Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.mft
File: CH9Zw24i0fkDhPQdpgcFrHTXec4.mft (raw, json)
Hash identifier: gE2TImQk+YGRxwqewq2Gtkm7t8XbVvTGfqbFv4PKqTQ=
Subject key identifier: 9F:7C:AA:FB:75:2F:E6:07:55:AE:09:AC:4C:DB:66:97:46:0A:CE:6B
Authority key identifier: 08:7F:59:C3:6E:22:D1:F9:03:84:F4:1D:A6:07:05:AC:74:D7:79:CE
Certificate issuer: /CN=087f59c36e22d1f90384f41da60705ac74d779ce
Certificate serial: 0196821010D2D147FEE6CA60BA54D1F37B05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CH9Zw24i0fkDhPQdpgcFrHTXec4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.mft
Manifest number: 0D14
Signing time: Tue 29 Apr 2025 15:00:13 +0000
Manifest this update: Tue 29 Apr 2025 15:00:13 +0000
Manifest next update: Wed 30 Apr 2025 15:00:13 +0000
Files and hashes: 1: CH9Zw24i0fkDhPQdpgcFrHTXec4.crl (hash: sdZJDdT9evj77Z4gt3L5b/m6EzszbjwL5hkQ1CbddmM=)
2: giN_6FdawPpa4U_l8L6GI6SQrxU.roa (hash: RqHHQJIozmk50JvefJWS+0ODDB8lkETbKjm2gNuR+7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CH9Zw24i0fkDhPQdpgcFrHTXec4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:10:10:d2:d1:47:fe:e6:ca:60:ba:54:d1:f3:7b:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=087f59c36e22d1f90384f41da60705ac74d779ce
Validity
Not Before: Apr 29 15:00:13 2025 GMT
Not After : Apr 30 15:00:13 2025 GMT
Subject: CN=9f7caafb752fe60755ae09ac4cdb6697460ace6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:78:17:0d:02:2f:16:98:84:3e:47:e7:36:9c:
7a:42:29:d6:11:a2:f4:91:20:83:97:20:a6:24:35:
45:ce:e9:3b:57:82:bd:6c:7c:d9:8d:c2:31:ef:69:
1b:72:43:6c:d2:e2:01:67:c6:a0:fb:94:7d:c4:33:
a4:86:e0:a5:95:fe:0a:ce:84:01:5b:b0:8a:49:21:
78:02:b7:d6:d3:14:52:02:32:b3:01:fe:1f:40:34:
c8:6b:19:59:fa:51:85:81:5d:39:08:2e:42:b8:69:
76:98:36:ab:88:f9:b8:e3:cc:8d:17:2f:13:19:ab:
13:32:72:e9:35:8d:f6:a7:71:1a:7e:1e:8f:b6:eb:
18:03:f9:93:65:e6:3d:f4:d4:1e:78:38:65:d9:91:
10:b6:1c:ae:0c:50:b3:11:90:34:03:8b:da:9d:05:
7c:09:82:45:cd:79:25:86:ae:ac:64:de:1f:d5:32:
61:19:5b:11:b5:05:32:99:73:80:1d:34:10:6a:9d:
ec:05:4d:f3:a1:50:49:d0:7d:9a:7e:18:6f:db:2b:
d2:18:18:8a:53:3a:ce:60:3e:65:eb:25:7d:73:29:
99:f1:21:e5:63:23:67:24:47:1d:68:eb:dd:21:93:
c2:94:67:11:43:75:47:0f:f0:bc:36:58:24:12:c1:
2f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:7C:AA:FB:75:2F:E6:07:55:AE:09:AC:4C:DB:66:97:46:0A:CE:6B
X509v3 Authority Key Identifier:
keyid:08:7F:59:C3:6E:22:D1:F9:03:84:F4:1D:A6:07:05:AC:74:D7:79:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CH9Zw24i0fkDhPQdpgcFrHTXec4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:95:23:38:dd:2d:30:c1:db:5d:e3:f0:aa:1d:76:71:e7:08:
de:2e:10:2b:8d:73:c6:c7:cf:c9:09:9c:f9:d9:b6:05:c1:63:
01:36:a9:57:2f:cc:c7:2c:f2:45:4c:03:35:ff:97:91:f4:cf:
ee:c0:71:67:96:7e:b3:9d:89:77:ab:7c:78:cc:6d:a1:c7:42:
70:96:df:09:f1:19:98:c3:d0:d8:a8:4c:7e:ed:67:59:46:77:
dc:36:73:e9:91:a6:32:18:96:c8:64:19:a0:79:cf:ac:9b:4e:
c0:45:c2:24:c8:3e:0a:94:79:f5:51:2b:7b:cf:ff:f9:de:10:
91:4f:ef:67:9b:1b:75:6f:1b:bb:f2:e2:26:fc:e0:a6:51:52:
20:5c:a6:5f:bf:15:7e:b4:1e:24:f7:6f:92:01:19:d9:f6:6c:
27:1e:d7:0d:97:e7:9f:37:00:9f:28:05:26:3b:bb:1e:eb:b7:
d7:54:fa:54:20:fc:26:3a:a0:e0:25:d1:7e:35:02:10:0e:cf:
53:1c:1b:65:06:c0:f5:8c:e9:aa:24:96:32:ce:eb:9c:c4:f0:
cd:3f:60:f1:91:06:1f:32:52:c7:2b:89:3b:dd:dd:01:16:b5:
89:4a:1b:74:95:c6:b0:86:62:f3:74:f3:be:71:62:0c:90:41:
d1:cf:18:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:07:23 2025 by rpki-client