Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft
File: 9ssMjyCEMwIDT2NlbqKevW0RY6o.mft (raw, json)
Hash identifier: EhenowaprcoYffqxygdjqUZUrbpJ759E5mUvEgPuOA0=
Subject key identifier: 36:6C:1F:6E:AA:19:A4:CC:59:C4:D3:BF:73:61:9D:BA:3E:2C:73:33
Authority key identifier: F6:CB:0C:8F:20:84:33:02:03:4F:63:65:6E:A2:9E:BD:6D:11:63:AA
Certificate issuer: /CN=f6cb0c8f20843302034f63656ea29ebd6d1163aa
Certificate serial: 01968C943D58BF9E8138A56F6CF2E1CF984D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ssMjyCEMwIDT2NlbqKevW0RY6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft
Manifest number: 0E02
Signing time: Thu 01 May 2025 16:00:47 +0000
Manifest this update: Thu 01 May 2025 16:00:47 +0000
Manifest next update: Fri 02 May 2025 16:00:47 +0000
Files and hashes: 1: 9ssMjyCEMwIDT2NlbqKevW0RY6o.crl (hash: W9YfeVGT/F+qlFDzaYUZK08t6oyXMltF4x8whAYQuLM=)
2: OpJ_uz4hg9WS1uTnKXn75qGvb3w.roa (hash: zJt7hWD6hoBRKS4g5AHeuYKclEqIASb0N8YkICHekl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ssMjyCEMwIDT2NlbqKevW0RY6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8c:94:3d:58:bf:9e:81:38:a5:6f:6c:f2:e1:cf:98:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6cb0c8f20843302034f63656ea29ebd6d1163aa
Validity
Not Before: May 1 16:00:47 2025 GMT
Not After : May 2 16:00:47 2025 GMT
Subject: CN=366c1f6eaa19a4cc59c4d3bf73619dba3e2c7333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:db:0b:4a:a0:fc:6e:31:c4:b1:42:ae:fd:0d:
60:09:02:43:bb:3d:e8:8c:55:a4:02:47:23:df:2d:
20:6b:e5:f8:ae:0a:28:bd:22:d4:86:23:3a:fb:cf:
76:8e:4a:15:20:e7:47:2c:55:0d:6e:ba:fd:98:6c:
07:92:ec:bc:27:7b:41:d4:c3:e4:7e:eb:3c:a0:ee:
af:57:fe:0d:10:79:72:19:87:2f:02:98:f9:5a:3b:
66:e0:9f:c1:51:87:f8:c7:ee:62:2f:52:7d:f6:54:
f9:eb:76:e0:b7:e6:86:a5:cc:ec:93:fe:0e:fe:c8:
cd:4d:4c:9c:b7:0e:6f:e0:9d:e6:30:6d:21:b2:34:
3a:08:90:08:99:cd:1b:c2:23:3e:77:48:6c:e6:51:
a7:c8:8a:86:26:9e:52:d3:99:80:48:ce:95:52:dc:
fd:ef:3e:d5:78:9b:18:84:7e:c7:6a:2d:dc:13:89:
65:66:11:27:63:96:64:0d:5f:87:b6:3b:69:21:4c:
00:67:0b:46:2f:19:83:6f:46:6f:65:a9:06:d9:13:
80:a6:45:79:1b:2e:e7:aa:5d:0a:d3:4c:27:69:d7:
73:56:c1:7f:b1:52:06:ab:55:75:d6:33:86:4d:a9:
85:b2:1c:4d:0f:93:8a:8b:c9:fd:0c:30:80:4e:4d:
04:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:6C:1F:6E:AA:19:A4:CC:59:C4:D3:BF:73:61:9D:BA:3E:2C:73:33
X509v3 Authority Key Identifier:
keyid:F6:CB:0C:8F:20:84:33:02:03:4F:63:65:6E:A2:9E:BD:6D:11:63:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ssMjyCEMwIDT2NlbqKevW0RY6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:e6:dd:6c:20:a0:25:9a:28:70:66:f3:a4:d1:8d:a5:86:97:
7a:d9:eb:29:12:92:aa:35:2c:2b:d4:2f:e8:3c:9f:81:3b:08:
05:e1:4b:3e:49:08:f9:3e:b0:a5:7c:79:bb:6f:46:13:fd:83:
bf:60:11:c6:55:70:08:d3:f1:81:ba:39:a0:ab:23:c3:51:69:
f4:a0:1a:0b:6c:bd:a4:51:61:2f:a2:84:c1:af:85:9e:7d:e8:
d7:b7:09:55:d1:8d:4a:67:66:72:37:a9:d9:8c:57:13:2f:c7:
53:9c:3b:ea:39:8d:35:a7:14:df:e4:7c:4b:e6:ae:92:4e:53:
49:00:47:d1:f1:bf:fb:fb:89:da:a2:ac:fa:fd:ac:80:a2:5a:
0d:5f:de:75:a0:69:2e:e7:46:bf:8c:f0:20:01:43:49:67:f6:
13:7c:64:d6:9f:5e:bd:9a:2b:31:09:3d:95:11:66:5e:da:b9:
1b:ad:7a:c8:90:68:6c:5c:5c:87:54:ce:9b:77:75:04:2f:00:
e5:80:18:82:fd:5b:37:06:7f:87:ab:52:f8:6e:cc:d7:4d:bc:
51:78:80:1c:d9:e8:9a:fb:df:29:35:6e:9a:a4:45:b3:a6:40:
b8:6e:5a:d8:ea:58:3c:ed:29:b9:ea:b3:14:9e:5a:ea:4b:55:
37:0b:8f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 21:50:28 2025 by rpki-client