Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.mft
File: 9_rCwhstvIEt0l0ct5w_ulQZ5ZM.mft (raw, json)
Hash identifier: y+9R47huxHX7Jb4jlkQmMPzP+wd/OyGVUXpCSGiDgmI=
Subject key identifier: EA:29:54:35:D9:7D:31:7A:EA:6F:0E:9B:C9:55:6B:1D:44:26:4D:58
Authority key identifier: F7:FA:C2:C2:1B:2D:BC:81:2D:D2:5D:1C:B7:9C:3F:BA:54:19:E5:93
Certificate issuer: /CN=f7fac2c21b2dbc812dd25d1cb79c3fba5419e593
Certificate serial: 019675D504AD5FA31EF5D848EEBED7679D3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.mft
Manifest number: 0959
Signing time: Sun 27 Apr 2025 06:00:16 +0000
Manifest this update: Sun 27 Apr 2025 06:00:16 +0000
Manifest next update: Mon 28 Apr 2025 06:00:16 +0000
Files and hashes: 1: 9_rCwhstvIEt0l0ct5w_ulQZ5ZM.crl (hash: VM+nyesZcJb7Dwjnk0X4WB0N3OZKGuiDVPVoB6WR+8Q=)
2: Ecb-mPJB0EgEtmCxBO-R8Q4l8Pc.roa (hash: gJwQTQJlZO5UonEbd+MqbZuAtcvQedjepcRUTfg3vec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:d5:04:ad:5f:a3:1e:f5:d8:48:ee:be:d7:67:9d:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7fac2c21b2dbc812dd25d1cb79c3fba5419e593
Validity
Not Before: Apr 27 06:00:16 2025 GMT
Not After : Apr 28 06:00:16 2025 GMT
Subject: CN=ea295435d97d317aea6f0e9bc9556b1d44264d58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5b:aa:2e:69:08:b4:05:64:0b:2f:3f:d3:77:
2a:a1:ac:7f:f4:64:36:4b:1f:c1:9d:27:57:9b:10:
69:b3:51:57:3e:ab:71:df:9a:22:0f:96:1a:08:f2:
17:8e:8b:83:b5:0f:af:79:90:93:db:a7:e8:33:53:
d9:da:64:7d:a7:b4:fd:c1:19:03:41:07:22:3a:43:
8f:9b:b1:65:c8:4f:d3:ac:e3:c7:8a:5f:26:bc:67:
08:7a:0c:4f:27:78:1e:6f:c0:cf:39:5c:27:32:45:
98:09:55:8f:f8:59:11:c4:8b:f4:61:2a:5b:54:23:
6e:77:b6:b7:14:04:5a:a7:09:d6:c6:f5:73:f1:13:
95:71:4f:32:ce:93:9f:76:ac:e8:2b:8f:39:5d:0e:
f6:c6:bc:65:d7:c0:66:de:7c:c2:a6:8e:ed:92:57:
8b:fe:6a:75:a9:69:4d:57:ab:34:35:66:98:b6:63:
ce:c7:7a:03:dc:28:7d:14:aa:ee:14:c2:a2:b4:a8:
26:f0:e3:c0:df:fc:d9:62:89:2c:fe:de:a8:c8:55:
32:d2:c8:89:f1:93:de:4d:1d:3f:d4:6b:09:12:fc:
9a:07:ee:f3:19:4d:22:59:7a:94:e2:3a:23:9b:db:
3e:62:91:7b:c3:97:df:90:88:05:b9:34:b2:13:3f:
31:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:29:54:35:D9:7D:31:7A:EA:6F:0E:9B:C9:55:6B:1D:44:26:4D:58
X509v3 Authority Key Identifier:
keyid:F7:FA:C2:C2:1B:2D:BC:81:2D:D2:5D:1C:B7:9C:3F:BA:54:19:E5:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:54:db:7e:35:5c:56:ef:57:2f:aa:51:11:d0:44:9b:b3:61:
1b:b2:94:f5:b6:1e:b8:cb:9f:87:b2:7d:20:ce:69:b2:0a:e3:
5c:d9:76:2d:bd:06:6e:d4:e2:91:41:ec:41:a9:87:92:f9:ab:
e5:4c:02:77:5d:00:f3:72:08:26:84:4a:32:6b:d2:20:67:7f:
f9:8e:bc:fe:93:dc:6b:c5:7a:34:b4:62:9d:68:28:4d:d7:e9:
2a:76:b8:2b:62:31:51:d5:21:9e:e6:b0:ee:6b:23:89:0a:21:
72:7f:74:3e:bd:6d:62:cd:59:ea:b5:a0:e7:18:6b:0d:4f:4d:
ad:7d:96:28:b9:bb:9c:de:d2:69:cc:66:7b:11:a6:e0:a4:99:
5b:8c:25:4a:03:54:46:a5:a7:be:0d:f9:de:20:85:32:85:92:
17:5e:82:e2:78:ed:30:41:73:c9:27:ab:07:0c:29:c6:51:61:
ba:1d:a2:85:4c:d5:12:56:d7:4d:30:48:a6:62:a3:85:ec:19:
d8:7b:12:a1:d8:5b:78:75:96:a9:41:ac:d1:04:7d:96:6f:ff:
e7:03:75:aa:fa:3b:7e:cf:dd:61:80:b3:2a:c6:0a:c2:92:ae:
d7:57:a3:8d:59:e8:1c:15:b3:1b:41:13:fb:68:e7:35:f3:de:
38:dd:c3:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:58:08 2025 by rpki-client