Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.mft
File: k9TErXMeRe0yCi84q3C3p7_36nk.mft (raw, json)
Hash identifier: JwTb/pcslx+7Ycdf3Gx0kA3NTsjuNvzsz/2+2KWMGNY=
Subject key identifier: 1A:3D:6D:64:E1:D9:D1:8B:10:5B:DD:04:C4:48:DF:F0:DA:A7:C3:DD
Authority key identifier: 93:D4:C4:AD:73:1E:45:ED:32:0A:2F:38:AB:70:B7:A7:BF:F7:EA:79
Certificate issuer: /CN=93d4c4ad731e45ed320a2f38ab70b7a7bff7ea79
Certificate serial: 01967755F723EE2505EA2493A604B9A2D0B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k9TErXMeRe0yCi84q3C3p7_36nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.mft
Manifest number: 0DD2
Signing time: Sun 27 Apr 2025 13:00:44 +0000
Manifest this update: Sun 27 Apr 2025 13:00:44 +0000
Manifest next update: Mon 28 Apr 2025 13:00:44 +0000
Files and hashes: 1: QcUww1gBut5P9LED1fX9vTB1tFI.roa (hash: L8MG8T6h4oWceQxYV3j9aYR1Fk9m/+E+nrLcLpw/ZNc=)
2: Sb2fgxISW-k8wA_jVXd4LPL4sOw.roa (hash: LphNHUTsgnKV2YEr+uySGx/2aJwsuve38PTMVdLOS6w=)
3: k9TErXMeRe0yCi84q3C3p7_36nk.crl (hash: xilvGM5fVizfEYPGxeB2H3tWygZH1P1TlXVBnSXHH3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/k9TErXMeRe0yCi84q3C3p7_36nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:55:f7:23:ee:25:05:ea:24:93:a6:04:b9:a2:d0:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93d4c4ad731e45ed320a2f38ab70b7a7bff7ea79
Validity
Not Before: Apr 27 13:00:44 2025 GMT
Not After : Apr 28 13:00:44 2025 GMT
Subject: CN=1a3d6d64e1d9d18b105bdd04c448dff0daa7c3dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:44:d8:48:bb:82:c4:13:6b:5e:47:28:bc:c0:
e2:3f:fd:53:b8:6a:2e:d8:7d:38:d4:54:3b:38:20:
b6:e3:43:5d:ed:95:c2:54:ff:52:cc:a5:d8:0f:1c:
74:f9:5c:a7:b9:d8:a6:62:c3:6f:5d:c7:98:36:72:
99:39:42:02:1a:0c:bd:39:bc:2d:f9:ed:5a:f1:81:
f2:61:b1:51:8a:2e:e0:99:3e:c8:12:12:0e:8d:d5:
b3:63:25:ba:e9:d8:3d:5e:67:e7:e4:7f:99:22:05:
d9:93:b1:95:a9:c7:ce:f7:21:df:d6:67:f7:32:8e:
f5:38:eb:7f:54:24:30:be:c2:4b:a4:e7:4b:dd:b0:
6f:64:7d:8c:ab:14:59:9e:a9:a7:2e:ae:36:33:64:
e1:5b:33:02:1c:f0:51:d8:0c:21:f2:bb:bb:bd:2b:
ed:0e:ca:ac:c8:84:52:e7:74:c7:70:a0:7f:cc:5d:
c0:47:b5:1b:d2:b1:74:7b:de:3e:2f:94:a7:1f:d1:
2f:a9:28:d1:2b:ac:7f:3b:32:64:b7:dc:d9:06:06:
a5:b0:24:1c:78:e5:01:b4:aa:d4:06:b7:1f:04:5c:
0d:3f:dd:b9:74:c4:50:4a:38:fb:a6:3a:ef:49:c2:
a9:d5:29:a2:19:bc:f4:1b:22:15:36:c2:4c:50:3f:
5a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:3D:6D:64:E1:D9:D1:8B:10:5B:DD:04:C4:48:DF:F0:DA:A7:C3:DD
X509v3 Authority Key Identifier:
keyid:93:D4:C4:AD:73:1E:45:ED:32:0A:2F:38:AB:70:B7:A7:BF:F7:EA:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9TErXMeRe0yCi84q3C3p7_36nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:9b:b3:e1:16:09:80:91:85:b4:74:73:f3:2e:7f:af:7f:1a:
92:b8:d0:b7:55:ef:94:ce:ea:50:78:2c:66:42:e4:13:c0:7b:
32:da:78:9f:16:48:09:6f:35:04:8d:62:24:85:a8:23:76:80:
cb:f9:12:88:33:c5:b6:1a:aa:53:96:37:f1:9b:83:92:a2:ea:
a0:27:64:1a:83:2f:8a:49:99:f1:f7:cc:c8:75:76:b4:47:91:
9f:3b:62:e0:92:75:96:4e:b5:e2:c1:72:b9:b2:e3:3e:bf:91:
73:ec:a6:90:29:05:28:8a:8c:c4:f1:a1:64:8b:c4:a1:56:06:
52:ba:54:54:92:1f:e7:48:77:6b:c5:ec:06:ef:01:3c:17:51:
99:ce:9b:62:84:04:04:7c:5f:a1:62:2a:f2:80:8f:b4:91:9a:
bf:97:95:5b:f5:d8:13:78:00:36:d2:ce:5c:48:64:db:93:ab:
44:ce:3b:96:e7:3d:d6:e7:f7:bd:2e:02:b1:84:e9:b6:a7:88:
7e:80:d1:11:e3:59:37:e5:aa:20:d9:48:57:38:15:02:73:06:
05:e7:40:28:79:a6:68:9b:c4:40:20:8a:a4:13:4b:58:a9:69:
e7:d9:6d:20:10:86:d0:55:80:de:f9:f3:87:87:f7:a4:db:c1:
2b:a3:81:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:29:24 2025 by rpki-client