Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.mft
File: 9pGrMkX_iVpy3W_wdDw3e28PiaY.mft (raw, json)
Hash identifier: MZbvYstrKRBvBEV3LMkqfv+mF66zbcY/xMVEwammYt8=
Subject key identifier: 63:D9:C6:95:22:A0:E9:0D:4D:43:4E:A5:3D:69:23:7F:39:63:1F:06
Authority key identifier: F6:91:AB:32:45:FF:89:5A:72:DD:6F:F0:74:3C:37:7B:6F:0F:89:A6
Certificate issuer: /CN=f691ab3245ff895a72dd6ff0743c377b6f0f89a6
Certificate serial: 019687A46B6ADD6783AC4BA506A5C5569B9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9pGrMkX_iVpy3W_wdDw3e28PiaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.mft
Manifest number: 0637
Signing time: Wed 30 Apr 2025 17:00:21 +0000
Manifest this update: Wed 30 Apr 2025 17:00:21 +0000
Manifest next update: Thu 01 May 2025 17:00:21 +0000
Files and hashes: 1: 9pGrMkX_iVpy3W_wdDw3e28PiaY.crl (hash: 3pB1zRHmtEzFCtCGVNW8epND8nh4ze00KNIbs1hUEfQ=)
2: NNs7_agCq4a5LGK9vlJAbRyPMSw.roa (hash: /RavIGbCYx2zogfJiuXee/WpGjlrh9UdwbzPF7/qVAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9pGrMkX_iVpy3W_wdDw3e28PiaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:a4:6b:6a:dd:67:83:ac:4b:a5:06:a5:c5:56:9b:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f691ab3245ff895a72dd6ff0743c377b6f0f89a6
Validity
Not Before: Apr 30 17:00:21 2025 GMT
Not After : May 1 17:00:21 2025 GMT
Subject: CN=63d9c69522a0e90d4d434ea53d69237f39631f06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:61:90:f6:97:ef:95:20:c0:83:e7:92:a7:07:
09:cd:db:98:f5:09:ad:14:b6:8b:e0:50:4e:95:43:
2e:2d:df:7b:dd:51:9c:3b:05:3a:b3:1e:df:e8:07:
25:21:a0:18:84:d7:96:93:6b:2f:cc:ad:1d:7a:89:
40:93:71:b5:6d:ca:22:7c:8b:e3:33:a5:0b:32:d3:
ba:fb:eb:0c:18:7e:a5:e5:c0:92:50:95:d4:4b:cd:
19:0e:cb:25:73:64:c0:4e:da:01:2e:21:e8:b6:4f:
52:68:bc:7e:78:79:c4:78:f9:74:6c:8d:ae:e0:fe:
e5:4c:fa:0c:94:d1:6c:f7:61:d4:ff:03:cc:4a:6e:
b3:b5:30:da:8b:06:2c:8f:c6:81:22:82:54:4c:65:
ff:b4:7c:97:d3:d6:2a:94:26:5a:3b:a7:ad:08:7d:
cb:04:70:da:8a:ff:b6:67:25:f8:ea:e3:bb:85:fa:
18:47:12:92:d4:84:15:33:de:94:ca:10:2c:20:df:
17:52:0c:47:2d:58:04:c9:96:f2:07:a8:6f:80:aa:
48:4b:36:70:aa:74:96:4c:8a:d7:b5:d8:4f:40:91:
7b:1b:4b:da:f0:50:29:dd:5d:e3:c1:fe:49:11:ca:
b0:52:9c:d7:1f:3c:57:fa:81:e9:a4:3e:b4:96:6a:
1f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:D9:C6:95:22:A0:E9:0D:4D:43:4E:A5:3D:69:23:7F:39:63:1F:06
X509v3 Authority Key Identifier:
keyid:F6:91:AB:32:45:FF:89:5A:72:DD:6F:F0:74:3C:37:7B:6F:0F:89:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pGrMkX_iVpy3W_wdDw3e28PiaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:31:06:ca:d6:5a:0e:ba:ed:f1:ae:52:13:64:65:d8:4e:e6:
a3:14:01:d5:1f:97:e5:ba:65:3f:f4:7d:5c:dd:f3:bc:5e:29:
1d:dd:7e:6c:8b:26:d0:98:24:11:91:eb:89:cb:b8:0c:e7:29:
ca:9b:1e:e3:19:cc:58:f9:61:f8:94:95:a0:f9:69:c3:d0:6d:
c6:1b:7f:19:58:30:e2:d5:1a:3f:fe:d5:07:63:2f:32:89:a9:
a0:f1:43:1e:63:45:04:52:46:ce:85:17:b8:a2:70:37:d5:14:
73:0f:3a:e8:ba:d9:13:c6:c2:7c:db:5e:44:68:08:b8:ae:7a:
de:8f:ac:ad:69:85:7d:f0:08:51:75:ac:54:fa:51:21:2e:cf:
38:fe:4f:34:7a:ee:18:99:bf:f6:1d:f8:70:94:7f:1d:c2:55:
94:a3:d0:de:6e:64:78:ff:c7:59:74:53:30:7f:6a:93:31:17:
f4:f2:b6:94:76:e9:01:53:b2:19:fe:2f:23:13:9c:f8:fd:07:
19:04:d3:c2:41:00:f4:1e:28:27:98:bf:5e:58:e3:7e:48:af:
b7:e7:37:55:7a:94:21:03:d5:02:5f:28:54:99:73:ca:e2:d1:
73:2a:25:d9:a2:f6:b1:37:42:6e:69:84:ff:65:71:2e:38:5e:
a2:4c:74:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:24:46 2025 by rpki-client