Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/l9nve9MDJN7fcLrOS72ldgwyaxo.mft
File: l9nve9MDJN7fcLrOS72ldgwyaxo.mft (raw, json)
Hash identifier: m6UihvbPCK7ExtC08jE9TaHXO1yN7piIyUzktHluYXs=
Subject key identifier: C9:7C:F4:13:EE:A8:97:88:56:8C:08:B3:E0:6B:9A:D0:5C:D9:E6:68
Authority key identifier: 97:D9:EF:7B:D3:03:24:DE:DF:70:BA:CE:4B:BD:A5:76:0C:32:6B:1A
Certificate issuer: /CN=97d9ef7bd30324dedf70bace4bbda5760c326b1a
Certificate serial: 01967F45FC01AC5883EE123776E4A20529F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l9nve9MDJN7fcLrOS72ldgwyaxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/l9nve9MDJN7fcLrOS72ldgwyaxo.mft
Manifest number: 0DDB
Signing time: Tue 29 Apr 2025 02:00:14 +0000
Manifest this update: Tue 29 Apr 2025 02:00:14 +0000
Manifest next update: Wed 30 Apr 2025 02:00:14 +0000
Files and hashes: 1: N0s8xKfa_bF09tlRJvpRIiwnl5w.roa (hash: 90x2GkpRoKN6DUPIyJuUzKhNvSMsOvRGP9u2xtqB9lE=)
2: l9nve9MDJN7fcLrOS72ldgwyaxo.crl (hash: prTlCf5A+bH2XbolGt82Nb3o06wTI/tHmw8dZomZ+yQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/l9nve9MDJN7fcLrOS72ldgwyaxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/l9nve9MDJN7fcLrOS72ldgwyaxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/l9nve9MDJN7fcLrOS72ldgwyaxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 02:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:45:fc:01:ac:58:83:ee:12:37:76:e4:a2:05:29:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97d9ef7bd30324dedf70bace4bbda5760c326b1a
Validity
Not Before: Apr 29 02:00:14 2025 GMT
Not After : Apr 30 02:00:14 2025 GMT
Subject: CN=c97cf413eea89788568c08b3e06b9ad05cd9e668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:95:5e:2d:90:25:ec:40:8d:a0:f7:fb:58:4a:
42:e2:75:38:fb:4a:2c:f1:7b:d2:69:b9:4a:db:4a:
f8:aa:eb:d7:41:52:24:87:d0:8f:32:84:1c:66:00:
66:9f:b2:8b:0c:41:7a:92:a2:88:17:08:6b:9e:6d:
ab:15:9a:2c:3b:a5:6d:7f:37:7c:05:cc:f2:54:7f:
70:04:02:d0:58:c5:3b:eb:c9:ab:6f:93:03:3e:75:
c5:8b:ac:f7:ee:3b:6d:7b:56:d3:72:5e:62:cb:64:
48:4b:d7:ae:4f:95:28:1d:96:3d:0b:87:3a:7a:49:
3a:51:e0:ed:1c:0c:48:bc:e8:7a:c6:55:8c:18:6b:
cd:c1:d9:e9:89:3e:e1:16:eb:b1:43:97:9a:3e:dc:
03:d0:52:af:cd:48:e3:49:a0:6d:84:6a:31:82:8c:
d1:15:06:84:40:10:15:60:b4:83:6d:37:d9:a9:aa:
de:8d:e8:ec:82:4f:4a:76:4f:f8:35:94:58:67:81:
1e:f7:f2:13:fe:e2:19:af:b0:43:12:6b:61:7e:c5:
8e:e1:c0:37:be:22:93:53:0b:c9:c1:d1:9b:fe:15:
2a:c0:e8:c4:29:71:be:b4:6f:78:bb:f2:f4:2f:34:
af:75:e9:28:d2:c8:3d:58:a2:ed:c1:d7:fe:6d:cb:
5c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:7C:F4:13:EE:A8:97:88:56:8C:08:B3:E0:6B:9A:D0:5C:D9:E6:68
X509v3 Authority Key Identifier:
keyid:97:D9:EF:7B:D3:03:24:DE:DF:70:BA:CE:4B:BD:A5:76:0C:32:6B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l9nve9MDJN7fcLrOS72ldgwyaxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/l9nve9MDJN7fcLrOS72ldgwyaxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/l9nve9MDJN7fcLrOS72ldgwyaxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:27:cb:e0:95:2d:20:31:49:95:6a:2b:b8:83:e1:6c:c6:1e:
76:bc:f5:87:94:e6:e9:c3:0b:f1:32:6f:c9:03:ac:b1:33:67:
10:37:43:3a:93:80:84:c6:a7:c6:ae:cb:51:fd:bb:68:08:38:
25:22:47:4d:ef:09:4f:24:8b:97:7f:a0:52:e6:d5:a9:82:74:
8f:59:ec:52:ea:28:31:5c:1f:26:ff:44:80:06:bb:76:f6:43:
1d:88:33:7a:04:5b:e5:c3:5d:e7:26:fd:17:2d:27:c6:45:66:
44:ee:be:40:e4:f8:81:7f:6c:47:03:68:57:71:e1:50:87:f0:
9e:d7:46:ed:03:fa:c4:a2:bb:5f:2b:3a:31:79:e6:be:bc:75:
44:33:ee:c9:ce:77:6a:25:c6:31:a2:b9:93:2e:80:d4:17:cd:
58:6e:76:c5:1a:06:c8:b8:b0:7b:6b:de:2a:aa:18:dc:4f:3b:
5b:7c:38:fa:21:d0:0c:02:a9:b6:86:ce:df:bc:92:74:25:05:
30:2f:c2:89:40:a2:59:8e:5e:5c:c5:d6:8f:44:fe:35:fd:fb:
dd:80:16:26:77:fe:00:78:9d:b5:d7:ce:de:a6:e4:25:97:a2:
29:06:d6:12:dd:b6:9c:45:0b:37:19:94:25:70:00:51:62:b5:
91:8b:79:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:03:20 2025 by rpki-client