Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/fffcd6-83e2-4c59-b0c6-b7daa647809b/1/p9nJ2x4fiGAXe__cWPDvzZm5as4.mft
File: p9nJ2x4fiGAXe__cWPDvzZm5as4.mft (raw, json)
Hash identifier: TJp56ZCmYOWheHb0xBgMZL7vhZ/ki75UizEeUVsla0M=
Subject key identifier: 5D:CA:15:F6:FF:F8:85:98:F3:D9:66:7D:05:A0:F2:5F:FA:75:D7:0F
Authority key identifier: A7:D9:C9:DB:1E:1F:88:60:17:7B:FF:DC:58:F0:EF:CD:99:B9:6A:CE
Certificate issuer: /CN=a7d9c9db1e1f8860177bffdc58f0efcd99b96ace
Certificate serial: 019676E81C29E670B74A9E68FCEE3AD5160D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9nJ2x4fiGAXe__cWPDvzZm5as4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/fffcd6-83e2-4c59-b0c6-b7daa647809b/1/p9nJ2x4fiGAXe__cWPDvzZm5as4.mft
Manifest number: 0CE8
Signing time: Sun 27 Apr 2025 11:00:45 +0000
Manifest this update: Sun 27 Apr 2025 11:00:45 +0000
Manifest next update: Mon 28 Apr 2025 11:00:45 +0000
Files and hashes: 1: lC2KQAOisVOwxCnTUOf6nl08y8o.roa (hash: /DfGXFX3mvJ80lD2tCLD0oWxnch4EP1FqZDjENG9stE=)
2: p9nJ2x4fiGAXe__cWPDvzZm5as4.crl (hash: 4xhHMyIqT79Do54dgxZJ7t11mIka7bdM1DDfrAzwgiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/fffcd6-83e2-4c59-b0c6-b7daa647809b/1/p9nJ2x4fiGAXe__cWPDvzZm5as4.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/fffcd6-83e2-4c59-b0c6-b7daa647809b/1/p9nJ2x4fiGAXe__cWPDvzZm5as4.mft
rsync://rpki.ripe.net/repository/DEFAULT/p9nJ2x4fiGAXe__cWPDvzZm5as4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:e8:1c:29:e6:70:b7:4a:9e:68:fc:ee:3a:d5:16:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7d9c9db1e1f8860177bffdc58f0efcd99b96ace
Validity
Not Before: Apr 27 11:00:45 2025 GMT
Not After : Apr 28 11:00:45 2025 GMT
Subject: CN=5dca15f6fff88598f3d9667d05a0f25ffa75d70f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d6:46:d7:6d:7f:19:3d:09:3a:28:d9:86:da:
37:e8:ae:2b:60:09:59:13:50:c8:5c:f9:21:c5:4c:
14:27:4d:5e:28:dc:6b:c1:05:f3:70:18:ff:a1:e0:
5f:fc:96:ad:32:fe:32:db:a7:be:71:6c:53:22:e9:
8e:ba:e5:c2:e2:a7:5d:0e:52:6e:9d:3e:db:2a:b2:
92:2c:cc:90:87:62:9b:0a:57:94:0f:ca:01:86:9e:
e1:49:a4:b5:9e:bd:75:69:42:4c:3e:e5:c6:2c:b1:
81:4d:f8:f9:5b:f6:fe:87:1d:0c:81:8f:19:51:46:
bf:63:96:72:1f:07:b2:6f:04:5d:7e:79:15:2d:ba:
24:21:9c:d8:4e:44:8e:ef:40:e7:ef:c9:4b:65:81:
88:bf:93:16:6e:29:4d:24:40:ef:3a:44:00:4d:bb:
06:39:71:7c:a5:e1:09:d7:ee:a9:a7:2e:50:39:bf:
04:c8:a6:2d:07:c8:78:18:d2:70:bf:c9:7a:ae:8f:
60:ec:bc:93:c6:ca:22:64:a6:53:fe:1d:21:14:6c:
41:05:11:35:67:67:49:e5:b8:59:f6:db:4f:db:e9:
10:78:64:e7:03:6c:22:c2:1e:b9:2c:99:e5:b7:d7:
e7:65:88:c9:fc:26:17:69:34:3c:7b:41:43:c8:47:
a7:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:CA:15:F6:FF:F8:85:98:F3:D9:66:7D:05:A0:F2:5F:FA:75:D7:0F
X509v3 Authority Key Identifier:
keyid:A7:D9:C9:DB:1E:1F:88:60:17:7B:FF:DC:58:F0:EF:CD:99:B9:6A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9nJ2x4fiGAXe__cWPDvzZm5as4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fffcd6-83e2-4c59-b0c6-b7daa647809b/1/p9nJ2x4fiGAXe__cWPDvzZm5as4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fffcd6-83e2-4c59-b0c6-b7daa647809b/1/p9nJ2x4fiGAXe__cWPDvzZm5as4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:7e:8f:10:d3:a0:f7:2a:c1:97:7c:7d:9e:27:59:54:77:6a:
51:b9:29:96:7d:ef:89:6c:2d:e9:c4:58:8b:df:b9:e8:94:35:
47:85:43:0a:8a:08:5c:61:22:67:de:a5:45:57:40:93:e8:76:
76:e9:bd:bf:29:2e:74:74:d9:cc:d5:70:f7:08:b5:37:c4:09:
f6:48:ab:22:36:6d:49:d5:90:87:8b:12:b9:a4:99:17:d2:5f:
49:8f:78:cb:20:4b:a5:b1:c4:44:80:4b:ff:55:58:78:12:83:
9e:0d:e6:d2:49:e3:6c:0b:8a:f7:53:91:01:22:69:7e:b2:20:
cb:75:9b:3d:96:67:4f:76:42:81:e1:49:84:8d:3b:bd:4f:c9:
24:25:9d:7a:b8:55:fa:65:81:b4:21:04:78:e1:9b:24:61:a7:
4b:4f:b3:35:73:35:bb:a7:4f:fd:92:dc:c0:6e:33:3b:9b:93:
8f:9d:e7:0c:3c:f3:95:cc:73:8d:3e:22:f4:67:be:a9:26:e9:
03:ca:4b:79:1a:60:82:ef:21:0e:c1:f2:7e:f8:8f:11:29:75:
f4:6c:a7:cc:b4:79:d1:71:9f:81:e0:97:bd:0c:62:2c:eb:b1:
1e:70:d0:ac:22:18:5a:d5:1a:cd:43:2e:a1:ce:69:fb:cd:5c:
52:f1:1f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:20:27 2025 by rpki-client