Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft
File: a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft (raw, json)
Hash identifier: PxWlJu+L/CMhha5kroHhEKtUISaicMa3uHJK0dmSmwM=
Subject key identifier: CA:B9:55:FA:8B:E9:F6:2F:F3:71:EC:54:0D:41:C4:CA:55:C9:84:B5
Authority key identifier: 6B:D1:9D:69:70:1F:13:A5:97:7C:D2:29:6F:A8:7A:25:2F:BF:05:F7
Certificate issuer: /CN=6bd19d69701f13a5977cd2296fa87a252fbf05f7
Certificate serial: 0196760D14623BE36B50A575C79C9EFE0BF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft
Manifest number: 0645
Signing time: Sun 27 Apr 2025 07:01:30 +0000
Manifest this update: Sun 27 Apr 2025 07:01:30 +0000
Manifest next update: Mon 28 Apr 2025 07:01:30 +0000
Files and hashes: 1: NaKshVhSKaYmb3Sdi3LLJdyjmds.roa (hash: d86txPLHJOy87A3pf1/eOV7404HvHGLlpkkFt/51J1U=)
2: a9GdaXAfE6WXfNIpb6h6JS-_Bfc.crl (hash: TXnPARUMEbsY+IYHKEDKisiKmEnpEzfT1E1BCusg1AY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0d:14:62:3b:e3:6b:50:a5:75:c7:9c:9e:fe:0b:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bd19d69701f13a5977cd2296fa87a252fbf05f7
Validity
Not Before: Apr 27 07:01:30 2025 GMT
Not After : Apr 28 07:01:30 2025 GMT
Subject: CN=cab955fa8be9f62ff371ec540d41c4ca55c984b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:15:19:ad:80:9f:11:2e:32:e8:bb:69:53:88:
ad:c7:43:15:3b:cd:85:2a:79:1b:6d:ea:ec:81:6f:
6a:97:68:92:de:2f:a5:e6:14:ec:f6:b3:32:ef:a7:
25:9d:ff:25:bd:40:d2:16:5b:93:d9:e3:8c:a9:9a:
f5:58:fa:77:90:93:8e:56:49:17:7d:4b:18:03:4d:
ad:a9:f0:38:1b:fd:37:ef:ad:06:26:ed:90:a9:5a:
e7:48:4f:f4:af:68:0d:c0:19:18:0a:78:b3:a5:28:
56:da:ee:57:a1:5c:10:b7:23:33:0e:f5:9c:df:ae:
6d:a2:fd:db:f3:7b:ab:99:d3:b7:91:ea:c9:fe:60:
f8:f4:33:43:8c:6d:12:66:77:3c:4f:07:fd:60:81:
56:25:ff:b0:be:d7:88:bd:8f:a1:c0:06:12:84:00:
da:88:f4:08:a1:83:b5:1f:29:b7:29:1a:94:90:19:
3e:f9:5d:0f:b8:7e:23:73:73:22:fe:59:86:6b:12:
bb:cf:3d:96:48:40:1a:4f:e6:99:7f:6c:3a:88:38:
78:d9:1a:26:12:12:cc:dd:c5:07:32:87:b4:96:7f:
92:e3:e3:76:69:7a:4f:1b:9b:7d:d4:e0:15:bc:0c:
be:ee:9f:18:fb:ce:cd:94:0a:93:b2:a7:9c:10:12:
1f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:B9:55:FA:8B:E9:F6:2F:F3:71:EC:54:0D:41:C4:CA:55:C9:84:B5
X509v3 Authority Key Identifier:
keyid:6B:D1:9D:69:70:1F:13:A5:97:7C:D2:29:6F:A8:7A:25:2F:BF:05:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:73:42:42:01:7d:45:9c:27:76:42:a3:46:87:50:e5:e2:e3:
4d:44:9f:8a:b5:e2:4f:15:c0:9f:b2:b3:1b:75:a3:cb:a8:8f:
ce:28:3a:7a:db:a1:e9:95:6a:8f:46:13:4b:18:a2:40:3b:b7:
d3:2a:a3:7c:1b:34:3d:d9:4a:98:fd:b8:07:ac:21:fc:33:2d:
89:a0:28:34:12:98:2b:a6:fb:1e:00:d6:09:34:d9:59:4a:ff:
02:ea:c4:67:8b:d8:b1:29:e5:0a:91:22:0f:53:25:83:83:6a:
d0:a8:24:5a:4d:8c:c5:86:72:c2:df:d1:d2:60:7a:1e:3b:60:
83:20:9b:65:ec:f2:be:7d:59:86:d8:53:a4:fd:7f:55:12:72:
a1:25:a4:42:af:d6:13:c7:4d:9b:44:85:5a:eb:bf:19:bf:dd:
a1:51:64:9d:76:9d:29:79:bc:ad:4e:5a:d9:cd:3f:b2:61:47:
55:bf:e5:55:02:b8:8f:0c:1f:65:83:71:c4:5f:fd:4f:26:5d:
ac:3a:16:ec:34:79:97:1f:29:8b:d5:f1:8c:1e:f8:fe:65:82:
56:15:ce:e7:0a:3a:ce:7c:66:77:33:85:0e:a8:55:7f:80:69:
65:99:00:df:36:3b:a4:ba:1c:35:52:0a:ce:d5:c0:96:80:d3:
b6:a6:8e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:11:43 2025 by rpki-client