Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft
File: 9yR1sGTeionxUD6u_H1yrczzihY.mft (raw, json)
Hash identifier: bTiv+CgKZriAixqtnviuHU0SF//X50l7WAJ7F9gX1Rs=
Subject key identifier: 12:E0:AE:2D:95:62:11:62:F6:A9:44:B8:03:A1:CE:AA:0E:BB:3C:37
Authority key identifier: F7:24:75:B0:64:DE:8A:89:F1:50:3E:AE:FC:7D:72:AD:CC:F3:8A:16
Certificate issuer: /CN=f72475b064de8a89f1503eaefc7d72adccf38a16
Certificate serial: 01969C0725E9BD72DF18EC0CDE276D1D9D5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9yR1sGTeionxUD6u_H1yrczzihY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft
Manifest number: 151E
Signing time: Sun 04 May 2025 16:00:36 +0000
Manifest this update: Sun 04 May 2025 16:00:36 +0000
Manifest next update: Mon 05 May 2025 16:00:36 +0000
Files and hashes: 1: 9yR1sGTeionxUD6u_H1yrczzihY.crl (hash: txnuJCM2F5wCyw63slNqZiRLhF5fQAc+SpPxmNozzCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9yR1sGTeionxUD6u_H1yrczzihY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 13:58:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9c:07:25:e9:bd:72:df:18:ec:0c:de:27:6d:1d:9d:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f72475b064de8a89f1503eaefc7d72adccf38a16
Validity
Not Before: May 4 16:00:36 2025 GMT
Not After : May 5 16:00:36 2025 GMT
Subject: CN=12e0ae2d95621162f6a944b803a1ceaa0ebb3c37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:aa:77:45:7c:c9:eb:13:d7:5b:d8:2b:90:49:
c7:3a:8a:a4:f7:bd:e9:35:06:5c:8f:2d:5d:59:2b:
e1:68:24:d0:59:dd:00:55:5d:b0:63:9d:c1:65:f6:
91:47:87:e3:89:e4:85:aa:ce:04:38:50:c9:90:14:
e7:0c:c0:a9:e2:9b:06:b9:2f:cd:62:07:97:e1:79:
4f:c0:53:ef:2d:a6:9f:4a:a2:0b:77:a4:aa:f3:dc:
79:44:57:25:e8:76:62:d3:8d:37:e4:b4:6b:5b:96:
fe:1a:ea:c5:aa:d2:e7:32:bd:21:8b:b8:46:35:d2:
05:56:7e:a1:0d:53:b4:32:44:fe:e6:ab:ca:9f:d4:
7e:61:30:31:a6:eb:85:68:c5:0a:07:2b:5b:11:4c:
79:33:b6:cc:dd:44:f6:24:15:cc:bf:20:ae:7b:68:
73:34:d8:37:d5:7f:1f:6d:df:f7:1a:38:e0:71:43:
06:4e:af:e3:b6:67:0c:64:64:b8:54:0f:7f:62:db:
9a:57:1c:01:13:ba:36:eb:97:0a:a9:df:24:d8:79:
df:85:0e:39:98:5c:27:8b:b8:a9:85:e3:40:39:d7:
bb:a3:50:14:de:35:30:d1:a5:7f:07:8b:bc:fe:9f:
e6:ce:df:15:e9:25:e4:68:5d:ef:8e:7d:c8:6a:49:
59:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:E0:AE:2D:95:62:11:62:F6:A9:44:B8:03:A1:CE:AA:0E:BB:3C:37
X509v3 Authority Key Identifier:
keyid:F7:24:75:B0:64:DE:8A:89:F1:50:3E:AE:FC:7D:72:AD:CC:F3:8A:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9yR1sGTeionxUD6u_H1yrczzihY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:67:76:76:1c:86:62:59:1b:5a:4d:b8:fa:29:73:7e:b9:b7:
a7:0e:7c:f4:68:85:a7:e7:28:ad:71:15:89:54:04:f0:29:e1:
3f:4d:23:b0:58:b9:fb:7f:1c:b4:77:7d:5d:ee:a1:6c:f4:b5:
4b:6d:34:b1:31:09:57:a8:44:94:56:2e:74:41:6c:b6:e3:32:
fd:b7:9e:d8:ea:1f:5f:d3:b5:3a:5a:a8:e5:50:78:1f:f0:75:
83:32:80:f3:78:4c:db:82:7f:a8:2a:d7:9d:4b:dc:ec:b8:79:
59:b9:f3:ab:50:23:67:b7:89:6a:98:67:fe:1e:c2:66:ee:d5:
23:5f:36:4e:77:ba:f0:31:09:ae:d5:d5:0c:ae:b5:71:3d:12:
c7:ba:aa:73:e2:a4:25:56:27:09:7d:1d:6d:f8:2f:bc:96:d5:
12:76:e4:39:f1:cd:fe:48:63:0e:4d:f5:43:b4:8c:77:00:ff:
0e:4c:a8:57:3f:e5:e4:b7:c2:73:39:2b:fc:16:9d:1a:b9:d2:
d2:c7:09:5b:50:ae:01:d1:26:6f:64:e7:6a:24:c6:89:5e:4c:
f3:c4:49:10:bf:4f:fb:54:7f:c0:1f:7b:37:bc:e9:86:9f:41:
89:08:ef:aa:86:59:80:05:2a:d6:22:23:26:56:ff:d5:25:49:
a5:a5:48:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 21:57:41 2025 by rpki-client