Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.mft
File: 9OAY_d_UIlF8MGnnVlhle0DnNgE.mft (raw, json)
Hash identifier: tpoyPTfnf3yVgOLqiTHDQpqPvJJuY07KB+ZntSjkqbc=
Subject key identifier: 32:5B:05:75:87:6B:18:41:1A:82:CB:F2:56:59:2C:4C:79:61:E3:76
Authority key identifier: F4:E0:18:FD:DF:D4:22:51:7C:30:69:E7:56:58:65:7B:40:E7:36:01
Certificate issuer: /CN=f4e018fddfd422517c3069e75658657b40e73601
Certificate serial: 0196952980943E0C525E30027EC98745B0AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OAY_d_UIlF8MGnnVlhle0DnNgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.mft
Manifest number: 1522
Signing time: Sat 03 May 2025 08:00:47 +0000
Manifest this update: Sat 03 May 2025 08:00:47 +0000
Manifest next update: Sun 04 May 2025 08:00:47 +0000
Files and hashes: 1: 9OAY_d_UIlF8MGnnVlhle0DnNgE.crl (hash: eY7Wp2DYlLqzAIu3r1Ayw2sTiAHZZKYrAHTQyypxMwo=)
2: liKr9r8FMDweCFSU14hBTeBiJGg.roa (hash: yTAfLgiLewRGMW9BR3bDVbC2pPmowcN0vbDNQIsIUcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OAY_d_UIlF8MGnnVlhle0DnNgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:95:29:80:94:3e:0c:52:5e:30:02:7e:c9:87:45:b0:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e018fddfd422517c3069e75658657b40e73601
Validity
Not Before: May 3 08:00:47 2025 GMT
Not After : May 4 08:00:47 2025 GMT
Subject: CN=325b0575876b18411a82cbf256592c4c7961e376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:83:16:1a:91:44:09:c8:a2:24:60:4a:f5:b8:
b8:3f:f0:05:00:63:8e:9a:6c:d4:96:6a:92:33:02:
0f:b6:d8:ee:b3:77:0a:d8:b8:da:8a:f5:50:ed:2e:
b5:2a:b8:62:46:0b:e8:cb:34:4f:18:ed:06:12:b8:
46:f4:d3:59:b9:73:73:2a:09:17:af:79:0c:14:13:
11:fe:4f:3e:ca:ab:db:0b:07:68:bc:16:82:6e:0d:
67:b7:4f:9b:d9:9d:5c:06:a3:05:63:4e:91:b4:3e:
68:8f:7d:d8:09:a8:79:65:58:37:5d:58:b4:a7:09:
e2:76:94:7e:25:a7:0b:b0:d2:e4:a6:fc:33:25:fb:
cb:8f:3f:e4:4e:93:2c:44:fd:75:3b:c2:c3:75:42:
1f:3e:c9:2f:45:3c:87:8f:1f:04:7f:41:2c:e0:48:
41:25:99:2c:50:9d:70:f4:18:c6:af:06:82:57:b2:
94:9e:2f:72:c6:1a:2d:19:3e:fc:40:e8:b2:14:b8:
fd:a6:f5:be:cc:99:f9:5d:4d:04:72:0b:be:87:f1:
fb:d4:a8:45:9c:86:bf:8c:c8:af:3e:e6:68:78:c7:
b0:27:c9:ea:f4:85:63:f0:cb:53:3e:03:0a:b4:33:
60:5f:85:95:74:34:b8:97:d0:e1:e6:da:70:90:b2:
c3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:5B:05:75:87:6B:18:41:1A:82:CB:F2:56:59:2C:4C:79:61:E3:76
X509v3 Authority Key Identifier:
keyid:F4:E0:18:FD:DF:D4:22:51:7C:30:69:E7:56:58:65:7B:40:E7:36:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OAY_d_UIlF8MGnnVlhle0DnNgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:12:22:6c:ce:1f:08:d3:ee:cb:26:80:ce:f7:65:9a:71:1d:
0b:3c:e8:82:2b:61:7f:c6:5f:fa:b1:bd:18:69:60:9e:8a:fc:
0a:2b:4c:59:fd:59:37:bc:1b:f9:5b:ee:df:10:c3:5c:88:fb:
db:ae:df:ed:c7:30:50:22:95:aa:a9:b0:97:e6:9c:74:de:2a:
01:12:35:ef:9c:79:e2:54:6a:bd:8d:21:18:f0:20:bb:76:bf:
a6:d0:f9:9f:49:7b:3d:dd:b5:bd:39:ef:6b:7f:a9:fc:39:04:
33:cc:54:dd:39:5e:94:96:55:18:62:6a:1c:94:64:57:db:12:
91:bc:dc:66:5f:03:af:b7:04:f3:9c:b6:cf:97:ef:bb:18:94:
39:e9:fc:14:0b:c0:85:64:d5:da:30:20:99:95:39:e5:14:25:
13:20:a5:0d:4f:28:dd:27:6d:ff:8d:ec:b7:62:96:7d:0d:22:
c4:3b:3d:1a:28:15:b4:18:96:48:a3:94:0a:61:df:1e:6c:e9:
95:83:6b:95:8b:04:d4:ae:b9:5b:4b:74:96:b7:b2:05:4b:ee:
a3:d9:b0:b2:07:39:5b:04:a7:e7:26:48:ad:92:9e:37:4f:a4:
b9:0b:1d:56:b6:f7:1f:73:fa:28:f3:2e:24:5a:d9:6d:1b:ee:
1c:c1:60:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 09:59:30 2025 by rpki-client