Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft
File: 9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft (raw, json)
Hash identifier: 1i3RKlWGdWYyFJSeQqPkz9YSJqhle4WMHpF/FT1BcCc=
Subject key identifier: 9D:01:18:3C:88:7B:8F:E2:CF:E6:99:3E:CE:91:D5:B0:9B:FD:FC:15
Authority key identifier: F4:27:2A:C0:42:3F:B0:97:58:3C:68:72:56:7D:84:CA:E4:10:C8:9B
Certificate issuer: /CN=f4272ac0423fb097583c6872567d84cae410c89b
Certificate serial: 01967EA15BF9D505872DFA5CF0DD8E1B42E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9CcqwEI_sJdYPGhyVn2EyuQQyJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft
Manifest number: 082A
Signing time: Mon 28 Apr 2025 23:00:26 +0000
Manifest this update: Mon 28 Apr 2025 23:00:26 +0000
Manifest next update: Tue 29 Apr 2025 23:00:26 +0000
Files and hashes: 1: 9CcqwEI_sJdYPGhyVn2EyuQQyJs.crl (hash: N21LY/wfct904E71LB/1NdOmg5BbJj84Bo0uxUlmL6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/9CcqwEI_sJdYPGhyVn2EyuQQyJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:a1:5b:f9:d5:05:87:2d:fa:5c:f0:dd:8e:1b:42:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4272ac0423fb097583c6872567d84cae410c89b
Validity
Not Before: Apr 28 23:00:26 2025 GMT
Not After : Apr 29 23:00:26 2025 GMT
Subject: CN=9d01183c887b8fe2cfe6993ece91d5b09bfdfc15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:98:ff:e0:2d:7c:8d:78:30:0a:bc:37:b7:05:
f2:76:d5:97:da:5a:02:1f:2a:de:4b:c5:f1:05:bb:
be:8a:e4:8d:a3:86:51:13:d9:61:92:97:4c:e0:29:
f0:23:a3:2b:ec:79:43:b5:f5:25:cd:82:08:f7:c1:
4f:bf:7a:5e:c9:1b:7a:92:4b:25:b5:14:26:19:3e:
60:6e:2d:79:84:81:d7:b8:1b:f0:8d:b1:60:81:61:
72:25:da:8d:81:bf:f0:44:02:a3:aa:9e:3c:5e:c7:
8b:84:65:e8:95:d9:43:c8:b4:c0:ed:69:2c:05:a5:
6f:8c:65:b7:e4:68:cf:5e:95:b1:1e:bc:fd:df:5b:
5a:ff:7e:2d:f5:fb:c8:88:6d:32:4b:82:af:4e:f6:
c4:ad:26:40:5d:21:20:4b:00:79:cc:03:3d:3a:23:
79:46:51:72:11:31:a8:48:71:5a:83:c9:7e:d0:75:
dd:7f:21:ae:0e:ef:ed:36:e0:6b:00:1a:5f:01:11:
84:aa:50:73:43:34:5a:72:4e:d4:24:20:88:84:95:
d0:f7:76:e0:a1:f4:36:c0:7b:cc:0e:ad:10:db:2f:
08:79:7c:4d:46:cc:c8:79:01:57:ef:31:8e:0b:bd:
00:4a:0e:87:25:d2:4d:17:a7:74:78:29:f6:31:bc:
e1:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:01:18:3C:88:7B:8F:E2:CF:E6:99:3E:CE:91:D5:B0:9B:FD:FC:15
X509v3 Authority Key Identifier:
keyid:F4:27:2A:C0:42:3F:B0:97:58:3C:68:72:56:7D:84:CA:E4:10:C8:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9CcqwEI_sJdYPGhyVn2EyuQQyJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:f0:2f:86:09:3d:77:78:f4:4a:90:39:cd:9e:93:af:55:52:
a3:bb:60:a9:85:1a:8f:b3:b2:00:05:67:04:ef:03:40:eb:b4:
2a:07:05:f5:b1:a0:e0:0c:09:e9:92:6c:06:f4:ca:15:1d:91:
62:f9:44:c1:f0:15:39:2c:d0:d2:54:a9:e7:2e:08:d2:d1:2e:
5b:b5:19:47:87:be:fd:a5:51:c5:fb:38:58:1e:15:05:0e:fc:
cb:e3:f2:b3:e2:d1:33:2a:c3:7e:49:84:cd:b4:ab:28:65:e9:
d6:6b:4a:5e:d5:49:02:fd:2c:b9:2d:32:1b:28:ac:52:73:13:
7c:d5:3f:9b:ce:c8:80:60:9f:bf:92:be:2c:fd:ad:34:ba:bf:
cf:89:39:90:d0:5c:11:5e:49:54:03:ea:1e:b5:70:2e:35:dd:
5d:03:c7:94:df:7c:90:5c:e2:39:ee:55:44:16:c8:2d:83:99:
dc:a4:97:b2:c4:02:29:a3:ec:41:65:35:79:20:02:27:a9:ab:
39:1b:05:0d:c3:f9:c9:78:4e:34:85:6b:65:38:1a:f6:e5:52:
fd:e3:ca:e7:73:69:a2:ca:64:5e:03:06:90:27:c8:aa:f7:a2:
5d:1a:61:b0:6e:89:18:06:af:f8:ff:e0:58:3a:63:b9:1d:85:
48:85:d2:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:23:56 2025 by rpki-client