Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft
File: 9Il_29x9JQjfzRTP9gCtQ7knkks.mft (raw, json)
Hash identifier: 0NM/Rfn+oc1Qak/ti7uqrR1YKCF58+nG8lPPagiJ+80=
Subject key identifier: 18:07:49:F1:63:A3:F8:C4:74:F2:74:9D:8E:69:F2:A4:60:16:ED:EB
Authority key identifier: F4:89:7F:DB:DC:7D:25:08:DF:CD:14:CF:F6:00:AD:43:B9:27:92:4B
Certificate issuer: /CN=f4897fdbdc7d2508dfcd14cff600ad43b927924b
Certificate serial: 019683C79073F4940532261B2201A9E8FB12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Il_29x9JQjfzRTP9gCtQ7knkks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft
Manifest number: 0A48
Signing time: Tue 29 Apr 2025 23:00:15 +0000
Manifest this update: Tue 29 Apr 2025 23:00:15 +0000
Manifest next update: Wed 30 Apr 2025 23:00:15 +0000
Files and hashes: 1: 9Il_29x9JQjfzRTP9gCtQ7knkks.crl (hash: CkmyCTsp3sbpsuQyVsvaTfTtDU8o0OwQcze5MgkRhSg=)
2: goWXgCcrT8sdpWvs98SjkshS1QQ.roa (hash: pL/QBtJXrUgZbyv/2j+3PUPuF0UtD1Pg09swJJxayTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Il_29x9JQjfzRTP9gCtQ7knkks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 23:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:c7:90:73:f4:94:05:32:26:1b:22:01:a9:e8:fb:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4897fdbdc7d2508dfcd14cff600ad43b927924b
Validity
Not Before: Apr 29 23:00:15 2025 GMT
Not After : Apr 30 23:00:15 2025 GMT
Subject: CN=180749f163a3f8c474f2749d8e69f2a46016edeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:25:b1:1d:88:b4:be:ab:19:24:9d:a0:f7:16:
24:ca:5d:1d:20:33:89:c3:8e:c1:e2:eb:01:d1:8e:
f1:65:f5:d1:1f:cd:54:12:ef:dc:b2:dd:2c:5c:71:
d8:f4:c6:65:76:85:b4:dc:6e:b6:9c:17:4d:d1:5b:
53:b0:b3:91:02:b5:c8:4c:29:20:c0:30:5e:9e:50:
90:bb:bc:86:01:10:3f:d9:04:ff:f7:05:20:1b:08:
fe:b4:0a:6f:bc:86:d4:4c:8a:cc:d0:7f:6f:56:5e:
7b:54:11:66:dc:cc:d2:34:6b:84:6f:d8:0a:a2:a9:
dd:68:88:27:d9:de:8f:50:10:dd:79:52:60:0e:73:
97:36:fe:ab:7e:f3:71:0f:c4:17:49:6a:c5:45:06:
8a:c6:a4:bd:68:1f:cb:4b:e9:e4:08:dc:5f:e7:00:
ad:c1:7e:6d:25:88:74:94:af:e9:f4:b7:c6:0a:74:
26:da:f4:3e:77:a3:5b:ff:68:49:79:bf:4c:0d:91:
f6:bc:77:ed:d4:26:cc:06:1d:97:1a:18:7f:a3:ba:
6c:02:54:7d:eb:3a:20:4b:67:a6:96:66:69:60:cd:
f8:3e:0d:41:0b:03:93:e5:8b:12:d0:59:28:f6:96:
a1:72:fb:70:0b:5b:a6:fe:95:c1:09:a9:37:ff:52:
ed:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:07:49:F1:63:A3:F8:C4:74:F2:74:9D:8E:69:F2:A4:60:16:ED:EB
X509v3 Authority Key Identifier:
keyid:F4:89:7F:DB:DC:7D:25:08:DF:CD:14:CF:F6:00:AD:43:B9:27:92:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Il_29x9JQjfzRTP9gCtQ7knkks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:cc:f4:48:21:cf:74:fa:f1:2d:88:1f:95:63:13:f2:96:db:
ca:c0:1a:e6:b2:1e:55:ca:f1:81:a1:21:22:ff:b9:97:41:76:
00:f4:76:f8:44:87:68:44:fb:36:24:52:09:75:b0:eb:a5:27:
98:9c:72:89:b1:b4:f2:d8:22:92:d7:cc:8a:2a:3f:7b:9b:33:
0c:df:ac:cf:80:bf:eb:bf:aa:d1:31:2b:57:61:68:f3:c5:0e:
55:bf:b0:b8:40:91:71:85:65:f2:d0:b6:37:c0:e8:28:88:c9:
78:bc:50:62:9f:40:81:ac:1a:c8:a3:2a:56:2f:ec:e5:27:1f:
44:e3:1d:b8:08:65:5a:88:06:8e:1a:71:3c:85:50:6a:b3:12:
dc:47:21:12:29:b7:4e:d6:f9:98:a9:53:a5:ac:0d:ba:56:5f:
05:6d:6f:f5:d1:3f:11:49:cc:54:c9:0a:c7:5c:44:88:51:4d:
ca:9b:6c:ff:7d:87:68:e3:c9:c8:30:55:7d:15:17:c5:eb:4d:
66:a7:ad:bf:70:84:6a:68:51:4d:24:f7:93:5f:74:58:21:2b:
f8:f9:72:f5:67:55:9d:fa:4e:88:5f:6a:bc:83:3c:45:40:cc:
1f:24:e0:f5:b6:68:bb:1c:d3:09:ed:40:6f:f0:1d:4c:44:1f:
88:c9:50:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:15:27 2025 by rpki-client