Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.mft
File: m1M3vRp8XunFenOwozxhIZzSqcs.mft (raw, json)
Hash identifier: 9zdMZ6pQ30CObPZsi+GCAY+JR/d3y1YmOlmfElg3VNI=
Subject key identifier: B6:67:19:EA:33:1F:AC:15:58:BC:9F:11:DF:6F:C4:C8:D6:D2:25:A9
Authority key identifier: 9B:53:37:BD:1A:7C:5E:E9:C5:7A:73:B0:A3:3C:61:21:9C:D2:A9:CB
Certificate issuer: /CN=9b5337bd1a7c5ee9c57a73b0a33c61219cd2a9cb
Certificate serial: 0196760CD0328AE0B8DF32874B12F45CBF1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m1M3vRp8XunFenOwozxhIZzSqcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.mft
Manifest number: 14A3
Signing time: Sun 27 Apr 2025 07:01:13 +0000
Manifest this update: Sun 27 Apr 2025 07:01:13 +0000
Manifest next update: Mon 28 Apr 2025 07:01:13 +0000
Files and hashes: 1: hH6hMaSyonrhQA9h_vP1HTqln7M.roa (hash: 8QJDFdFinb7s3U9xb08fJBm7sr1In5Pe6TKE9Vk8YEA=)
2: m1M3vRp8XunFenOwozxhIZzSqcs.crl (hash: QcpnTG0p9KH9DgE1/X7ML4ZtoXPMdOJ0qfSfXwbPl40=)
3: xZRwQEVBqhCo3g2OnfWg1phYcj0.roa (hash: Up0oMZDKtVNJTjmYE39xr0VdPFglYOYmh22V1+hmiHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/m1M3vRp8XunFenOwozxhIZzSqcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:d0:32:8a:e0:b8:df:32:87:4b:12:f4:5c:bf:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b5337bd1a7c5ee9c57a73b0a33c61219cd2a9cb
Validity
Not Before: Apr 27 07:01:13 2025 GMT
Not After : Apr 28 07:01:13 2025 GMT
Subject: CN=b66719ea331fac1558bc9f11df6fc4c8d6d225a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:80:e4:f3:fa:a4:67:7b:5b:cf:62:6d:a2:11:
e9:dd:34:05:cb:e2:f0:4b:03:81:85:f5:a2:e8:01:
73:26:db:3a:9f:93:c1:79:29:1f:29:36:cb:79:41:
10:7a:e2:bf:00:3d:22:ac:83:cc:d3:df:ce:74:20:
92:1f:b1:0c:17:b3:44:e3:8a:3b:e4:7f:4e:af:1c:
e9:43:f4:28:de:b9:8b:92:d8:c8:b2:da:c5:fa:12:
6e:bf:c8:a1:5e:1e:d2:cb:1f:c9:1f:3c:b8:29:af:
ed:89:09:af:ba:17:c5:20:9d:7d:42:37:47:24:d6:
b0:c5:cb:e5:e1:22:d7:fe:ec:b4:f7:31:58:1a:c2:
6f:73:3d:4e:67:44:21:c0:9b:34:44:3d:a7:f4:cd:
b1:9d:eb:ba:80:17:bb:03:d4:20:63:56:59:f6:3f:
ee:24:3b:bf:0d:7b:01:4c:aa:95:b8:fb:4c:d3:cb:
b0:d5:76:2a:83:51:67:6c:3d:90:52:5b:d0:29:27:
6a:da:19:0d:4a:a9:97:d6:21:c1:7e:dd:00:5d:9a:
ab:99:9e:ff:db:24:04:38:54:22:b3:d8:b8:f4:d4:
8c:14:d1:ff:56:41:f8:98:a2:ff:c8:d4:cf:c7:62:
b0:a6:ac:8c:be:c9:36:6c:fc:5b:ed:cd:64:6c:be:
2f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:67:19:EA:33:1F:AC:15:58:BC:9F:11:DF:6F:C4:C8:D6:D2:25:A9
X509v3 Authority Key Identifier:
keyid:9B:53:37:BD:1A:7C:5E:E9:C5:7A:73:B0:A3:3C:61:21:9C:D2:A9:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1M3vRp8XunFenOwozxhIZzSqcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:56:c8:f8:6d:4a:e4:86:94:b4:25:19:bb:da:6d:6f:b6:e9:
ba:ee:0d:80:a8:7d:21:18:b4:83:60:19:8a:14:33:f0:65:73:
57:c7:92:ae:1d:6b:1a:1d:d0:af:e8:17:05:87:79:bf:c0:b8:
94:dd:42:75:9a:10:23:19:31:eb:b8:67:da:4a:0b:24:20:bb:
01:fb:58:ac:9d:72:c9:d3:fa:db:3f:35:6c:d4:26:00:c8:9d:
f7:c8:4d:0d:7d:57:05:76:d4:45:63:18:ba:55:7d:dc:55:49:
84:b1:40:d5:de:24:29:d5:3c:37:e4:e2:07:19:b6:82:cf:d0:
24:b8:19:2a:44:cc:a7:a8:a8:09:68:a7:b3:9a:21:2d:fc:82:
8a:01:a5:68:96:25:d3:15:73:75:70:bd:84:85:d0:fe:29:77:
e7:4b:44:dc:83:2f:9e:ec:e3:9a:82:aa:c1:14:b9:9b:74:47:
11:3b:ce:b3:df:5d:f6:93:37:44:ba:b1:ff:d7:ba:52:a7:22:
f8:e5:35:a3:86:c6:f0:d3:a4:96:83:7c:52:63:7a:b4:25:b6:
4a:7a:f9:c0:3a:f7:63:06:f0:9b:a2:e5:6c:61:c3:25:ce:c5:
3f:b3:21:52:66:50:e2:72:b6:5d:3f:a2:82:b5:c1:3d:38:62:
58:4f:21:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:55:21 2025 by rpki-client