Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft
File: 9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft (raw, json)
Hash identifier: WpmYfB5SQ7wlbnka3tNeBeCKCfcEGn4isr6b39rQ3xM=
Subject key identifier: AF:E5:ED:9C:77:76:2B:92:16:23:AB:4F:1F:C1:1C:12:2C:63:66:B4
Authority key identifier: F7:09:52:8B:88:28:B4:D8:26:35:5E:2C:52:23:7D:64:20:71:CD:54
Certificate issuer: /CN=f709528b8828b4d826355e2c52237d642071cd54
Certificate serial: 0196854875D084972CF6B8998EEF90421BD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft
Manifest number: 04FB
Signing time: Wed 30 Apr 2025 06:00:40 +0000
Manifest this update: Wed 30 Apr 2025 06:00:40 +0000
Manifest next update: Thu 01 May 2025 06:00:40 +0000
Files and hashes: 1: 9wlSi4gotNgmNV4sUiN9ZCBxzVQ.crl (hash: oztIoTcKJwL4HLZWGnmwY4/7oT3Ez7W1ewi/CtL/sPY=)
2: I5lxuXg8Kfbx7zXSiGma80fdzJ0.roa (hash: H4ThFxj2wgOGFGxz87hZLwfWFdZQqMGoVJJaZVtoaOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:48:75:d0:84:97:2c:f6:b8:99:8e:ef:90:42:1b:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f709528b8828b4d826355e2c52237d642071cd54
Validity
Not Before: Apr 30 06:00:40 2025 GMT
Not After : May 1 06:00:40 2025 GMT
Subject: CN=afe5ed9c77762b921623ab4f1fc11c122c6366b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:24:8a:06:54:e8:37:60:4d:5d:79:64:9c:57:
51:73:0f:b1:f5:63:58:2a:61:b0:66:73:ee:32:ad:
55:d6:e2:f7:23:ec:8d:3f:4d:8b:8c:9a:54:d2:8d:
f0:8c:8f:0c:3f:47:00:9a:c3:ef:e8:38:aa:67:19:
2e:31:90:69:a2:47:d8:d1:cd:f6:8b:b9:14:f0:58:
79:e1:93:7e:e6:d2:4d:4a:fd:e6:08:10:80:6f:f1:
00:30:6b:30:a5:f5:45:16:95:61:a4:97:46:88:5f:
1a:08:53:b5:58:a4:86:8f:d5:c8:f7:93:3b:77:b7:
3e:bb:61:4d:f5:e3:0c:45:b9:f2:b1:38:95:5c:f8:
8c:8d:c9:3c:e8:f8:54:81:94:18:1c:6a:a8:9d:30:
a5:dd:45:b0:ad:c3:ad:27:87:0e:92:46:dd:11:c5:
c7:a5:ae:18:7f:e0:82:73:11:9b:02:13:05:05:ec:
12:36:02:b9:ac:53:db:28:34:2d:11:60:9f:b3:88:
c4:b9:55:56:94:d9:c8:38:67:99:16:de:a4:8c:aa:
44:6f:db:e3:29:35:2c:5b:05:8f:41:5d:f5:45:fe:
8d:f5:62:61:3a:87:a2:b8:14:b8:4c:8f:06:a1:bc:
d2:3f:b8:68:1d:66:c1:30:95:56:36:75:87:74:fd:
a6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:E5:ED:9C:77:76:2B:92:16:23:AB:4F:1F:C1:1C:12:2C:63:66:B4
X509v3 Authority Key Identifier:
keyid:F7:09:52:8B:88:28:B4:D8:26:35:5E:2C:52:23:7D:64:20:71:CD:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:4c:45:ca:2b:19:7a:a5:50:8e:cf:16:b0:99:85:52:fe:15:
50:ad:c4:fb:e4:78:cd:34:7f:c1:58:ff:5b:94:e0:d5:99:ba:
91:0f:b1:5d:c5:37:64:26:b7:a4:3b:ac:35:01:16:57:d1:08:
aa:c3:fe:28:9d:42:2f:b7:b6:d0:34:dd:69:f7:ae:35:99:d5:
e3:2f:99:53:0c:96:57:a7:71:c2:72:af:4f:d0:70:23:c4:f2:
eb:8e:e4:60:47:c9:a1:1e:41:f3:47:1e:ab:11:3d:24:64:95:
c8:f6:14:38:76:29:86:21:68:24:b6:56:08:dc:6c:7d:a6:1d:
71:b0:cd:e7:3d:0b:a1:bf:c3:a8:f4:23:c9:79:48:7a:95:e6:
ec:0d:ca:a4:17:40:c2:a3:10:bc:89:b5:89:a4:78:37:6e:77:
f8:45:f4:ab:0b:ef:dd:10:d9:e6:b4:31:fa:ee:48:c2:58:0e:
a5:52:ba:a4:c6:4c:98:9a:8f:c1:0f:89:58:cf:e8:48:cb:62:
c7:6d:b6:fd:48:da:bf:6b:d1:8d:5b:1a:66:b9:3b:e4:6f:ab:
0d:36:db:73:5a:ee:70:5b:6e:3d:9f:20:e3:a7:11:7c:4a:0a:
28:2c:f1:9b:cf:d3:24:44:36:aa:e1:56:0d:05:48:f9:34:21:
57:99:c2:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:56:33 2025 by rpki-client