Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.mft
File: 9Y-A0jqdiu1P4xH3IiCcldqarUY.mft (raw, json)
Hash identifier: zU30ldhvRSZJQAuf8w4Ymx66HznoUsauuuDGN7cnhYY=
Subject key identifier: 39:DE:A9:86:D8:C4:E1:13:9A:FE:90:EE:BE:C2:02:FB:72:8F:28:D0
Authority key identifier: F5:8F:80:D2:3A:9D:8A:ED:4F:E3:11:F7:22:20:9C:95:DA:9A:AD:46
Certificate issuer: /CN=f58f80d23a9d8aed4fe311f722209c95da9aad46
Certificate serial: 01969FE3FBFEE9BE675DEE0095450D2734C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Y-A0jqdiu1P4xH3IiCcldqarUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.mft
Manifest number: 0C02
Signing time: Mon 05 May 2025 10:00:40 +0000
Manifest this update: Mon 05 May 2025 10:00:40 +0000
Manifest next update: Tue 06 May 2025 10:00:40 +0000
Files and hashes: 1: 9Y-A0jqdiu1P4xH3IiCcldqarUY.crl (hash: MjCLPasM0Bm3vHhZGefM+crVU6gXngH8gvVaTxYeTvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Y-A0jqdiu1P4xH3IiCcldqarUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 08:37:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:e3:fb:fe:e9:be:67:5d:ee:00:95:45:0d:27:34:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f58f80d23a9d8aed4fe311f722209c95da9aad46
Validity
Not Before: May 5 10:00:40 2025 GMT
Not After : May 6 10:00:40 2025 GMT
Subject: CN=39dea986d8c4e1139afe90eebec202fb728f28d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c4:e5:46:7f:e6:45:2b:9e:51:24:ed:28:ac:
c8:15:d7:50:37:d4:75:fb:54:ea:d0:40:ae:46:27:
64:41:e3:2c:2e:b1:aa:90:3b:78:bb:4a:e1:f1:4b:
2b:51:8f:10:24:61:e2:4f:07:64:aa:11:17:3b:99:
5e:8b:ae:0c:b7:7f:84:92:c2:59:a4:2f:9f:c6:17:
01:37:a0:a4:8d:a6:af:b5:26:ad:e1:7d:22:de:79:
8b:e8:76:58:91:fa:ba:81:da:db:cb:42:e7:21:19:
7d:ca:60:4d:29:72:d0:36:db:1e:66:c2:e4:d4:b6:
fa:a3:08:b3:8b:a0:76:c7:08:48:9f:aa:c9:62:19:
4a:c5:b1:4a:38:5a:93:09:95:fe:3e:05:70:55:30:
86:a1:6b:2a:6b:5c:cc:58:09:ae:df:27:5c:c8:ef:
f2:82:63:0b:fe:e6:5b:a0:49:38:9c:7a:aa:70:38:
d3:2d:c5:0e:1b:20:c5:7b:ed:50:fb:2e:8a:79:6e:
42:9b:ec:6e:0b:da:0a:dc:79:b0:4a:a1:3a:fb:03:
52:dc:45:d2:dc:61:c9:6b:94:c6:75:67:d9:87:6b:
02:7b:5c:63:37:bd:06:2f:9a:d9:ed:69:95:09:d7:
cc:7d:58:de:6b:10:d3:75:1b:f5:1e:ba:db:a9:b0:
00:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:DE:A9:86:D8:C4:E1:13:9A:FE:90:EE:BE:C2:02:FB:72:8F:28:D0
X509v3 Authority Key Identifier:
keyid:F5:8F:80:D2:3A:9D:8A:ED:4F:E3:11:F7:22:20:9C:95:DA:9A:AD:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Y-A0jqdiu1P4xH3IiCcldqarUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:5b:d0:4a:1f:7b:3c:c9:c4:f2:fc:6e:aa:21:90:4f:6b:a5:
79:aa:1e:13:99:f2:61:71:85:e2:23:e0:9c:9f:ac:3f:4f:17:
15:da:87:3f:61:56:9a:3f:a4:02:c6:18:cf:fd:e0:d0:46:52:
35:16:79:eb:00:d5:8a:48:6c:2d:31:ea:7d:ba:ca:f8:fc:06:
7e:40:e5:ac:49:72:d9:a0:ec:d8:91:65:aa:53:16:d9:9d:f4:
74:3f:12:19:6c:2b:20:c9:f7:1a:a3:2b:1e:62:19:08:b2:41:
b4:96:e7:d2:53:63:32:6d:02:8a:33:46:68:41:55:7f:c1:6f:
c5:27:36:f4:2c:e0:c0:82:79:a6:00:61:fc:94:30:4b:2c:f8:
8e:d8:6f:5d:4e:b6:2c:1e:86:09:34:79:54:4a:24:3f:15:03:
b2:56:83:6a:2b:52:c4:df:66:6f:9f:fc:6f:6f:34:f9:fa:b7:
c0:10:db:05:e7:53:80:63:11:dc:25:1b:08:e1:7a:4b:d0:7a:
73:dc:50:47:eb:e3:28:50:de:65:af:f4:ba:dc:69:bc:a0:7e:
4a:4f:44:dd:ff:47:ff:8e:57:64:e8:de:6b:e7:45:3d:c1:b5:
fa:9d:72:f1:9f:04:f7:eb:98:b4:45:a5:3a:5d:c0:87:e0:f3:
1f:18:99:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 13:21:08 2025 by rpki-client