e:96:49:e8:d5:5a:
e4:ab:ed:bc:8e:92:52:23:1c:57:00:8c:8f:61:ca:
59:0a:a2:95:ca:ed:53:c3:6a:79:33:6e:08:31:7c:
ad:cc:f7:67:2e:32:b5:d5:c3:1f:db:28:1c:05:c6:
79:f8:8f:76:64:3f:25:49:8e:74:1f:56:47:2c:45:
d8:4b:94:33:ab:6c:64:6b:89:8c:39:63:d6:51:37:
1e:23:18:38:ed:5f:2c:21:52:b4:2e:de:94:95:29:
2b:29:69:22:f5:c5:91:f4:fe:64:25:f9:a3:02:48:
18:ad:49:91:c0:af:a8:b5:94:60:52:9e:f8:f1:16:
aa:76:46:43:a5:5d:60:35:9d:dc:97:c6:8e:80:da:
05:5f:58:8e:2d:84:a1:cf:bb:c9:8e:19:23:16:b1:
99:3b:01:82:9c:e7:b3:07:5b:08:97:bf:cd:9a:3f:
de:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:1C:14:01:6E:90:1D:E3:9E:FD:BB:F1:1A:A8:96:42:3F:81:1A:FC
X509v3 Authority Key Identifier:
keyid:73:FF:4B:1C:BE:AF:9D:D7:5D:3B:5E:F3:EE:9A:75:D5:79:9F:72:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_9LHL6vndddO17z7pp11XmfcoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:90:61:f8:82:79:01:fb:1c:9e:1d:f3:ca:3e:33:44:0d:37:
32:4c:65:80:91:e9:65:48:82:42:19:ad:ed:1b:43:62:37:9f:
44:0f:cd:7e:83:5a:93:db:10:15:50:41:69:94:72:70:f9:a6:
0f:11:85:1a:f4:82:2a:67:76:f4:2e:95:a4:17:32:9e:b8:37:
b4:4c:b5:9b:a4:80:62:fa:c2:b4:e7:92:c4:29:26:53:b1:b3:
52:e3:1a:b5:25:28:eb:21:31:37:69:08:36:f1:f0:6c:f4:53:
e9:4d:1d:7f:4e:b0:07:86:c0:5d:ea:32:7a:cc:5f:d1:04:a3:
ad:15:f5:d0:70:83:a7:ab:f3:e5:2b:9a:dc:fe:07:4e:76:1c:
2b:9c:8b:f9:44:43:db:e0:4b:c1:2a:c2:7d:60:28:c5:df:f5:
f6:6d:ae:52:9e:af:1a:7c:a6:e5:db:e9:4d:b7:07:8f:1f:da:
ff:d4:3e:f4:00:6b:33:f1:be:dc:4f:e4:25:c4:75:e1:6b:a0:
bb:d1:c7:28:04:ef:f1:61:30:2b:04:4e:b6:70:cb:f8:34:5f:
56:cd:33:e2:24:a9:91:9d:f4:bd:ee:80:03:6b:a3:25:d8:a6:
74:ec:da:bd:5a:28:5e:98:bc:ba:a7:1a:e9:9c:af:7c:a4:86:
5b:4e:d2:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 18:50:20 2025 by rpki-client