Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.mft
File: 9KvMeaNn2cASwWhKhCKZbNxD3nY.mft (raw, json)
Hash identifier: 7oFS88wAhs6Ra2cgt0TxtjdV5aeYo3RBVw2Q77ToVRU=
Subject key identifier: 74:F5:14:A4:D8:05:4A:9B:FD:B7:9E:90:A1:A4:A5:06:2E:D3:13:5B
Authority key identifier: F4:AB:CC:79:A3:67:D9:C0:12:C1:68:4A:84:22:99:6C:DC:43:DE:76
Certificate issuer: /CN=f4abcc79a367d9c012c1684a8422996cdc43de76
Certificate serial: 0196865B2444AA75ED7E211DFF86F643D9AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9KvMeaNn2cASwWhKhCKZbNxD3nY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.mft
Manifest number: 0336
Signing time: Wed 30 Apr 2025 11:00:42 +0000
Manifest this update: Wed 30 Apr 2025 11:00:42 +0000
Manifest next update: Thu 01 May 2025 11:00:42 +0000
Files and hashes: 1: 6vjl9U2iQ2PU377HYgeQNGNavVA.roa (hash: 9lo8xMTqnMTjqGzAvxVHUfsjdWxdily2JUl3SHSBWVE=)
2: 9KvMeaNn2cASwWhKhCKZbNxD3nY.crl (hash: kzuBnv+JzZbsHXuXGxEY1eIy0eFbLUn3dhh0bXNmpJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9KvMeaNn2cASwWhKhCKZbNxD3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:5b:24:44:aa:75:ed:7e:21:1d:ff:86:f6:43:d9:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4abcc79a367d9c012c1684a8422996cdc43de76
Validity
Not Before: Apr 30 11:00:42 2025 GMT
Not After : May 1 11:00:42 2025 GMT
Subject: CN=74f514a4d8054a9bfdb79e90a1a4a5062ed3135b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c1:2d:57:33:65:e7:14:cf:5d:74:3d:69:b3:
31:90:4e:be:76:1b:42:f0:4d:c4:45:de:33:fc:9e:
28:10:55:97:26:7e:a9:0a:04:b3:8e:c4:47:9e:ca:
d9:4b:bf:16:d2:f3:0d:36:7f:cb:18:f0:87:60:9b:
a8:cf:63:53:26:49:68:48:38:78:db:54:b9:35:b5:
fb:c2:93:a9:60:19:21:af:71:80:af:d2:95:5b:d3:
57:48:45:82:03:e1:66:59:bd:34:4d:96:6d:4d:39:
77:e0:6f:82:bf:68:d3:87:16:96:de:94:c6:b9:95:
e0:d5:1a:30:9a:bb:e2:68:a7:70:dc:70:5a:ca:b9:
b4:1a:a3:f7:df:e1:85:fa:a3:93:2c:d5:34:e9:ae:
59:ce:e3:90:c9:29:ba:3e:54:c8:c8:0e:8e:91:2d:
70:1f:81:41:dd:d8:bb:7f:26:cf:d4:cf:3d:b6:c8:
0e:fe:1c:36:9f:10:7d:eb:44:4f:9e:9b:4b:ad:4b:
5b:38:bf:f3:7a:14:2d:83:ff:76:b7:cc:e2:0f:2c:
b4:af:62:a8:77:7a:59:d3:b7:b9:ee:6e:6f:18:58:
e6:b9:3f:15:be:1b:23:f9:99:38:94:21:47:15:be:
3a:60:d8:a8:20:8c:43:45:1b:37:e4:e8:c7:f1:b4:
fe:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:F5:14:A4:D8:05:4A:9B:FD:B7:9E:90:A1:A4:A5:06:2E:D3:13:5B
X509v3 Authority Key Identifier:
keyid:F4:AB:CC:79:A3:67:D9:C0:12:C1:68:4A:84:22:99:6C:DC:43:DE:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9KvMeaNn2cASwWhKhCKZbNxD3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:52:e4:2c:75:af:47:8e:54:ff:fa:39:28:da:18:16:6f:31:
3a:83:b0:a7:48:29:ed:73:da:65:53:fc:fe:a0:d7:24:94:a3:
ca:92:36:03:b3:9f:58:89:ac:b8:92:06:2a:ad:80:43:ff:ba:
10:d5:a0:c4:57:d0:9b:01:48:7e:21:b3:92:a1:50:84:0d:61:
ef:2e:c0:a5:32:f6:5c:0e:3c:1c:4d:55:5b:6a:06:97:9e:8b:
e9:56:bf:47:f3:d7:16:ed:2e:4d:a9:7f:e9:4c:25:5b:17:6c:
86:fc:42:1e:84:6e:37:ae:67:d5:2c:d3:dd:69:c0:54:a5:89:
3b:ca:34:9c:cb:a7:9e:c0:c8:c7:b0:2e:e4:c6:a8:9b:78:73:
6a:dd:75:dd:4e:da:98:96:e2:20:f5:e9:8a:9a:50:c0:03:19:
8e:9d:89:e2:c0:b4:48:81:1c:71:ed:b6:86:d7:ce:13:c7:63:
42:50:49:a8:03:84:80:f3:63:21:43:5f:45:7a:9b:c4:92:fa:
f7:d9:fe:85:cf:d1:8a:4f:ff:3f:f3:94:92:87:79:91:63:ea:
f9:a3:04:32:82:07:87:d2:3c:36:ed:fa:8b:9b:28:bf:9d:64:
5b:be:92:6b:45:41:8c:f3:af:e0:b6:60:3c:95:f0:ae:06:5b:
76:59:b4:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:27:52 2025 by rpki-client