Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/53f458-761a-4382-827c-494f08c21497/1/r9I8xVrurzN-23Pq4ltZCXoneEw.mft
File: r9I8xVrurzN-23Pq4ltZCXoneEw.mft (raw, json)
Hash identifier: vuenvW9Tc54gRcr5H6pEOolNM1xJCfd45NWCF0u2ttA=
Subject key identifier: 41:93:70:01:5C:53:C4:75:F2:DC:CC:80:D4:0C:4A:8F:F2:ED:EE:F1
Authority key identifier: AF:D2:3C:C5:5A:EE:AF:33:7E:DB:73:EA:E2:5B:59:09:7A:27:78:4C
Certificate issuer: /CN=afd23cc55aeeaf337edb73eae25b59097a27784c
Certificate serial: 01969C74B6E2C2710450E429371BF33041EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r9I8xVrurzN-23Pq4ltZCXoneEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/53f458-761a-4382-827c-494f08c21497/1/r9I8xVrurzN-23Pq4ltZCXoneEw.mft
Manifest number: 1521
Signing time: Sun 04 May 2025 18:00:16 +0000
Manifest this update: Sun 04 May 2025 18:00:16 +0000
Manifest next update: Mon 05 May 2025 18:00:16 +0000
Files and hashes: 1: lHwTYMLdPppQjIGCxxbbE7ChdPI.roa (hash: AdFGp8oSyfut37qs3XRrjrGdC0sy7qxul+fWrYsyUd8=)
2: r9I8xVrurzN-23Pq4ltZCXoneEw.crl (hash: bRV8jxO0kGuJ2teegMDxlsAkLiIWpu+C8ldKfxQzYQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/53f458-761a-4382-827c-494f08c21497/1/r9I8xVrurzN-23Pq4ltZCXoneEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/53f458-761a-4382-827c-494f08c21497/1/r9I8xVrurzN-23Pq4ltZCXoneEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/r9I8xVrurzN-23Pq4ltZCXoneEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 13:58:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9c:74:b6:e2:c2:71:04:50:e4:29:37:1b:f3:30:41:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afd23cc55aeeaf337edb73eae25b59097a27784c
Validity
Not Before: May 4 18:00:16 2025 GMT
Not After : May 5 18:00:16 2025 GMT
Subject: CN=419370015c53c475f2dccc80d40c4a8ff2edeef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ab:15:38:a3:7f:cb:83:38:0a:71:03:93:f2:
67:75:b6:55:80:d1:d7:fa:51:d9:0f:a0:36:92:ed:
40:6e:1c:1a:b8:59:64:bf:60:2d:09:45:14:c5:34:
2e:ac:fa:06:e5:40:1a:80:7b:06:f3:52:07:c6:b1:
a1:25:ee:20:0e:82:0d:70:c7:89:8e:13:84:2c:f0:
7a:a7:2c:2d:d9:c0:0b:f1:31:41:66:27:78:46:f3:
0e:73:2c:2d:41:e5:b2:20:fe:2d:e3:46:a8:10:96:
10:00:8a:67:d4:c5:03:4a:6d:56:19:8a:f8:a9:5b:
fb:29:b4:7c:dd:17:e6:88:88:36:9f:72:0d:71:2a:
34:5d:c8:d3:4a:6d:8b:c2:bc:96:5e:7c:29:3d:54:
64:67:f5:97:19:cc:46:12:61:b0:2f:64:3d:b8:b7:
c6:d4:87:9e:89:6f:a8:58:be:fe:30:6c:32:49:73:
69:67:e8:de:dd:f9:c6:13:80:53:b8:9f:1a:f3:2e:
b7:54:1f:28:ea:be:a0:a3:35:4c:ec:36:4c:5f:2d:
d7:1e:a9:9f:83:cb:b0:de:af:17:a2:16:06:18:10:
b2:bd:57:c9:48:ff:28:a2:32:8f:26:59:45:9b:ae:
ee:d0:4e:6e:91:a6:99:d0:f2:2b:26:f4:0b:d9:73:
c0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:93:70:01:5C:53:C4:75:F2:DC:CC:80:D4:0C:4A:8F:F2:ED:EE:F1
X509v3 Authority Key Identifier:
keyid:AF:D2:3C:C5:5A:EE:AF:33:7E:DB:73:EA:E2:5B:59:09:7A:27:78:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r9I8xVrurzN-23Pq4ltZCXoneEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/53f458-761a-4382-827c-494f08c21497/1/r9I8xVrurzN-23Pq4ltZCXoneEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/53f458-761a-4382-827c-494f08c21497/1/r9I8xVrurzN-23Pq4ltZCXoneEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:4c:d3:05:e0:85:28:e0:bd:16:46:d3:54:9f:65:15:20:fe:
c1:8b:a3:cc:91:d3:1c:23:68:07:da:06:82:10:34:7a:19:d6:
67:da:ef:b0:13:4f:a0:eb:4e:69:5d:8e:40:d4:b8:86:1b:12:
d3:f2:00:b4:9c:3a:a7:86:55:b2:5b:cf:46:48:31:d6:1a:cd:
b4:57:ea:71:a0:b6:cb:c7:55:2d:b8:38:2d:50:90:aa:3e:ee:
85:87:67:45:e0:2b:6d:99:c9:dc:b1:e1:2b:27:22:ea:58:c3:
99:62:f6:d7:b1:bc:45:53:9f:c2:5a:7e:b8:42:2d:aa:bb:1e:
fc:16:88:77:6e:0f:97:11:c5:c6:3e:3b:dc:a3:b7:21:47:c1:
91:e6:6d:1b:82:38:7a:47:7b:82:98:d3:d8:63:f1:00:d9:1c:
36:c8:fb:cb:28:81:87:a2:5b:77:ba:91:5a:d1:ee:1d:63:2e:
53:db:b5:c0:a7:42:6c:eb:81:2d:0c:72:dd:b0:3e:8d:0e:e9:
92:a4:c0:97:f4:79:10:4a:79:ad:31:2b:98:4f:92:96:ab:c8:
57:e7:90:dd:c2:19:52:90:9c:01:ec:81:84:53:1c:8b:61:bc:
84:8b:3e:c7:b2:75:1d:34:13:cb:29:0f:c3:d7:83:96:b0:c4:
b3:b0:1a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 20:27:19 2025 by rpki-client