Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.mft
File: 9N_4sb0HJLoTD4a4SOM8rqjp8R0.mft (raw, json)
Hash identifier: u5ZvHQWiBtDo9I1rmOJh2Ug16MpjqZoxTSjccjZI5Jo=
Subject key identifier: 67:F3:7C:C3:01:DA:F4:2E:14:6D:09:A1:68:07:79:04:3C:0B:D9:80
Authority key identifier: F4:DF:F8:B1:BD:07:24:BA:13:0F:86:B8:48:E3:3C:AE:A8:E9:F1:1D
Certificate issuer: /CN=f4dff8b1bd0724ba130f86b848e33caea8e9f11d
Certificate serial: 019675D4FBD9FBB53AAE9AD3FA14511C0B2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9N_4sb0HJLoTD4a4SOM8rqjp8R0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.mft
Manifest number: 037B
Signing time: Sun 27 Apr 2025 06:00:14 +0000
Manifest this update: Sun 27 Apr 2025 06:00:14 +0000
Manifest next update: Mon 28 Apr 2025 06:00:14 +0000
Files and hashes: 1: 9N_4sb0HJLoTD4a4SOM8rqjp8R0.crl (hash: XewMe+NnzmnswSIddtAwM6wKbKFDefBVB7DPUpZby/U=)
2: pcJxxqpyhZF6JL4G4VK7HBS4yYA.roa (hash: PZShrCQ10JtHGLNXwnmCPSpnucUc5Ex85jH4ClAc2jg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9N_4sb0HJLoTD4a4SOM8rqjp8R0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:d4:fb:d9:fb:b5:3a:ae:9a:d3:fa:14:51:1c:0b:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4dff8b1bd0724ba130f86b848e33caea8e9f11d
Validity
Not Before: Apr 27 06:00:14 2025 GMT
Not After : Apr 28 06:00:14 2025 GMT
Subject: CN=67f37cc301daf42e146d09a1680779043c0bd980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:15:fb:52:9a:73:f8:8e:83:cb:80:61:51:1f:
1e:b4:54:cf:81:ff:26:52:b8:19:63:f0:9c:fb:65:
bc:f1:96:82:46:c4:d2:9b:b0:46:cf:f3:b6:d6:ea:
09:12:46:f2:df:ce:12:f9:eb:5d:fe:74:57:64:31:
f6:1e:98:14:94:fd:17:49:fe:40:b7:c0:d7:ae:55:
19:52:36:f6:94:ff:70:5e:b9:9c:39:a6:6e:4f:9a:
d1:a7:68:61:b1:c7:e1:b5:a7:5e:9f:d7:b2:3b:bf:
8b:47:26:21:3c:55:94:cc:1e:93:6a:30:6f:65:33:
6c:b6:26:6c:d2:43:9f:47:5a:9a:40:24:88:ad:db:
16:c3:24:8b:50:5d:59:5b:69:5e:2b:d2:ea:30:03:
98:f6:b9:ba:fc:29:4e:a8:28:59:49:0c:b1:1b:34:
13:67:08:24:b7:62:fb:26:b8:f0:a6:5b:6f:ed:0e:
8d:a3:23:1f:79:26:51:a8:d3:4e:f9:4c:c1:9a:a2:
7d:c5:98:a5:4f:55:bd:06:da:ae:5b:7f:0d:04:52:
3d:14:f9:53:95:cc:f9:fc:98:90:04:2b:19:67:43:
c4:79:c7:af:1f:b4:a5:1f:93:4f:70:e2:68:bb:32:
22:4f:58:52:c2:a0:85:28:22:0d:91:8d:7d:b3:21:
e3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:F3:7C:C3:01:DA:F4:2E:14:6D:09:A1:68:07:79:04:3C:0B:D9:80
X509v3 Authority Key Identifier:
keyid:F4:DF:F8:B1:BD:07:24:BA:13:0F:86:B8:48:E3:3C:AE:A8:E9:F1:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9N_4sb0HJLoTD4a4SOM8rqjp8R0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:e7:e6:1b:fa:62:0a:2b:40:24:fd:ce:27:99:ee:d0:a9:a6:
5c:e7:ef:89:0b:b2:9c:5d:46:2a:89:50:49:08:62:b7:a4:d1:
4a:7d:62:ad:54:e3:42:fa:80:85:c6:c2:c3:10:1d:cb:86:13:
30:ad:50:d8:c7:36:84:66:8e:58:28:7c:f1:21:61:19:5b:89:
a2:51:b0:eb:a7:e7:44:a3:4a:7b:c3:fc:a9:40:a9:f3:55:fe:
f6:ea:f9:55:a1:7d:1b:5e:b7:2c:47:48:57:41:d5:95:35:cd:
9e:39:41:b7:50:45:bd:66:62:e4:6a:db:ab:18:ad:5c:74:d1:
78:6b:1b:98:72:39:54:45:54:c2:e7:7c:e0:89:05:2a:da:83:
ef:20:e6:0c:99:74:8f:c1:db:1b:ba:26:81:e3:8d:d9:61:f7:
97:da:5b:c1:18:4e:8d:5d:3a:03:7e:ec:e5:17:3e:8c:ea:ce:
99:fb:b1:37:3a:55:a8:f2:cf:c1:07:71:18:d0:5d:3e:ee:97:
a0:fd:15:c6:f4:c5:ff:04:b7:bf:7b:eb:76:40:8a:6a:61:69:
1d:d0:35:d9:4c:86:bf:df:1d:26:29:60:6e:17:92:6c:2f:c5:
b2:ac:0e:6c:cd:4a:55:f3:90:7e:fd:2a:be:64:77:e4:18:a5:
3c:29:c3:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:48:38 2025 by rpki-client