Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.mft
File: 9h0r7udUOkGpCKGgHs_AqHJqOuI.mft (raw, json)
Hash identifier: jeprQe5q3RxjnfUbHYyQZS6uc7srrQZ/wu2Vt3PKi8M=
Subject key identifier: 03:26:CD:8D:27:91:EB:D1:7C:A4:89:0A:FC:31:96:A2:96:35:E3:85
Authority key identifier: F6:1D:2B:EE:E7:54:3A:41:A9:08:A1:A0:1E:CF:C0:A8:72:6A:3A:E2
Certificate issuer: /CN=f61d2beee7543a41a908a1a01ecfc0a8726a3ae2
Certificate serial: 019679447C391EC83FF5270274EAFEBBAFFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9h0r7udUOkGpCKGgHs_AqHJqOuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.mft
Manifest number: 09B2
Signing time: Sun 27 Apr 2025 22:00:53 +0000
Manifest this update: Sun 27 Apr 2025 22:00:53 +0000
Manifest next update: Mon 28 Apr 2025 22:00:53 +0000
Files and hashes: 1: 9h0r7udUOkGpCKGgHs_AqHJqOuI.crl (hash: Vw/hlQDq36f2UVS/H5ptMqTWu7iXVqeGCUt7uZDSQBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9h0r7udUOkGpCKGgHs_AqHJqOuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:44:7c:39:1e:c8:3f:f5:27:02:74:ea:fe:bb:af:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f61d2beee7543a41a908a1a01ecfc0a8726a3ae2
Validity
Not Before: Apr 27 22:00:53 2025 GMT
Not After : Apr 28 22:00:53 2025 GMT
Subject: CN=0326cd8d2791ebd17ca4890afc3196a29635e385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a2:8c:3c:cb:58:d2:ad:70:d4:dc:56:6d:46:
72:0c:83:3b:dc:1f:d1:5a:4c:75:78:11:58:32:5a:
44:8a:0d:9a:7c:02:c0:80:1e:ca:6a:eb:3a:1d:5b:
88:f8:29:9f:a9:18:8e:bc:df:ff:19:e3:ec:d6:24:
a1:01:d7:2c:44:59:b4:90:42:32:58:34:f4:16:e4:
e6:aa:b3:cc:73:fd:e9:12:d3:95:d1:62:9b:53:ff:
30:ab:cd:5c:2f:26:c9:55:7d:2f:7d:9a:af:77:e1:
06:1d:63:66:a4:bf:71:f8:fe:c8:40:26:61:8e:94:
a2:67:52:d3:50:fa:5d:04:7e:8c:7b:4a:7e:d4:b7:
de:94:32:16:c7:ca:3e:69:7d:cb:ee:a0:e9:38:23:
5f:74:e0:90:9d:eb:5c:d1:d7:25:8b:09:1a:aa:81:
89:35:0e:dd:98:c0:c0:ec:04:b1:51:48:00:68:96:
bf:45:32:6b:3d:e1:09:ee:62:0c:56:fd:7b:7d:3a:
df:5e:2b:a4:a7:63:a6:bf:91:93:b2:97:4f:5f:c5:
c7:b8:d2:cb:0a:d9:36:a1:65:ba:57:68:d8:0b:c1:
66:ff:89:7f:e2:bb:6e:61:cd:fb:7c:63:6e:14:3e:
3a:e1:a6:c0:a4:87:1f:7f:8f:2b:ed:f7:5a:ee:b6:
9a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:26:CD:8D:27:91:EB:D1:7C:A4:89:0A:FC:31:96:A2:96:35:E3:85
X509v3 Authority Key Identifier:
keyid:F6:1D:2B:EE:E7:54:3A:41:A9:08:A1:A0:1E:CF:C0:A8:72:6A:3A:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9h0r7udUOkGpCKGgHs_AqHJqOuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/1edf10-d3df-40f5-b4a3-a731e9e1e533/1/9h0r7udUOkGpCKGgHs_AqHJqOuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:af:9b:66:9c:97:5e:63:03:f6:85:47:9a:ee:ae:d9:5b:51:
f8:ba:ed:b4:78:1e:64:5d:db:84:2e:b1:c6:a1:04:00:c1:8e:
7b:a1:ff:86:dd:46:0e:a0:b9:08:04:99:f4:9b:69:eb:7e:28:
22:76:82:48:52:42:b3:8a:7e:31:73:7d:11:ed:56:86:df:a5:
e3:8c:81:fa:b9:2e:f1:9c:e0:6b:0c:53:cb:32:a3:2b:67:24:
7d:47:3d:cf:2f:e9:03:59:25:af:2d:a3:9a:3f:cd:f6:5d:b2:
bb:e5:ff:0a:e3:8d:59:0d:bb:c4:ad:06:d7:91:11:93:18:e6:
f2:b1:71:f5:9d:f6:3c:41:af:95:8d:4b:f6:ce:da:05:be:d5:
20:4f:02:3d:19:dc:dd:d3:3b:ed:2d:b6:98:1d:55:2f:ff:14:
f8:ee:d5:27:cd:f9:ef:25:eb:5b:9e:3c:22:8d:e7:db:4e:c0:
f4:42:b7:f3:b7:35:05:e1:de:98:0b:55:6f:82:9e:1c:69:d3:
29:f9:5a:48:06:b9:d4:3c:5a:ed:f8:aa:fd:72:57:f9:8e:03:
d8:7f:54:3d:df:ac:0e:5d:30:c7:4b:14:82:4e:e7:56:e0:61:
03:72:55:8b:0b:c2:fc:87:95:26:59:2a:a1:03:f2:bc:ca:75:
d6:cc:7f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:57:06 2025 by rpki-client