Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/3103a1-bc58-444c-8231-43d8a6fd1f45/1/9B_-fSl-5OHU0jM1qatKAIjAJdc.mft
File: 9B_-fSl-5OHU0jM1qatKAIjAJdc.mft (raw, json)
Hash identifier: qRywWF/n9ffJy6pibl7LwJzSmsyjLrTjZkJ6tAIZTlI=
Subject key identifier: 30:93:D9:BF:E8:7E:50:79:23:45:0B:EF:71:EF:E5:E6:95:63:8F:D4
Authority key identifier: F4:1F:FE:7D:29:7E:E4:E1:D4:D2:33:35:A9:AB:4A:00:88:C0:25:D7
Certificate issuer: /CN=f41ffe7d297ee4e1d4d23335a9ab4a0088c025d7
Certificate serial: 019677FB15AC77F6C6539F1DB2160E5237D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9B_-fSl-5OHU0jM1qatKAIjAJdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/3103a1-bc58-444c-8231-43d8a6fd1f45/1/9B_-fSl-5OHU0jM1qatKAIjAJdc.mft
Manifest number: 0AE4
Signing time: Sun 27 Apr 2025 16:01:05 +0000
Manifest this update: Sun 27 Apr 2025 16:01:05 +0000
Manifest next update: Mon 28 Apr 2025 16:01:05 +0000
Files and hashes: 1: 9B_-fSl-5OHU0jM1qatKAIjAJdc.crl (hash: wlzuchxuv23AK2EwWPY9HNoSLKJXIxI4LVrY8oFiDm8=)
2: PRDF7uUUDEgvhpybsRj704dqk1M.roa (hash: 1hJ8QC4+sDAxjl4A67W+QBueyb9hgkEoDhfUwnkhNeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/3103a1-bc58-444c-8231-43d8a6fd1f45/1/9B_-fSl-5OHU0jM1qatKAIjAJdc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/3103a1-bc58-444c-8231-43d8a6fd1f45/1/9B_-fSl-5OHU0jM1qatKAIjAJdc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9B_-fSl-5OHU0jM1qatKAIjAJdc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fb:15:ac:77:f6:c6:53:9f:1d:b2:16:0e:52:37:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f41ffe7d297ee4e1d4d23335a9ab4a0088c025d7
Validity
Not Before: Apr 27 16:01:05 2025 GMT
Not After : Apr 28 16:01:05 2025 GMT
Subject: CN=3093d9bfe87e507923450bef71efe5e695638fd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:13:6a:2c:7f:f5:84:47:3f:b8:cf:bd:7a:f1:
e9:79:cf:7e:6d:2b:27:42:2d:b3:65:db:4b:e1:37:
bd:c8:22:72:72:be:77:17:b8:a3:e6:2f:44:e4:68:
7a:8d:9e:bb:a8:31:b9:05:5f:6e:7f:b6:ed:a1:b6:
c6:6e:0a:6b:76:29:3f:d3:7a:77:b3:52:cf:0f:70:
ec:9b:59:4c:65:1f:e7:f6:90:00:cc:c2:2d:88:d7:
e0:8c:17:93:2a:f2:d2:a5:80:94:be:4a:a6:14:3c:
3e:ff:af:af:e0:35:94:07:b9:49:38:64:5a:bf:5a:
ae:f4:ed:9d:82:af:a2:8d:2a:09:7d:90:e1:5a:46:
57:84:0e:33:f0:86:b4:69:7b:01:2f:41:3b:d5:99:
82:94:83:a0:17:8d:b0:7d:e5:4e:8e:ba:1d:f9:3d:
74:3c:8b:ef:c5:30:d4:92:64:aa:62:7c:fc:9b:97:
f8:6e:5b:11:8c:2c:80:ba:09:49:f9:fe:a9:ab:17:
fe:2f:30:4e:f7:ce:9b:2c:64:bd:bc:7a:4e:fe:43:
3f:eb:c1:43:39:01:46:14:1b:67:39:56:86:0a:74:
fd:72:56:e4:4a:12:94:cc:57:d5:65:96:d2:eb:20:
3c:b6:12:4d:cb:df:ea:1c:94:79:0e:6e:cc:d6:38:
c1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:93:D9:BF:E8:7E:50:79:23:45:0B:EF:71:EF:E5:E6:95:63:8F:D4
X509v3 Authority Key Identifier:
keyid:F4:1F:FE:7D:29:7E:E4:E1:D4:D2:33:35:A9:AB:4A:00:88:C0:25:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9B_-fSl-5OHU0jM1qatKAIjAJdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3103a1-bc58-444c-8231-43d8a6fd1f45/1/9B_-fSl-5OHU0jM1qatKAIjAJdc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3103a1-bc58-444c-8231-43d8a6fd1f45/1/9B_-fSl-5OHU0jM1qatKAIjAJdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:64:a1:79:5f:7d:9d:c0:67:b3:8c:62:6b:c7:09:f8:50:ff:
c0:86:65:21:dc:a6:d5:ef:c8:e8:91:dc:0b:54:05:42:ba:94:
21:d5:68:38:81:b0:92:a4:0f:f4:31:c1:f4:70:7f:31:a3:71:
89:7e:47:23:21:78:d1:f2:41:11:f6:a5:f5:52:84:66:dc:46:
89:52:04:56:bc:df:19:73:03:2f:f3:45:93:ef:da:46:89:9b:
fb:d1:d7:34:73:4e:c3:e2:58:c7:70:14:0a:2b:69:10:c3:40:
ca:b9:87:b2:87:52:e2:e4:e3:6f:76:a2:4e:97:ab:0a:0b:3e:
8d:ef:a2:18:9c:32:28:46:18:5f:87:59:65:fa:05:d2:5d:9f:
41:ea:ee:96:ae:82:c0:6e:a6:aa:fb:1d:b1:5a:2f:ae:30:54:
e5:43:53:8b:d2:00:7b:d6:0d:95:31:b3:92:4e:61:00:38:49:
b7:f0:9f:7a:1d:b2:8b:89:86:62:e2:ef:e7:59:1b:41:9e:9c:
f6:f8:90:df:d7:d7:52:4c:b4:f2:9d:13:70:cc:55:1f:02:62:
f5:33:bf:69:97:71:83:c2:a3:30:ac:b4:48:2e:fb:aa:b3:10:
13:57:04:82:4b:36:49:63:84:d4:da:5d:53:42:2e:c8:8c:70:
d3:69:01:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:16:21 2025 by rpki-client