Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.mft
File: 9MZJlOJNSu_cQqiDH-Dc4g1gRok.mft (raw, json)
Hash identifier: ovWg7V/ZQszcy4OGRDm8YBW9VHGvl85n/gV7hy0Qzhw=
Subject key identifier: 51:A6:B3:6A:79:EC:04:4B:FD:07:3F:27:C5:3C:7E:DD:B5:19:9F:B7
Authority key identifier: F4:C6:49:94:E2:4D:4A:EF:DC:42:A8:83:1F:E0:DC:E2:0D:60:46:89
Certificate issuer: /CN=f4c64994e24d4aefdc42a8831fe0dce20d604689
Certificate serial: 019685B6314CDF76B63F2316AEA5D4882C81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9MZJlOJNSu_cQqiDH-Dc4g1gRok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.mft
Manifest number: 1519
Signing time: Wed 30 Apr 2025 08:00:31 +0000
Manifest this update: Wed 30 Apr 2025 08:00:31 +0000
Manifest next update: Thu 01 May 2025 08:00:31 +0000
Files and hashes: 1: 9MZJlOJNSu_cQqiDH-Dc4g1gRok.crl (hash: 74WePE+x2fHaFlNLAzElfNZ39AsyjkeQpiu7sE/r9bs=)
2: bRo1FpRQdGW3rrEgf9LP2ZyYMbs.roa (hash: ZwgslFPNqU25lgzTk3XOIv2Nozx6fjcmPWKTGmYvfPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.mft
rsync://rpki.ripe.net/repository/DEFAULT/9MZJlOJNSu_cQqiDH-Dc4g1gRok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:b6:31:4c:df:76:b6:3f:23:16:ae:a5:d4:88:2c:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4c64994e24d4aefdc42a8831fe0dce20d604689
Validity
Not Before: Apr 30 08:00:31 2025 GMT
Not After : May 1 08:00:31 2025 GMT
Subject: CN=51a6b36a79ec044bfd073f27c53c7eddb5199fb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c2:a7:de:c4:d8:42:ec:e9:3f:42:49:18:d1:
1a:81:ba:7b:4e:0f:7d:f1:d5:33:17:ef:fb:3c:d1:
4e:e6:1b:bb:f2:1d:59:b9:cf:6e:83:4c:2d:53:05:
66:c5:87:04:e6:0c:de:a5:10:8f:67:4a:ee:d1:35:
df:e8:d5:9e:0e:72:8e:7c:bc:f7:60:95:4a:82:5e:
01:71:37:fe:a9:ed:0e:96:dc:8e:3e:1c:51:1b:11:
1c:11:cc:ae:34:88:93:57:d0:42:0e:6d:5f:9f:c7:
1a:e2:d7:f3:94:58:2a:73:a5:82:d4:7b:ca:05:03:
78:65:95:28:bd:18:88:68:26:97:a5:b6:0f:75:9d:
7b:03:7a:91:c9:ac:01:49:bd:e3:ae:31:f3:7b:7b:
41:c3:da:26:5d:00:48:1b:6c:bd:08:2d:c3:8c:a5:
22:9a:dc:d0:97:75:48:6f:37:2a:2d:bd:b9:04:13:
84:f5:c5:90:c8:d0:18:8e:3f:68:7e:e2:5c:5c:13:
f3:94:0b:7d:7b:08:57:ef:5c:a1:db:25:45:d6:f6:
86:bc:f9:97:98:d8:e0:9d:6b:74:e6:78:14:f8:58:
35:75:79:fd:08:8b:4e:aa:db:2a:b2:c8:31:de:3c:
69:fb:d1:03:17:a8:93:b0:08:fb:21:33:54:29:1b:
3d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:A6:B3:6A:79:EC:04:4B:FD:07:3F:27:C5:3C:7E:DD:B5:19:9F:B7
X509v3 Authority Key Identifier:
keyid:F4:C6:49:94:E2:4D:4A:EF:DC:42:A8:83:1F:E0:DC:E2:0D:60:46:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9MZJlOJNSu_cQqiDH-Dc4g1gRok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:f4:70:43:bb:0a:2d:cd:ad:2b:a8:f2:59:3d:f0:5b:e3:de:
37:37:f1:dd:ad:d6:35:cf:51:db:d2:d2:f3:55:2b:c9:7d:b9:
9f:22:43:a9:26:b2:13:09:37:f9:8e:11:9c:c4:81:8b:cb:be:
28:c0:8e:7c:d9:4e:23:b6:30:62:18:7b:e9:03:c0:50:19:37:
2a:6d:98:32:b0:40:bb:23:0d:12:93:90:f0:d8:f2:60:79:44:
c5:08:12:9a:66:3c:13:b7:94:2a:28:e3:cc:be:18:df:ca:66:
7b:b8:da:a0:b4:59:07:14:fe:49:76:71:21:43:bd:65:73:76:
5f:4d:47:2a:87:89:b6:04:30:c1:1e:60:67:fb:67:46:7b:88:
ec:db:65:52:c8:3c:0e:a6:4f:48:e4:c0:1d:6a:b0:76:59:1e:
5c:dc:b6:4e:6b:1a:52:ad:f0:63:b2:9b:69:0f:f8:b2:76:0f:
19:10:37:22:d4:3b:d2:40:5c:c5:c5:ce:22:a3:8c:12:5b:17:
04:3f:ca:68:0d:a0:4a:c0:b2:33:2a:8c:c9:29:a3:90:b5:ba:
2a:e0:19:44:46:eb:1e:10:9d:9d:6b:ed:9f:01:20:15:22:05:
08:3d:10:59:ab:e5:7e:83:23:10:42:40:bd:3e:d0:23:91:b2:
c2:13:46:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 12:24:13 2025 by rpki-client