Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.mft
File: 9Zy5I-QGm_42Li2W_6sv8xB4MXo.mft (raw, json)
Hash identifier: Bgf0a8kpgDt6lKXmuutF5mXb0+BU0o5DuhlnC2NSwY8=
Subject key identifier: 00:23:42:50:1F:C8:26:E2:57:11:4A:A2:FD:0F:ED:27:8F:26:A0:C3
Authority key identifier: F5:9C:B9:23:E4:06:9B:FE:36:2E:2D:96:FF:AB:2F:F3:10:78:31:7A
Certificate issuer: /CN=f59cb923e4069bfe362e2d96ffab2ff31078317a
Certificate serial: 019682B5581AACC2F5AF5304E339C6DBBB3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Zy5I-QGm_42Li2W_6sv8xB4MXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.mft
Manifest number: 130A
Signing time: Tue 29 Apr 2025 18:00:44 +0000
Manifest this update: Tue 29 Apr 2025 18:00:44 +0000
Manifest next update: Wed 30 Apr 2025 18:00:44 +0000
Files and hashes: 1: 9Zy5I-QGm_42Li2W_6sv8xB4MXo.crl (hash: HuZym54zUwZN3HXFm8Jkc2dfeS9XjHR+PX97Nd65ZqE=)
2: rtyY9Cz1KYossj4NRjvNjMhwRZI.roa (hash: KYSFbkeXEHZUiKzf8OS4b0YogJmArNqO7BI7cVGBHSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Zy5I-QGm_42Li2W_6sv8xB4MXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:b5:58:1a:ac:c2:f5:af:53:04:e3:39:c6:db:bb:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f59cb923e4069bfe362e2d96ffab2ff31078317a
Validity
Not Before: Apr 29 18:00:44 2025 GMT
Not After : Apr 30 18:00:44 2025 GMT
Subject: CN=002342501fc826e257114aa2fd0fed278f26a0c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:de:22:26:e2:a9:92:67:d5:3d:27:d9:24:03:
d3:7b:ba:d0:8d:07:89:83:df:d8:e0:d9:ae:90:c1:
5a:a8:af:dc:36:a4:31:b3:67:d1:19:c3:89:41:a0:
44:57:1a:e6:64:22:d6:7e:95:36:9e:5d:5d:35:26:
f0:2d:4c:49:50:12:cd:e9:63:8b:34:fd:5e:e4:b5:
09:68:e9:cf:a2:00:25:d2:cc:d0:c1:28:aa:ef:87:
16:94:c3:b0:3d:d7:a3:50:8d:94:88:7e:f0:6f:09:
0d:eb:50:80:ed:4d:fa:da:73:d1:ce:5b:d2:11:15:
85:a2:0b:87:58:c1:b0:ed:34:23:14:c5:02:45:d2:
cb:ef:3e:ca:23:90:a6:ca:9c:c4:b5:3a:62:d8:2d:
88:73:64:b2:12:8a:34:c2:ed:a9:33:87:a6:88:58:
55:bc:3e:59:8c:e7:b1:66:7d:7d:7f:2f:4e:b6:08:
f4:44:a4:05:0d:b5:d9:bd:89:21:db:f1:ee:39:ff:
c2:a5:32:f5:c7:9f:6c:1c:f2:6b:a2:cb:7d:a3:a9:
ee:42:a7:14:2d:af:e9:55:76:73:47:28:0f:a0:da:
78:2e:33:af:c2:3c:69:57:33:f7:90:47:ee:88:e6:
f7:d9:b1:5d:b8:af:eb:23:ea:f7:1b:58:52:ef:59:
28:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:23:42:50:1F:C8:26:E2:57:11:4A:A2:FD:0F:ED:27:8F:26:A0:C3
X509v3 Authority Key Identifier:
keyid:F5:9C:B9:23:E4:06:9B:FE:36:2E:2D:96:FF:AB:2F:F3:10:78:31:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Zy5I-QGm_42Li2W_6sv8xB4MXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:5f:00:3b:ab:0e:ec:55:5d:c8:d0:84:db:f3:ab:fc:38:6c:
9c:8c:a1:10:4e:78:07:12:89:c0:30:98:5b:a1:b2:7e:27:fa:
f4:38:cf:76:0d:4a:48:b9:a6:39:15:ea:67:af:21:ba:5b:74:
cf:28:4f:3a:7e:22:2a:f6:ce:bb:14:4d:b0:ed:35:19:88:45:
12:9e:c6:97:6b:d6:72:d9:84:e8:23:18:00:50:91:4f:b3:ab:
c0:5c:7c:b7:b1:01:3c:98:22:95:10:89:b2:5a:29:0b:13:7e:
db:cf:13:2a:40:db:c5:ce:d3:bb:cc:56:67:39:2f:4f:f8:f1:
55:1b:ed:26:c1:a1:7c:1b:64:d6:44:54:a4:5f:f3:ce:a2:7a:
8e:92:4d:37:17:6a:56:60:40:f7:5f:76:99:b1:80:69:0e:35:
1e:e5:e2:ac:36:d8:5b:db:71:47:9d:2a:cc:d7:7d:7b:25:94:
1c:1e:00:63:75:69:64:92:20:63:10:b4:7f:4d:70:84:ad:b7:
68:52:24:6d:17:6b:d0:9b:8b:75:2d:9b:50:7a:3a:ec:bb:22:
1e:0f:02:1d:47:c9:89:cd:32:fd:de:52:81:a7:da:3c:6b:23:
77:c0:e9:71:9b:3a:1c:53:df:ef:71:e8:4b:3a:45:0a:32:1d:
a2:94:6e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 21:54:38 2025 by rpki-client