Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/fa707a-b334-4b05-83fa-1420b84134d3/1/9rA2a7rqx7WITkJt-ACewnosYC4.mft
File: 9rA2a7rqx7WITkJt-ACewnosYC4.mft (raw, json)
Hash identifier: tynHmWuc+wCwJIg5PcV5724I2ac06NZEEogYveD6gVk=
Subject key identifier: D0:4A:06:E6:BF:A2:EA:87:4D:6A:05:DA:BD:FF:B5:06:1B:81:54:DE
Authority key identifier: F6:B0:36:6B:BA:EA:C7:B5:88:4E:42:6D:F8:00:9E:C2:7A:2C:60:2E
Certificate issuer: /CN=f6b0366bbaeac7b5884e426df8009ec27a2c602e
Certificate serial: 01967ED8523051C6347BBE2831E55071B422
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9rA2a7rqx7WITkJt-ACewnosYC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/fa707a-b334-4b05-83fa-1420b84134d3/1/9rA2a7rqx7WITkJt-ACewnosYC4.mft
Manifest number: 0409
Signing time: Tue 29 Apr 2025 00:00:28 +0000
Manifest this update: Tue 29 Apr 2025 00:00:28 +0000
Manifest next update: Wed 30 Apr 2025 00:00:28 +0000
Files and hashes: 1: 9rA2a7rqx7WITkJt-ACewnosYC4.crl (hash: 0paHHQThvPKAXYHAV387DpRNmdv7bbpw10ZCT7S6Ek8=)
2: izm1O4S-x2UDeNY6fo1YhqW7N8g.roa (hash: tl5IuNJmLiqZ3agDxn5CXFUtrHRHejemwivyEs6+MfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/fa707a-b334-4b05-83fa-1420b84134d3/1/9rA2a7rqx7WITkJt-ACewnosYC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/fa707a-b334-4b05-83fa-1420b84134d3/1/9rA2a7rqx7WITkJt-ACewnosYC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9rA2a7rqx7WITkJt-ACewnosYC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:d8:52:30:51:c6:34:7b:be:28:31:e5:50:71:b4:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6b0366bbaeac7b5884e426df8009ec27a2c602e
Validity
Not Before: Apr 29 00:00:28 2025 GMT
Not After : Apr 30 00:00:28 2025 GMT
Subject: CN=d04a06e6bfa2ea874d6a05dabdffb5061b8154de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2f:8b:91:70:3e:e8:9d:60:64:9a:89:bb:d5:
d1:1a:40:b1:80:26:a4:3d:75:f6:90:15:50:a9:94:
56:a4:d8:f7:70:f5:70:da:a5:53:5d:f3:75:d2:94:
e5:fe:9f:27:4f:f2:f9:0f:ae:89:42:93:81:14:12:
2e:c3:2a:82:4f:34:d9:dc:15:78:4b:da:35:a7:27:
31:d5:b8:d9:84:6f:d6:e5:73:0c:49:1f:ba:c4:84:
1a:7f:00:97:ca:ee:15:d8:9d:ee:24:1e:0a:64:6b:
71:05:b3:d7:79:50:ad:8e:6e:f8:07:8b:72:17:1b:
0f:e2:7c:b0:f2:2d:8b:7c:11:cc:d4:57:23:87:80:
f6:5a:12:33:f9:ab:2d:ba:d8:3a:73:e2:4b:e5:86:
c2:9c:d3:da:3a:8f:40:31:9a:6c:63:b1:d6:8d:2a:
5d:b1:94:67:99:c2:03:0b:57:72:d6:f0:d0:3e:ac:
c5:f9:6c:6e:51:a4:a7:b3:50:46:c8:b9:e5:75:0c:
0d:de:b9:8b:51:e7:a1:43:d5:a8:32:ef:f8:3a:c9:
87:98:56:ca:d6:a1:fd:98:82:3e:0b:20:51:a3:96:
2f:45:db:4f:b6:8c:f2:87:4e:32:20:38:0a:9e:39:
cb:01:fe:d0:3a:b2:bb:ca:e2:ea:f0:45:32:71:dd:
8c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:4A:06:E6:BF:A2:EA:87:4D:6A:05:DA:BD:FF:B5:06:1B:81:54:DE
X509v3 Authority Key Identifier:
keyid:F6:B0:36:6B:BA:EA:C7:B5:88:4E:42:6D:F8:00:9E:C2:7A:2C:60:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rA2a7rqx7WITkJt-ACewnosYC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/fa707a-b334-4b05-83fa-1420b84134d3/1/9rA2a7rqx7WITkJt-ACewnosYC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/fa707a-b334-4b05-83fa-1420b84134d3/1/9rA2a7rqx7WITkJt-ACewnosYC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:0b:d6:2e:1a:9a:2c:59:12:d8:c8:02:0a:e6:d0:03:46:fa:
73:cf:87:74:72:14:95:26:4f:89:91:ee:80:ce:d4:7a:41:e7:
7a:ce:c1:a6:9e:18:ab:17:b1:01:35:f9:ba:78:2f:50:47:31:
1e:67:97:d8:1f:5c:80:7d:7f:a3:78:f2:7b:ce:34:54:ca:d4:
69:24:f0:be:3f:0e:8f:20:37:09:2c:22:ed:6d:ef:93:6d:50:
31:48:f6:16:ed:6b:97:ea:96:cf:ff:15:2a:e0:f9:0c:26:ca:
ec:b1:8a:c2:6b:70:7d:1c:31:4f:0e:56:de:fa:96:f9:c9:1b:
eb:fc:2a:41:ac:4a:f4:cf:50:c3:56:88:94:ac:25:2d:51:3e:
13:7a:19:2f:c4:78:51:f6:0b:8e:cd:4c:bb:00:b3:28:a1:f6:
7c:ae:d2:26:2a:f4:97:8a:85:c1:37:36:c6:a5:ab:dd:a8:85:
be:08:5a:f5:27:03:b4:e3:8f:18:71:59:40:5a:03:f5:82:62:
ad:d4:98:ff:af:d4:a1:65:17:60:b9:c5:d4:ee:23:f8:a9:96:
48:2c:07:7f:c6:c3:7c:93:e2:14:9f:4a:ca:29:01:f6:96:ff:
4e:2a:d2:0a:fe:b3:75:da:9d:4d:25:95:8d:72:a1:80:75:3a:
d5:77:b7:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 05:36:21 2025 by rpki-client