Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
File: 9F55FBEwzuyFchX5u916Vbr0538.mft (raw, json)
Hash identifier: SiVwtYa7i3i0roJe+ssgAVHtODZEftGO646ErRkXTbc=
Subject key identifier: 5B:65:CE:39:20:20:F6:89:95:E6:E8:75:73:8F:07:3E:9B:54:70:A3
Authority key identifier: F4:5E:79:14:11:30:CE:EC:85:72:15:F9:BB:DD:7A:55:BA:F4:E7:7F
Certificate issuer: /CN=f45e79141130ceec857215f9bbdd7a55baf4e77f
Certificate serial: 01967A572FBBC49C72991DE4DBFF2AC04D28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
Manifest number: 0BDD
Signing time: Mon 28 Apr 2025 03:00:56 +0000
Manifest this update: Mon 28 Apr 2025 03:00:56 +0000
Manifest next update: Tue 29 Apr 2025 03:00:56 +0000
Files and hashes: 1: 9F55FBEwzuyFchX5u916Vbr0538.crl (hash: Z2In8WdViIKSuUR/gKqZJ4EiMwtVa8aEJ1jYIyra6nw=)
2: YyGPwu-_r-eFoNX2ZTx6n9Sl7sU.roa (hash: iag5NIeY+dB9ncpa+rQd04Kk2wb7pISvllYkBby24Kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:57:2f:bb:c4:9c:72:99:1d:e4:db:ff:2a:c0:4d:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f45e79141130ceec857215f9bbdd7a55baf4e77f
Validity
Not Before: Apr 28 03:00:56 2025 GMT
Not After : Apr 29 03:00:56 2025 GMT
Subject: CN=5b65ce392020f68995e6e875738f073e9b5470a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e3:8b:68:29:29:5b:bf:d8:5f:1e:8e:f1:24:
cf:3a:c4:89:24:07:a8:1f:0c:3a:49:74:f7:70:7c:
69:63:61:f7:d4:32:76:60:93:f8:51:a4:64:8c:30:
8f:05:ea:3f:98:72:3c:67:63:01:49:83:6e:87:69:
9f:54:24:c4:fb:03:46:46:15:40:0f:19:4b:80:9e:
76:da:a3:fe:bc:10:a7:f5:08:fd:d5:7a:13:92:46:
7b:23:d3:18:d8:0c:fb:9d:3f:b5:e3:9f:2d:58:86:
89:d2:b9:9d:b2:3d:7a:da:3a:53:41:4f:9a:6e:14:
56:3a:86:c3:7f:7e:5a:05:34:9e:5d:16:c6:17:d5:
f8:af:12:10:2d:03:da:d9:7f:96:77:56:04:57:a1:
d1:01:11:6f:14:f2:8d:0b:5e:52:de:e6:66:ec:6c:
3a:f3:04:4b:47:e6:49:0c:df:99:d7:41:34:fc:39:
e5:3f:c8:c5:a3:51:44:0f:da:63:d8:98:44:c8:e2:
6d:67:5b:06:8a:12:f3:98:c1:7c:b4:c4:a5:84:dc:
3c:45:07:42:4d:b1:89:21:7c:d9:2e:96:9f:6c:1a:
89:30:04:dc:f3:d1:00:a1:87:52:a2:64:32:25:85:
96:50:20:88:e3:ab:5f:72:9a:10:d9:f8:bb:6a:67:
5a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:65:CE:39:20:20:F6:89:95:E6:E8:75:73:8F:07:3E:9B:54:70:A3
X509v3 Authority Key Identifier:
keyid:F4:5E:79:14:11:30:CE:EC:85:72:15:F9:BB:DD:7A:55:BA:F4:E7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:a9:45:a5:96:12:18:02:8f:74:0d:8e:c9:0a:48:17:98:67:
b6:89:28:55:0f:40:81:5b:b9:af:19:43:9f:bf:67:7a:2f:c6:
93:cc:a3:61:f4:66:b2:03:5c:a5:0c:9f:17:cd:40:e8:0d:40:
aa:eb:d4:2b:c4:bf:92:96:49:40:9d:10:fc:7d:47:d8:ec:c0:
41:c0:1f:63:c0:de:f7:ad:3d:1a:de:6c:97:28:d6:e8:44:fb:
20:20:d6:17:8d:84:50:fe:2b:34:fa:a7:48:8c:6f:b8:a0:06:
e8:74:4a:93:14:fa:61:64:05:fa:c2:3d:cd:59:05:3e:46:50:
60:d9:43:07:54:cb:8e:e7:f4:f3:de:ca:02:d1:3d:17:fd:cb:
2f:15:bb:3a:3e:c0:ca:8e:d8:c3:a2:4e:78:36:31:4f:ac:cd:
62:85:59:77:f5:24:eb:61:84:18:81:8a:e8:ea:aa:09:b3:3e:
2a:7e:2e:bb:00:f1:ca:82:b3:5a:4d:23:69:49:a0:ca:d2:1c:
68:0f:3f:e0:85:85:60:29:19:d0:33:a3:a6:4a:7b:0b:78:e0:
e7:50:b0:05:32:e3:18:3b:39:3e:70:fc:7f:14:b5:fb:4c:0e:
92:83:9c:02:ad:7b:75:d9:ae:b6:e3:91:48:73:07:9b:5d:7c:
73:cc:76:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:18:20 2025 by rpki-client