Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft
File: l9I64ozYYMjt_WGDVvizH15NySg.mft (raw, json)
Hash identifier: scgt9+1FUOJ7brZCcQ3Kl6IRdKzMPRIj5T0xKZorqJc=
Subject key identifier: 00:0A:FE:EF:97:82:5F:30:2A:43:4B:96:0E:BF:DB:06:0B:FA:C7:B9
Authority key identifier: 97:D2:3A:E2:8C:D8:60:C8:ED:FD:61:83:56:F8:B3:1F:5E:4D:C9:28
Certificate issuer: /CN=97d23ae28cd860c8edfd618356f8b31f5e4dc928
Certificate serial: 019674C2F1FD48584D1F242FC1C4246FF2D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l9I64ozYYMjt_WGDVvizH15NySg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft
Manifest number: 081D
Signing time: Sun 27 Apr 2025 01:00:54 +0000
Manifest this update: Sun 27 Apr 2025 01:00:54 +0000
Manifest next update: Mon 28 Apr 2025 01:00:54 +0000
Files and hashes: 1: jODSDZiB_9CDcQXiT4tsxNlR8Ac.roa (hash: JEMeTXjwzca2z04dyMlf/bVf4aF3EAXQNY7E1cjOdx4=)
2: l9I64ozYYMjt_WGDVvizH15NySg.crl (hash: zmXHpivPUAc0Jp+i+DzAD+irlztmTHH3kgyFHes1Rvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft
rsync://rpki.ripe.net/repository/DEFAULT/l9I64ozYYMjt_WGDVvizH15NySg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 01:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:c2:f1:fd:48:58:4d:1f:24:2f:c1:c4:24:6f:f2:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97d23ae28cd860c8edfd618356f8b31f5e4dc928
Validity
Not Before: Apr 27 01:00:54 2025 GMT
Not After : Apr 28 01:00:54 2025 GMT
Subject: CN=000afeef97825f302a434b960ebfdb060bfac7b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cc:34:0b:65:78:d3:60:88:d8:9a:10:e1:11:
82:9a:82:2e:3b:fe:0e:1b:da:8e:b0:67:6b:3c:cf:
9c:1d:2a:df:7b:ee:a6:31:d3:1d:82:96:f7:bf:5e:
39:50:45:34:52:00:95:ba:7b:a9:09:7d:92:be:1e:
95:0a:0a:c2:73:2c:e6:37:09:1b:0e:b9:77:d7:05:
9f:ef:4b:59:04:9f:80:ac:de:20:6e:8e:16:ca:c4:
97:d9:a3:d3:4a:48:3a:12:c4:d5:52:e5:7d:36:bd:
c4:13:94:9a:2c:63:ae:05:04:8f:13:54:a0:a6:31:
0e:de:e8:93:c8:76:98:b8:5c:38:69:3a:05:71:04:
52:46:f0:dd:a8:ec:9e:57:3a:e6:38:48:5c:e9:d9:
bd:f7:e6:d0:35:bb:54:e9:12:72:6e:c8:d2:1a:e5:
8e:0c:ce:19:99:86:26:6f:a3:e3:73:8c:2b:9a:02:
11:e9:27:37:da:bc:20:d7:05:f9:1b:9a:36:d8:10:
9e:3b:34:c5:a6:00:65:4e:02:bb:32:44:f9:8b:c2:
6b:e6:63:cb:68:bf:0e:08:55:2d:73:1d:ed:06:55:
46:a5:c4:83:ac:d0:cb:fa:d5:fe:92:74:2c:27:61:
fe:0d:61:b3:9a:a1:44:66:2d:d6:56:1e:0a:e5:f6:
19:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:0A:FE:EF:97:82:5F:30:2A:43:4B:96:0E:BF:DB:06:0B:FA:C7:B9
X509v3 Authority Key Identifier:
keyid:97:D2:3A:E2:8C:D8:60:C8:ED:FD:61:83:56:F8:B3:1F:5E:4D:C9:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l9I64ozYYMjt_WGDVvizH15NySg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:41:a7:53:33:ad:18:38:77:1b:87:f1:e6:dc:7b:ad:1a:59:
e9:bc:e6:03:aa:51:34:5b:29:c6:17:2c:7a:88:ab:93:0c:0f:
dd:4f:03:49:bd:25:55:9c:25:0a:eb:5b:c5:a6:fc:26:9a:e5:
fd:1e:7e:96:fa:bc:f8:1b:ef:61:f6:e5:16:f0:14:d1:cb:ac:
b6:44:71:cc:18:c8:2a:36:76:1f:d0:3d:68:3a:73:91:33:d7:
ac:0c:d6:81:15:06:19:d7:cf:0f:87:b4:99:10:b7:f9:60:23:
a5:8f:9e:44:6c:3a:44:93:e3:fe:5a:cd:49:e7:04:bd:b6:93:
35:99:f8:72:e1:cc:a9:a4:98:d1:0c:f5:be:da:45:61:9d:a7:
68:18:74:54:8b:e9:dd:22:91:98:e5:4c:7b:2e:4d:8d:32:60:
9e:f7:57:97:96:cc:c8:b5:8b:b2:5b:b4:5f:20:3e:96:51:c1:
ab:75:db:87:04:dc:8f:36:4b:a4:5a:cb:20:90:4b:a9:67:b0:
71:c3:81:17:8b:63:7d:b9:26:ab:95:47:c8:da:01:5b:5d:42:
47:3a:f8:0b:1f:58:19:7f:eb:1e:a6:1f:df:ec:04:20:41:17:
65:a9:e1:93:7e:5b:50:75:e2:82:87:4c:61:b7:51:b3:e1:48:
8a:ee:b0:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:12:47 2025 by rpki-client