Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/0879d8-f216-45ab-bf87-23e1dadf106c/1/9NwmxibFHF3vbyRm849VslApZC8.mft
File: 9NwmxibFHF3vbyRm849VslApZC8.mft (raw, json)
Hash identifier: kiiY7N3sfk1RZrrwrjfblasIyDwAoY3kdf38CvIfN2w=
Subject key identifier: 68:10:79:78:75:5D:48:9A:78:21:C3:F1:9F:71:81:94:17:7B:DF:A1
Authority key identifier: F4:DC:26:C6:26:C5:1C:5D:EF:6F:24:66:F3:8F:55:B2:50:29:64:2F
Certificate issuer: /CN=f4dc26c626c51c5def6f2466f38f55b25029642f
Certificate serial: 01968390F34EC630A311C8171D54D694B136
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NwmxibFHF3vbyRm849VslApZC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/0879d8-f216-45ab-bf87-23e1dadf106c/1/9NwmxibFHF3vbyRm849VslApZC8.mft
Manifest number: 0D81
Signing time: Tue 29 Apr 2025 22:00:36 +0000
Manifest this update: Tue 29 Apr 2025 22:00:36 +0000
Manifest next update: Wed 30 Apr 2025 22:00:36 +0000
Files and hashes: 1: 9NwmxibFHF3vbyRm849VslApZC8.crl (hash: PSXWmU1KaYYzskeoLvN0Q/4F7rHjUbmMNjTVhq+YTFU=)
2: XI2V1xAOtuCnHnEsCZ4HB4sk5c0.roa (hash: NGuYGkHyS6sZ+OmDpCbd7Xg31/u7/ppig2sfjfcm+Ik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/0879d8-f216-45ab-bf87-23e1dadf106c/1/9NwmxibFHF3vbyRm849VslApZC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/0879d8-f216-45ab-bf87-23e1dadf106c/1/9NwmxibFHF3vbyRm849VslApZC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9NwmxibFHF3vbyRm849VslApZC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 22:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:90:f3:4e:c6:30:a3:11:c8:17:1d:54:d6:94:b1:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4dc26c626c51c5def6f2466f38f55b25029642f
Validity
Not Before: Apr 29 22:00:36 2025 GMT
Not After : Apr 30 22:00:36 2025 GMT
Subject: CN=68107978755d489a7821c3f19f718194177bdfa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b1:ce:ea:fa:37:e3:3e:07:61:17:94:b7:c9:
34:39:53:94:1f:00:a3:7d:81:bd:61:d6:c8:f4:cc:
e4:ea:2e:97:9f:a8:5b:e8:3b:6e:28:db:06:a0:d7:
ea:3d:eb:56:7f:c7:ba:b5:91:94:f7:67:ef:b1:3d:
91:b3:34:93:9e:8c:5d:d8:c6:ae:13:e5:ba:d1:96:
ee:f0:55:7f:e5:56:54:3c:6b:10:aa:f6:b9:e7:5e:
82:7a:4d:fa:1a:19:4e:90:ef:8f:5d:86:24:3d:72:
52:d6:2c:ff:86:d8:2b:eb:93:e6:7c:b6:5a:66:3b:
4c:71:50:88:4b:c6:ca:a1:fc:8a:a4:ac:eb:8f:34:
db:b5:85:55:0a:e6:bc:18:cd:09:18:40:cb:af:d5:
ed:d5:08:5d:d7:50:b1:95:c8:06:59:24:12:bf:3f:
80:66:b3:13:4c:5c:26:6c:23:6c:78:6d:7c:3c:b9:
19:9a:f2:60:46:68:04:8a:65:dd:22:ec:a1:9b:26:
4d:b6:21:34:c4:67:f9:92:1f:18:e8:c0:1d:a5:0c:
11:83:be:51:e8:d1:42:d0:45:e0:7b:ef:81:6c:e1:
15:3f:2d:96:cb:6e:7d:da:de:d7:a0:02:db:11:b5:
3f:22:d3:5f:50:cc:2f:ec:1a:38:30:37:6f:f0:f8:
b4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:10:79:78:75:5D:48:9A:78:21:C3:F1:9F:71:81:94:17:7B:DF:A1
X509v3 Authority Key Identifier:
keyid:F4:DC:26:C6:26:C5:1C:5D:EF:6F:24:66:F3:8F:55:B2:50:29:64:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NwmxibFHF3vbyRm849VslApZC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0879d8-f216-45ab-bf87-23e1dadf106c/1/9NwmxibFHF3vbyRm849VslApZC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0879d8-f216-45ab-bf87-23e1dadf106c/1/9NwmxibFHF3vbyRm849VslApZC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:8b:4a:97:a3:da:3e:22:7a:e1:15:b7:94:e2:f7:49:20:ba:
58:01:eb:34:ba:63:71:a0:8b:eb:71:50:b8:c7:8e:2d:b8:5b:
6b:54:c5:56:10:b1:66:54:24:87:6c:2f:6a:cd:92:20:51:48:
d2:58:c2:e1:d7:f5:13:0f:1d:fb:34:41:b9:c5:04:2e:8b:a2:
54:56:7b:69:ab:96:19:32:b4:69:55:fc:3a:87:7c:06:3d:e7:
5e:3d:e5:84:8e:2b:4d:61:63:15:4e:78:b0:ae:5d:cf:c7:df:
11:42:2b:ca:c4:71:3c:1a:9f:91:1a:8d:b4:86:54:e2:37:a2:
18:28:f7:d4:e3:e7:57:dd:37:96:48:20:da:6c:44:f5:cc:2e:
26:30:9d:52:b8:63:0c:2e:17:7c:dc:1c:87:66:bd:05:18:0c:
b4:03:21:c1:13:9e:82:13:04:a2:c3:77:f5:29:eb:10:e0:f5:
49:35:de:0a:e1:c2:de:02:7b:a7:ac:17:dc:64:f9:f1:14:6c:
84:35:65:6e:b6:3b:2e:08:a9:26:57:3b:cc:a5:cf:eb:29:60:
88:f1:0a:21:ad:37:ca:c4:22:8a:a4:db:bc:9d:3e:fb:37:03:
7b:5f:7e:0a:cd:92:a5:65:5e:f2:42:d1:fb:4d:1f:11:82:f8:
2e:50:f3:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 02:09:27 2025 by rpki-client