Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/9-VkfNC39yK-1FafN7i_j5JTjPU.mft
File: 9-VkfNC39yK-1FafN7i_j5JTjPU.mft (raw, json)
Hash identifier: aZLkJu9zFdUmTXGQ8/GoErEfkzaHtjJm0ZF6l1MsQeY=
Subject key identifier: 42:39:10:73:5B:4B:D9:91:4D:B0:01:42:04:8E:80:24:D1:7F:23:7E
Authority key identifier: F7:E5:64:7C:D0:B7:F7:22:BE:D4:56:9F:37:B8:BF:8F:92:53:8C:F5
Certificate issuer: /CN=f7e5647cd0b7f722bed4569f37b8bf8f92538cf5
Certificate serial: 019676E812FC3BA60BE712DDEC6487D0444C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9-VkfNC39yK-1FafN7i_j5JTjPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/9-VkfNC39yK-1FafN7i_j5JTjPU.mft
Manifest number: 1131
Signing time: Sun 27 Apr 2025 11:00:42 +0000
Manifest this update: Sun 27 Apr 2025 11:00:42 +0000
Manifest next update: Mon 28 Apr 2025 11:00:42 +0000
Files and hashes: 1: 9-VkfNC39yK-1FafN7i_j5JTjPU.crl (hash: hI9ToJkid0SRagZzB6AimeSsk5z0Fkl3IDSBfpGKLFI=)
2: DBhdVQnWbQeKdQzgQiCpHErXzhE.roa (hash: ke+PE6qJEQ9z2GmlNhQtn8qkPU8ewvFXiEh0aYxuqOo=)
3: q1OrwBnOgNGg_tS0zZoAzPBHw1c.roa (hash: aaFqVy4+hGHKy39rpTWrEUIWgkLIuK6ZgSAREjkESF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/9-VkfNC39yK-1FafN7i_j5JTjPU.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/9-VkfNC39yK-1FafN7i_j5JTjPU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9-VkfNC39yK-1FafN7i_j5JTjPU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:e8:12:fc:3b:a6:0b:e7:12:dd:ec:64:87:d0:44:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7e5647cd0b7f722bed4569f37b8bf8f92538cf5
Validity
Not Before: Apr 27 11:00:42 2025 GMT
Not After : Apr 28 11:00:42 2025 GMT
Subject: CN=423910735b4bd9914db00142048e8024d17f237e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a5:42:5e:42:a4:99:a5:04:ec:a5:34:b6:de:
43:e1:45:f5:49:46:b4:cb:04:3d:89:7a:ff:8b:b8:
21:5e:4d:3a:83:4c:55:c1:31:e3:59:92:d6:b9:d7:
33:a4:55:2a:ed:49:99:36:a6:3c:7e:93:3a:d4:df:
c3:8b:1b:94:80:e0:cf:7b:82:58:78:51:a5:59:88:
6b:6d:7b:6a:92:76:68:14:41:e8:ee:bc:4d:9d:7c:
2b:21:18:1a:cf:9c:9d:08:35:63:e6:ad:f3:75:08:
1b:22:eb:58:21:71:b5:cc:82:30:33:5c:71:31:3e:
da:b8:00:b5:2a:83:a3:be:8d:d9:81:49:e1:60:74:
1c:32:db:46:c9:01:7a:83:74:1c:f9:d9:2a:23:ef:
16:f0:73:3a:a0:d7:0e:1b:a8:b2:c8:e7:7a:6a:51:
a8:a7:41:7e:88:e0:d9:7a:20:81:85:93:80:51:05:
e7:04:bb:f9:52:5d:bd:a8:c8:b6:cf:46:da:3e:64:
26:f1:de:5b:23:ab:eb:82:5a:7e:3b:ac:66:e4:56:
1e:93:d9:fb:95:2b:a6:d6:a4:c7:31:ed:4b:2e:f7:
b6:b9:c1:9c:4a:31:a4:d2:48:71:ff:6e:f8:09:02:
b9:d1:58:cb:b7:11:b2:57:a9:90:3f:58:36:3a:0e:
12:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:39:10:73:5B:4B:D9:91:4D:B0:01:42:04:8E:80:24:D1:7F:23:7E
X509v3 Authority Key Identifier:
keyid:F7:E5:64:7C:D0:B7:F7:22:BE:D4:56:9F:37:B8:BF:8F:92:53:8C:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-VkfNC39yK-1FafN7i_j5JTjPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/9-VkfNC39yK-1FafN7i_j5JTjPU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/9-VkfNC39yK-1FafN7i_j5JTjPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:0e:4e:c0:ec:a1:a3:2c:75:77:61:1d:77:e9:97:d1:f7:aa:
b8:8c:fe:5f:ef:57:23:55:14:99:3c:21:4d:ba:4c:2a:16:95:
92:d9:ae:0a:c6:f7:cc:a4:c9:6b:0b:bd:a2:c0:9c:bb:75:62:
d6:c9:fe:79:94:a9:65:0b:57:6b:f7:55:b6:fa:34:7c:2e:26:
df:f3:74:42:86:2d:12:92:12:c8:0b:e7:56:6b:8b:3b:4e:51:
e1:33:71:3a:6b:63:13:dd:1f:04:1c:40:b1:67:8f:5e:48:b5:
9d:e2:07:6c:9b:44:fb:82:0f:78:9a:92:17:d2:03:2b:a8:8c:
b5:b2:c2:51:55:b3:84:12:d5:5c:9a:23:b5:61:5d:23:d2:d1:
04:81:75:d3:3e:f7:4b:25:c0:63:7b:50:37:96:f2:cb:d1:76:
1c:c9:f2:7f:eb:5f:0e:29:e0:6f:bf:8f:74:0d:94:9d:1c:71:
51:28:91:8d:c2:63:49:b0:69:ca:a1:aa:a2:3c:0a:15:18:82:
72:1f:37:51:14:d0:b0:98:74:f1:e5:ce:d6:2a:df:66:86:84:
fd:ab:89:a2:45:02:52:bc:ed:66:06:d0:cb:11:50:96:c3:5d:
66:de:c6:34:8d:69:07:8d:78:8f:81:8c:95:ff:d2:1a:ae:5a:
5a:2a:a4:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:25:36 2025 by rpki-client