
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.mft
File: 9WYBbYeCMBKLWOJ51mHBleY5lYg.mft (raw, json)
Hash identifier: bZCt55bPtC1Il4nrxiOBGtsAFmtREO2FO4avZkdIZh8=
Subject key identifier: FC:3C:64:1D:85:09:E5:94:3E:65:1B:DC:E5:13:4B:11:7C:3B:C6:AF
Authority key identifier: F5:66:01:6D:87:82:30:12:8B:58:E2:79:D6:61:C1:95:E6:39:95:88
Certificate issuer: /CN=f566016d878230128b58e279d661c195e6399588
Certificate serial: 019671536EFE90B3422AB044304D78367D0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WYBbYeCMBKLWOJ51mHBleY5lYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.mft
Manifest number: 04A6
Signing time: Sat 26 Apr 2025 09:00:15 +0000
Manifest this update: Sat 26 Apr 2025 09:00:15 +0000
Manifest next update: Sun 27 Apr 2025 09:00:15 +0000
Files and hashes: 1: 9WYBbYeCMBKLWOJ51mHBleY5lYg.crl (hash: 8e5QzxtCczYSbCEPcGGTJ7u2xvm3N1nai+V56s8VwpE=)
2: FK1-eXhRSe8ffp_S_lHbaTgBt8o.roa (hash: isewhw2bUh3V4X01VwpIosa0D4eXIb8LPC/N4oNejio=)
3: d9_S0MdBcLLQhVMY4GIXLkmlz3w.roa (hash: JIdW7E8RpIHlAxf+ndeNBtGoppjXWf7rJVf8yChsf7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WYBbYeCMBKLWOJ51mHBleY5lYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 09:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:71:53:6e:fe:90:b3:42:2a:b0:44:30:4d:78:36:7d:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f566016d878230128b58e279d661c195e6399588
Validity
Not Before: Apr 26 09:00:15 2025 GMT
Not After : Apr 27 09:00:15 2025 GMT
Subject: CN=fc3c641d8509e5943e651bdce5134b117c3bc6af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e6:c0:ad:1d:c9:55:1b:a8:ed:33:68:1b:51:
4e:54:fa:35:3b:e8:b5:1c:05:27:fb:13:03:e0:ee:
7c:69:8b:90:b3:50:51:d0:fb:a6:c9:cc:a9:88:b7:
66:f3:2f:44:5e:2c:45:30:75:22:f6:53:06:77:33:
8b:b3:63:aa:e5:09:44:12:ad:b0:d1:9b:24:b7:53:
9f:04:ba:95:23:4d:39:df:40:e1:51:78:ad:ed:99:
7c:17:ad:45:c4:ac:dc:50:4d:2c:3d:f1:04:93:7e:
0f:dc:28:e3:c3:13:ec:23:64:ed:32:c6:f4:ba:ae:
6f:b9:88:15:e4:14:e1:ed:e3:48:ee:0a:05:bc:b9:
83:60:de:89:f8:8d:5b:61:f5:39:8a:68:95:86:3f:
de:01:27:d0:77:71:45:15:f4:da:2e:5c:01:e4:17:
c3:ce:e0:c7:ac:9a:49:bd:0a:b4:74:cb:76:ab:24:
09:1e:27:d9:b5:d4:46:d4:fc:6b:c5:2c:db:ba:16:
74:48:d2:c3:71:94:eb:98:a8:d0:aa:30:c4:62:4d:
7b:3a:0c:2b:1a:8f:ac:0f:24:28:a7:e7:1a:ab:3d:
3f:4c:36:65:1a:ed:87:4f:17:88:f8:91:f1:5f:6b:
a2:47:27:27:95:e3:3e:5d:f6:64:5a:52:e4:9c:4a:
75:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:3C:64:1D:85:09:E5:94:3E:65:1B:DC:E5:13:4B:11:7C:3B:C6:AF
X509v3 Authority Key Identifier:
keyid:F5:66:01:6D:87:82:30:12:8B:58:E2:79:D6:61:C1:95:E6:39:95:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WYBbYeCMBKLWOJ51mHBleY5lYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:80:49:2c:bb:bd:20:10:3e:c6:c8:bd:2c:a4:e6:a2:ee:36:
e8:55:e0:d0:57:85:b9:eb:fd:fe:6e:85:1e:aa:68:24:d0:02:
f8:60:2c:02:c1:26:be:0b:c6:93:ca:a1:04:97:45:ea:91:19:
cb:64:84:6c:13:a6:b0:0c:80:9a:62:ea:db:1d:11:b9:5b:a6:
a8:ca:cc:90:3b:ae:58:fa:33:8a:be:90:bd:39:3a:b4:ab:3a:
25:4a:5a:99:42:40:c3:46:96:fa:0e:50:35:f4:6f:bc:3d:83:
bb:ed:40:00:c9:8d:bd:93:d0:bc:86:66:4c:57:40:31:22:53:
bc:bc:78:5c:45:9a:d4:5a:e6:4c:67:10:c9:92:70:0c:67:39:
c4:c0:b9:f7:2c:d2:0b:c0:67:45:f9:74:e9:d1:76:e1:f3:5e:
7a:82:db:a9:27:d2:35:b5:70:dc:d6:88:b5:bd:56:5e:02:73:
2f:46:7d:8b:44:fd:9a:8a:b4:da:3c:20:0b:25:24:8c:4b:61:
d4:1b:ae:f7:7c:c1:e3:9a:c9:1f:0a:f6:77:2e:c5:64:95:15:
27:bb:ef:59:e4:ce:17:b4:66:2d:1e:5a:8e:37:3b:f0:9d:40:
d9:71:2d:47:9e:06:1d:8a:f2:e3:16:e4:14:c4:e5:0e:ea:b1:
b4:a9:17:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:29:25 2025 by rpki-client