Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft
File: 9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft (raw, json)
Hash identifier: 9gslRRr0PZIBzkLn/c9KlGiuL6iQ+27LVrzS0HUuEIM=
Subject key identifier: 11:51:FC:AF:1F:B1:58:08:17:77:96:2C:22:3B:B8:7C:E5:7A:5D:16
Authority key identifier: F5:41:D4:68:93:AA:A1:64:FE:26:73:99:0D:07:AA:6C:07:10:03:C0
Certificate issuer: /CN=f541d46893aaa164fe2673990d07aa6c071003c0
Certificate serial: 019680FDDF082CCEBE4368A01FA54683DD64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9UHUaJOqoWT-JnOZDQeqbAcQA8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft
Manifest number: 12BC
Signing time: Tue 29 Apr 2025 10:00:43 +0000
Manifest this update: Tue 29 Apr 2025 10:00:43 +0000
Manifest next update: Wed 30 Apr 2025 10:00:43 +0000
Files and hashes: 1: 9UHUaJOqoWT-JnOZDQeqbAcQA8A.crl (hash: 8XvBDZ6CeTJOcDO5JWYdxJVgTBOSFUzkEt5wFH3roXs=)
2: JYVK5YIo9oFduSfdge32BhR1llk.roa (hash: MLgxgkj7xVD4j08JzP+4k7sw1diRLF6XHz+tW1zn9ms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/9UHUaJOqoWT-JnOZDQeqbAcQA8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:fd:df:08:2c:ce:be:43:68:a0:1f:a5:46:83:dd:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f541d46893aaa164fe2673990d07aa6c071003c0
Validity
Not Before: Apr 29 10:00:43 2025 GMT
Not After : Apr 30 10:00:43 2025 GMT
Subject: CN=1151fcaf1fb158081777962c223bb87ce57a5d16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0a:9b:96:25:fa:78:d1:a0:2f:5d:03:b1:bf:
6e:d4:72:91:23:fb:13:16:9d:97:94:67:b7:0b:a5:
27:1a:d5:fb:f6:04:4f:6c:03:7a:b3:e7:0f:7f:63:
57:30:6e:b5:ac:08:af:53:41:05:49:f7:08:51:f9:
91:27:01:36:82:54:dd:7e:a8:58:02:df:3c:23:5a:
b5:13:79:d8:1d:35:08:75:87:ed:c1:02:dc:5c:22:
0f:18:09:f2:5d:cd:cd:05:01:eb:de:1b:28:c5:92:
af:60:12:89:b8:4e:44:4e:14:1e:2a:d6:9b:ee:7f:
a8:61:c3:46:68:ee:71:59:56:c5:31:22:eb:4a:85:
ec:a8:c9:b2:f1:f8:0d:cf:f9:70:cd:93:2c:37:01:
2a:8f:2b:d4:c3:43:61:e5:98:62:f4:d4:0e:c0:9d:
8a:c3:60:7a:6f:bc:77:3f:b6:70:e0:ef:7a:45:33:
43:c9:3d:88:5e:a1:13:8a:8e:ad:97:a6:27:e2:0d:
dc:03:ea:55:c3:80:f5:af:ef:af:55:76:b5:4e:37:
f7:ff:0d:ca:a8:2e:94:e6:97:21:62:f2:be:95:70:
0e:7a:53:d7:16:f7:58:b4:39:16:42:47:a2:8c:26:
f1:1d:c2:70:19:37:18:d5:6f:65:f6:d1:e3:bf:5c:
e5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:51:FC:AF:1F:B1:58:08:17:77:96:2C:22:3B:B8:7C:E5:7A:5D:16
X509v3 Authority Key Identifier:
keyid:F5:41:D4:68:93:AA:A1:64:FE:26:73:99:0D:07:AA:6C:07:10:03:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9UHUaJOqoWT-JnOZDQeqbAcQA8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:b6:74:df:47:5d:0b:bf:8d:ab:de:4d:68:37:76:ea:79:f5:
f8:c2:ad:4e:0f:cd:17:e2:5d:f2:73:4e:0b:c0:75:87:13:ff:
e8:4f:2f:d7:d4:b4:a6:8d:26:2b:18:52:14:45:92:bf:e6:7f:
b7:3c:75:9c:47:3e:ab:96:94:ff:37:e0:55:8b:b3:ca:ae:e1:
75:60:0a:cc:cf:d5:fe:34:e8:5b:74:c5:29:19:f1:32:13:23:
39:f8:9d:78:06:65:47:ac:1a:dc:44:08:6d:3e:dd:96:7b:6f:
0f:63:44:56:75:13:e2:86:07:60:fa:ed:79:02:7a:90:44:ff:
47:45:28:17:74:17:96:39:77:c3:1f:b2:98:20:cc:9f:ba:42:
93:95:2d:61:6b:3c:97:13:8c:d3:73:cd:2d:6c:65:0c:6c:14:
62:33:cc:a6:d6:0e:d1:ca:eb:69:e0:49:68:9f:16:3a:61:1c:
0f:42:b5:bf:2f:58:86:6b:58:a9:fb:8a:1f:b7:06:05:5a:aa:
25:44:dd:38:c6:0c:5d:93:01:78:af:0a:73:13:79:2a:7a:c0:
f7:44:ca:da:9c:8f:98:a0:4e:b2:e4:d9:95:1d:e5:23:11:fa:
ba:43:1a:5d:81:aa:81:53:b3:c5:c8:31:75:b1:83:e1:cd:2d:
f4:d7:64:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:31:36 2025 by rpki-client