Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/d0dfcf-58fe-4ffe-bf9f-0fe054f8c781/1/h9Seoo0lkfcudXx9rTAIFMJ3lL4.mft
File: h9Seoo0lkfcudXx9rTAIFMJ3lL4.mft (raw, json)
Hash identifier: 4GmbRJ0RXQ6AO8W/1RuJTIcQcKzhIE5Zxe0kQRP+Jrk=
Subject key identifier: FC:9B:97:16:13:83:87:FA:31:9F:80:15:8D:C0:42:22:FC:69:76:F2
Authority key identifier: 87:D4:9E:A2:8D:25:91:F7:2E:75:7C:7D:AD:30:08:14:C2:77:94:BE
Certificate issuer: /CN=87d49ea28d2591f72e757c7dad300814c27794be
Certificate serial: 01967A568266EC55FEF8CC76241C9BFBCEF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9Seoo0lkfcudXx9rTAIFMJ3lL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/d0dfcf-58fe-4ffe-bf9f-0fe054f8c781/1/h9Seoo0lkfcudXx9rTAIFMJ3lL4.mft
Manifest number: 047D
Signing time: Mon 28 Apr 2025 03:00:11 +0000
Manifest this update: Mon 28 Apr 2025 03:00:11 +0000
Manifest next update: Tue 29 Apr 2025 03:00:11 +0000
Files and hashes: 1: h9Seoo0lkfcudXx9rTAIFMJ3lL4.crl (hash: o5AiZpCl9qFPj853Om2/8iZVCEp5xSBgcS0NHKKkilQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/d0dfcf-58fe-4ffe-bf9f-0fe054f8c781/1/h9Seoo0lkfcudXx9rTAIFMJ3lL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/d0dfcf-58fe-4ffe-bf9f-0fe054f8c781/1/h9Seoo0lkfcudXx9rTAIFMJ3lL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/h9Seoo0lkfcudXx9rTAIFMJ3lL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 03:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:56:82:66:ec:55:fe:f8:cc:76:24:1c:9b:fb:ce:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87d49ea28d2591f72e757c7dad300814c27794be
Validity
Not Before: Apr 28 03:00:11 2025 GMT
Not After : Apr 29 03:00:11 2025 GMT
Subject: CN=fc9b9716138387fa319f80158dc04222fc6976f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:4b:ae:50:32:32:e7:b4:5d:f1:30:c6:49:f3:
67:74:4a:ec:0d:34:8d:04:2d:56:63:ac:13:d8:56:
52:7d:e7:29:66:b4:dc:13:51:0f:15:c2:01:75:b0:
9d:2e:f4:67:4c:35:1c:20:cf:9b:0e:59:9c:ca:73:
76:9f:cb:8b:e7:e2:e1:88:3f:6c:0a:89:52:44:d3:
70:33:c9:11:f9:3b:4a:96:64:c7:4c:85:3a:f8:9f:
0f:88:ce:1c:e2:90:d5:8d:92:d4:bc:de:97:a3:b2:
14:1c:38:05:59:7b:66:a4:5c:2f:89:9c:c5:d3:ad:
19:46:fd:da:eb:ff:f1:2f:83:79:73:6c:78:5b:19:
37:53:6f:79:2a:a6:63:db:27:d3:85:c1:f1:ad:10:
23:b4:de:cf:87:e2:cf:75:d8:2b:03:f9:c3:35:e6:
18:4b:6a:60:a4:46:e5:ea:ea:95:33:e0:35:aa:db:
83:75:2a:e4:27:8e:4c:14:33:d3:df:18:23:68:7c:
47:f1:2c:6a:71:99:e6:c4:b1:09:1b:9e:30:c6:f6:
b2:45:73:c6:53:a7:86:1d:fc:af:38:b6:0e:43:45:
4a:78:11:24:7d:8c:d1:cb:29:51:97:d0:ba:9c:b4:
b6:f2:08:1a:79:73:57:64:43:b1:d1:8e:c4:e0:bb:
5f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:9B:97:16:13:83:87:FA:31:9F:80:15:8D:C0:42:22:FC:69:76:F2
X509v3 Authority Key Identifier:
keyid:87:D4:9E:A2:8D:25:91:F7:2E:75:7C:7D:AD:30:08:14:C2:77:94:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9Seoo0lkfcudXx9rTAIFMJ3lL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/d0dfcf-58fe-4ffe-bf9f-0fe054f8c781/1/h9Seoo0lkfcudXx9rTAIFMJ3lL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/d0dfcf-58fe-4ffe-bf9f-0fe054f8c781/1/h9Seoo0lkfcudXx9rTAIFMJ3lL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:2f:d4:86:7d:06:51:a7:45:3c:de:4b:80:0b:3e:78:cf:1d:
45:85:e4:e2:72:54:7d:06:3d:0d:74:10:bf:82:79:0d:b6:de:
60:82:da:f4:f0:a5:5e:4d:d9:92:c3:3b:ad:c0:1c:6b:61:8d:
38:b7:8e:4d:ad:f3:17:7a:c7:9b:06:78:42:15:46:9b:fb:94:
72:0f:8e:9e:d4:65:f8:a4:b6:25:68:4c:32:c0:c0:dd:5c:25:
9e:c2:32:e0:37:96:5c:91:b7:0d:f6:5a:bf:ff:e0:73:ac:c4:
cc:d1:b3:f1:be:94:e1:eb:db:ce:8e:4b:a5:35:b3:a2:b5:07:
88:04:3f:34:4a:4b:84:89:51:07:80:c8:69:47:9c:75:6b:d1:
f8:e0:3a:4a:ac:16:f4:84:fd:47:f4:ed:d3:57:f6:ad:2e:41:
af:51:ad:b1:f5:b8:2a:8d:53:a7:db:bf:4a:33:5c:db:a9:e1:
6e:90:5a:30:9b:6d:19:22:a9:45:ef:2c:49:98:27:a8:39:ec:
d1:9e:53:ec:69:91:a3:12:50:ad:67:02:10:45:c7:3c:14:92:
3e:86:11:e9:82:30:0d:d6:c4:94:0d:13:de:a2:3e:0d:9b:57:
df:8e:ed:27:93:4c:cb:c7:38:cc:9a:2e:f9:08:82:46:46:a4:
0f:f1:f0:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:15:11 2025 by rpki-client