Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.mft
File: 9VW6bis9tVIdvHBipYwW3aG58i0.mft (raw, json)
Hash identifier: Ghiqp1+qFw+rI6sraxFIUY/79ISaf4HwXN51/0qmZPs=
Subject key identifier: 41:A9:1E:CA:62:AD:97:C4:08:F4:74:30:5D:91:44:22:43:33:5C:C5
Authority key identifier: F5:55:BA:6E:2B:3D:B5:52:1D:BC:70:62:A5:8C:16:DD:A1:B9:F2:2D
Certificate issuer: /CN=f555ba6e2b3db5521dbc7062a58c16dda1b9f22d
Certificate serial: 0196862465F9303C70C1630E691F40A931C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9VW6bis9tVIdvHBipYwW3aG58i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.mft
Manifest number: 02D8
Signing time: Wed 30 Apr 2025 10:00:54 +0000
Manifest this update: Wed 30 Apr 2025 10:00:54 +0000
Manifest next update: Thu 01 May 2025 10:00:54 +0000
Files and hashes: 1: 2n7OMl3jQfBIql5u4fGHwPSLtNw.roa (hash: 1rKFkHzCGzWhEvrCyPc6hzfuk0GlXlkcWKE6261l+UI=)
2: 9VW6bis9tVIdvHBipYwW3aG58i0.crl (hash: ATFipo74nA90WhmwkRvC1kWHGvyHZaxPpxHcf4oDmcc=)
3: R9C9RHOYfHsQX3_4qdQpXgxkEVg.roa (hash: TG8phgVc45ubyKw+a5c8BVXvVbA9fhRO3sFvs8XmDD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9VW6bis9tVIdvHBipYwW3aG58i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:24:65:f9:30:3c:70:c1:63:0e:69:1f:40:a9:31:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f555ba6e2b3db5521dbc7062a58c16dda1b9f22d
Validity
Not Before: Apr 30 10:00:54 2025 GMT
Not After : May 1 10:00:54 2025 GMT
Subject: CN=41a91eca62ad97c408f474305d91442243335cc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5d:28:19:6d:81:35:07:f1:0a:11:5c:c9:ba:
88:e2:6e:b5:ca:b2:46:08:29:c3:25:f5:ff:18:3d:
b2:84:c2:49:ea:36:f9:8b:bc:a4:1f:4f:b6:fe:64:
4a:f9:2f:9e:33:20:5a:61:47:a4:bd:ec:7c:8e:f0:
36:43:8f:17:8c:48:8d:ee:e5:ab:cd:d1:9e:77:99:
28:6e:51:27:eb:94:93:5b:9b:44:30:98:85:5b:b4:
a0:b0:e4:98:c0:0d:11:82:84:36:04:53:78:2e:64:
08:aa:25:7f:f2:d6:f5:39:56:89:75:51:4e:1a:6e:
b8:3e:41:d0:90:eb:00:ac:be:4e:6c:75:bb:ac:93:
45:45:07:71:d2:3a:51:ee:82:f7:c2:23:2f:2f:c1:
6f:32:cb:4a:32:d2:8d:43:5d:49:93:b8:fb:14:ae:
f0:4b:06:85:c1:0c:f3:f4:03:f5:fc:0c:92:bc:9a:
dc:59:31:d6:43:22:6e:20:f8:fe:c4:6a:83:de:5f:
c2:a6:e9:3b:b3:a9:5a:18:22:7c:ae:b9:f5:20:7a:
38:cd:54:98:15:c5:42:eb:b8:c1:2f:d4:c3:da:c6:
cc:9f:f2:54:d7:85:15:07:83:d0:91:8b:79:3e:b5:
06:f3:29:e1:c7:e0:c9:cb:1c:6c:22:20:b0:25:94:
b9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:A9:1E:CA:62:AD:97:C4:08:F4:74:30:5D:91:44:22:43:33:5C:C5
X509v3 Authority Key Identifier:
keyid:F5:55:BA:6E:2B:3D:B5:52:1D:BC:70:62:A5:8C:16:DD:A1:B9:F2:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9VW6bis9tVIdvHBipYwW3aG58i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:05:dd:57:6f:36:d2:24:84:c0:5f:f7:31:90:22:cb:54:7c:
80:b5:c1:9f:af:db:90:ef:5b:f8:93:4c:b8:1d:9d:a6:12:14:
a4:72:d7:65:6b:30:9c:61:01:76:dc:48:a4:de:ea:f7:95:9b:
ba:be:80:15:d8:28:84:81:7f:27:c0:e1:e7:10:e7:61:a7:33:
b6:2a:26:82:76:b2:a3:db:00:45:18:e3:6a:c2:af:f5:fe:11:
5a:48:16:3e:1d:1d:ec:76:c0:b0:a4:82:c1:48:aa:e2:6b:e6:
11:c5:c6:91:12:e6:41:af:03:b8:e7:68:32:2d:3b:97:9f:6b:
40:65:72:e8:da:52:eb:00:00:35:df:76:5e:a8:18:47:c5:e4:
87:da:b4:45:4d:f7:96:2e:cc:d4:4a:1c:5a:35:e5:3a:63:81:
59:2b:80:c2:d6:98:8a:f7:f2:e5:36:9c:d5:3e:6d:08:c2:f5:
70:87:38:93:ac:61:df:b7:e5:27:f4:51:20:9b:55:6c:02:e8:
f7:41:ae:9d:28:03:4b:bf:ad:37:b6:72:aa:c8:be:b7:84:b6:
95:a0:0d:10:cb:5f:b6:d5:6b:00:75:6f:1b:75:57:9f:47:a3:
ed:91:b4:60:4f:26:ec:39:33:ee:9e:94:21:e5:5e:5d:ba:8b:
01:5d:0b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 14:01:43 2025 by rpki-client