Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.mft
File: 9c9zs-Rfdy-uG5FWkLMXNEw_RCs.mft (raw, json)
Hash identifier: BRehnmRZa6WIR3ehAUTgVxEuiI6qW1qaTWEpXZLbafY=
Subject key identifier: B8:39:5F:73:9E:68:83:B9:8D:2D:BF:A4:DE:AC:46:BB:46:88:31:3A
Authority key identifier: F5:CF:73:B3:E4:5F:77:2F:AE:1B:91:56:90:B3:17:34:4C:3F:44:2B
Certificate issuer: /CN=f5cf73b3e45f772fae1b915690b317344c3f442b
Certificate serial: 019678313320E86E1A841CFCF8337B3B4112
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.mft
Manifest number: 0BA1
Signing time: Sun 27 Apr 2025 17:00:12 +0000
Manifest this update: Sun 27 Apr 2025 17:00:12 +0000
Manifest next update: Mon 28 Apr 2025 17:00:12 +0000
Files and hashes: 1: 9c9zs-Rfdy-uG5FWkLMXNEw_RCs.crl (hash: 3BDrULeGm4C/aufXfzfFd++qHWyHPYp2tRk5p7xlMKs=)
2: g4B1jDEDEnpyKjOUdwNXtiRBKVo.roa (hash: 7UWQudX+rqrs+vIGMtBiZa4lyOkbMuzxNBR2/83QsfI=)
3: mFCab-YMnaPwjq0SGjjSKVSwCvs.roa (hash: NwTUf2FCA+SWI7PlbFVRLa9grCf7O5GxOtog8KpH75E=)
4: v7xbsCROsO2MbuE9UwU0B__Qrug.roa (hash: jCAaO9QdtJabTsyOLEVBcqZmMxtQhkEo4Y5qTf+e+S0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 17:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:31:33:20:e8:6e:1a:84:1c:fc:f8:33:7b:3b:41:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5cf73b3e45f772fae1b915690b317344c3f442b
Validity
Not Before: Apr 27 17:00:12 2025 GMT
Not After : Apr 28 17:00:12 2025 GMT
Subject: CN=b8395f739e6883b98d2dbfa4deac46bb4688313a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5d:a4:b0:4f:ff:20:c3:6a:01:78:42:21:93:
84:21:5d:4d:3b:6e:10:0a:c8:92:b6:7b:2e:96:95:
db:a3:12:02:8f:80:aa:e4:e7:5e:ba:88:88:5f:33:
c7:88:cd:b0:bd:94:89:fa:82:a2:20:ad:34:c4:6e:
4a:ee:d6:1b:d8:48:0a:2e:86:4d:8f:86:fe:ab:38:
d3:c3:16:ab:00:c4:9c:8b:ef:b2:ff:54:52:98:5d:
42:ce:15:68:d1:46:5b:a3:44:13:ce:a0:b7:22:ee:
93:a4:8c:04:ef:e3:91:39:a6:2a:19:2e:fe:e3:16:
7d:b4:54:35:1f:69:9c:b5:36:7a:6f:a9:85:0e:38:
15:9c:e0:33:b7:ba:13:c9:86:5c:b0:f3:1b:95:90:
b0:90:39:37:9c:ac:4e:c1:14:9e:86:6d:e3:f2:54:
17:4f:1f:c8:64:dc:e0:33:6a:c5:ff:f0:60:fa:59:
c3:bc:34:83:a0:94:8b:be:7a:0c:af:68:e0:e2:81:
02:3b:5b:a7:c1:ed:bc:07:32:80:a6:72:a6:9b:4a:
d9:91:e3:e9:30:f5:02:e6:4e:42:71:9b:46:ff:03:
39:30:e7:a8:38:5e:71:ee:c9:ba:d8:cc:46:df:64:
20:e3:46:c6:18:47:a7:0a:38:e6:37:ca:94:57:4a:
30:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:39:5F:73:9E:68:83:B9:8D:2D:BF:A4:DE:AC:46:BB:46:88:31:3A
X509v3 Authority Key Identifier:
keyid:F5:CF:73:B3:E4:5F:77:2F:AE:1B:91:56:90:B3:17:34:4C:3F:44:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:7f:8c:3a:3d:67:29:93:f2:32:bc:0f:4f:6e:03:23:f2:1c:
ae:03:7f:fc:fc:ec:4d:e8:2c:4f:e6:02:4c:fc:10:26:d0:b3:
23:19:80:47:19:87:87:73:34:a3:7f:1d:82:4a:97:97:29:28:
0e:01:c6:c9:e1:22:11:65:68:67:58:27:c7:6b:a4:76:0e:76:
a6:59:99:8f:6e:a0:76:69:db:87:1e:e3:10:72:42:dd:01:0d:
f5:9e:b8:b8:cc:04:c9:56:da:37:cf:de:98:18:cf:be:07:42:
24:59:d0:22:fb:9c:0b:5d:71:8d:7f:f3:40:af:35:08:b1:6d:
2d:17:04:d5:d1:19:bb:42:98:74:02:07:4e:d5:73:54:11:9f:
10:75:ff:b8:39:4e:75:a0:92:d8:a0:01:39:49:45:f1:5c:98:
f4:01:e9:4b:1c:9e:2f:37:02:bb:58:c1:64:2a:38:5a:86:66:
c6:1a:49:ba:df:a5:08:37:9f:b1:d6:2b:82:e5:2b:71:de:8b:
dc:e2:7e:cb:b5:63:b3:4a:09:d6:a8:d9:3c:80:5b:e9:d1:fc:
6a:3e:d4:c3:4b:fe:38:47:c6:41:6e:5d:b8:91:28:b6:a5:c2:
1a:60:d8:f9:50:e7:bd:5c:83:78:5e:0b:89:ad:7e:76:d3:83:
cc:4f:66:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 03:25:36 2025 by rpki-client