Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft
File: 9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft (raw, json)
Hash identifier: utX9QGOFgp3UR07pg1hXntIDH/5ciMikVdak7YtGu8Q=
Subject key identifier: D9:D9:5F:FC:E8:BE:5B:28:F1:E4:4A:7E:85:3B:A9:10:8B:85:11:63
Authority key identifier: F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F
Certificate issuer: /CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f
Certificate serial: 01967567AD282D925D4A4AA8F936BE3DE2A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft
Manifest number: 0D27
Signing time: Sun 27 Apr 2025 04:00:50 +0000
Manifest this update: Sun 27 Apr 2025 04:00:50 +0000
Manifest next update: Mon 28 Apr 2025 04:00:50 +0000
Files and hashes: 1: 1-FnvQqT9mIqxipsRqFjYsNQSlBM.roa (hash: +uFY0K06aPvv+IH1erLogXQwEEO2k+DY8eNZLIXFHV4=)
2: 9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl (hash: YL8z/I8VzbWPsvrMxuNnMpp1JMWjBX8PiC8y38WQVGQ=)
3: EpH20P4xP3V2g4vErHJO-EvTAVU.roa (hash: jeooPDRiBjDAUPoIXhITPTt2zTmHZ7KLWf5fCQG5sIo=)
4: S5ZKnLfz4DstONEqZm_YmyZ8kvY.roa (hash: X0rSxal4LbSgFqA0+FsHMQ78+/EIGLIojbhDJzOesXI=)
5: SI90qQvScrNKS-02paw66Vtte1g.roa (hash: CoRUrg+WB47FS25HKQ2HVa4e+itGukiRC6ZwlYviHec=)
6: VunL007YcgdB0SQwEVqZksZS8Fs.roa (hash: 216WPQB/uK03AqzN7nO6bEUvYIaYzP3vD9//CYpZtZI=)
7: mvmUvaM2JRysTq3IiKyyysU6GY8.roa (hash: dMiGawP2eEnw55fXqAakbpr7IIQ2Da7zAMRfk+xhjuE=)
8: xfkDaLGtqI9S0koDwH1ibKq86PQ.roa (hash: 9SMgRbgNtClui+eod+bviRGqIN366+5FDeHZRxM9wm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 04:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:67:ad:28:2d:92:5d:4a:4a:a8:f9:36:be:3d:e2:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f
Validity
Not Before: Apr 27 04:00:50 2025 GMT
Not After : Apr 28 04:00:50 2025 GMT
Subject: CN=d9d95ffce8be5b28f1e44a7e853ba9108b851163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:04:fd:dd:fc:54:8b:b9:68:a9:70:a2:8c:b2:
80:c6:bb:ed:c7:c3:7e:47:9e:99:15:49:ca:3f:c2:
c2:c6:3b:88:13:cf:f6:e2:cc:4b:8d:31:c2:72:5b:
6a:40:07:8a:c7:70:61:55:64:42:71:76:ea:08:ad:
be:2f:b7:58:40:bf:83:c7:a4:de:0f:1e:ed:81:4b:
a7:c4:20:24:bc:c5:9d:3a:89:50:25:18:3b:38:cc:
27:ed:48:a2:00:bb:61:f4:e8:20:36:fe:3c:3f:9c:
47:53:a2:e9:88:8b:57:c7:05:7c:f4:e7:63:29:1e:
4a:d8:ad:4d:e8:24:8f:19:f4:f3:20:95:d3:25:56:
8d:56:73:43:e1:ed:61:47:a4:fa:d2:e1:62:bb:95:
81:f8:7d:bd:82:60:4b:ed:1a:d3:a1:50:a6:2d:67:
4b:32:55:a9:21:d9:bd:f7:cd:03:2b:be:c8:5c:4b:
1f:4a:73:f7:8d:06:40:b3:96:c2:44:e0:94:d6:f4:
15:2f:5c:be:d2:b5:94:93:66:df:b9:94:1e:5f:68:
14:74:66:31:55:09:b9:43:28:50:95:25:95:45:9c:
21:99:c6:4a:86:a0:06:03:29:89:a6:cf:6b:bd:aa:
aa:76:c7:e0:de:1e:52:e7:37:60:55:85:77:55:d2:
f8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:D9:5F:FC:E8:BE:5B:28:F1:E4:4A:7E:85:3B:A9:10:8B:85:11:63
X509v3 Authority Key Identifier:
keyid:F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:eb:ff:4d:1d:85:ed:e3:34:fa:78:f3:2a:99:4b:b8:e6:38:
dc:fe:e2:b5:bd:29:c6:3d:d4:07:01:6b:a4:dd:3e:f8:8e:bf:
ab:24:e0:f8:e9:8a:e1:ba:29:d1:d7:55:6c:26:59:22:ea:42:
20:c1:88:1a:27:61:a0:86:99:d6:0f:d0:9c:d1:d8:66:86:89:
ba:ff:c5:ec:a5:08:85:4e:37:3b:86:45:60:ca:be:c1:bc:ae:
e1:34:a6:f0:f2:31:d9:8a:a8:df:a7:0d:1c:d2:56:48:88:7e:
11:7b:4e:16:79:15:a8:29:36:ef:c5:de:85:a0:7b:8b:d3:ba:
4f:02:9e:7c:dc:b2:a9:ca:d1:18:5b:03:59:0c:91:ae:49:d3:
6a:b0:24:45:2b:e5:7c:75:89:75:29:42:cc:d9:32:48:84:02:
7a:d9:4e:dc:3e:90:41:b5:be:b9:b4:ca:74:de:93:e0:ab:30:
1f:44:c5:59:15:54:8b:a4:21:d5:8a:c2:55:21:f2:f0:57:d2:
82:ba:52:d6:28:e4:8a:d2:90:28:5f:c5:1d:95:69:33:3e:5c:
6d:ef:e3:8e:f1:63:fa:53:c5:9e:0c:3f:19:2b:34:ff:6b:91:
25:6d:84:72:d3:08:58:8f:9f:1f:80:69:06:cb:47:f2:aa:20:
89:ee:82:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:29:00 2025 by rpki-client