Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.mft
File: 9PerRYfmkCLl4rwkEHtQHQMcNyA.mft (raw, json)
Hash identifier: e9wyULgClIbI2rF0WvKHYNZoMUsT7iBSH0AlgTjyrpo=
Subject key identifier: B6:14:AA:EF:7C:F2:66:8D:E6:22:D7:66:30:24:DB:BD:4C:79:C4:5C
Authority key identifier: F4:F7:AB:45:87:E6:90:22:E5:E2:BC:24:10:7B:50:1D:03:1C:37:20
Certificate issuer: /CN=f4f7ab4587e69022e5e2bc24107b501d031c3720
Certificate serial: 01967E33DAC41298469AD4B6DA94789B45E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PerRYfmkCLl4rwkEHtQHQMcNyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.mft
Manifest number: 1516
Signing time: Mon 28 Apr 2025 21:00:49 +0000
Manifest this update: Mon 28 Apr 2025 21:00:49 +0000
Manifest next update: Tue 29 Apr 2025 21:00:49 +0000
Files and hashes: 1: 4uOHcGP0XRhUQP9FQOI9ooL1PSk.roa (hash: A3c3lK9eOK2+oXlJyN8L6YhZDvbwMKgjDORS3hJPEzI=)
2: 9PerRYfmkCLl4rwkEHtQHQMcNyA.crl (hash: kBf8CuI1WlX897c9Iv9v+UyqjOsAMeBeFRSdxIPG+uA=)
3: C-VlGkt4UijcXV6P3p4QA_nv8Uc.roa (hash: I6wlUhROKZbhSUVuQLxUOY2F8mo+U4zrTtPsYJyoX+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PerRYfmkCLl4rwkEHtQHQMcNyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:33:da:c4:12:98:46:9a:d4:b6:da:94:78:9b:45:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f7ab4587e69022e5e2bc24107b501d031c3720
Validity
Not Before: Apr 28 21:00:49 2025 GMT
Not After : Apr 29 21:00:49 2025 GMT
Subject: CN=b614aaef7cf2668de622d7663024dbbd4c79c45c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:90:d0:e8:f8:bf:7b:a1:35:c1:39:4a:e7:c2:
24:8c:a1:3d:6c:84:a7:e0:c4:6a:93:b1:13:0a:71:
87:3b:4e:4f:3d:ef:b7:f9:34:b5:a8:7a:59:49:ac:
26:e6:b2:fb:04:6f:5f:f4:cf:39:bd:0b:b7:6d:67:
95:55:ac:d1:e9:61:50:03:83:44:98:9d:1a:68:eb:
a3:91:dd:92:30:a2:85:7a:05:82:90:d4:54:9c:83:
b2:ee:d6:47:54:cf:bb:da:5b:7c:24:7b:df:88:17:
a9:24:4b:da:27:b1:2d:42:09:9d:03:51:3e:fd:76:
0a:3a:b7:0d:c8:a4:f7:4c:28:27:70:5e:85:a6:ae:
49:d3:0a:99:30:ba:6d:6e:9a:7d:e3:be:cf:27:4c:
70:45:0b:c3:93:3c:a4:4a:0d:4e:58:6a:5b:85:fc:
de:5d:12:33:95:c6:93:60:4e:c4:02:cc:af:7f:f6:
cf:4f:ad:c0:90:81:94:55:f0:dc:e2:76:ad:b8:9b:
40:b3:64:73:c0:16:9b:09:54:28:7b:fc:ff:86:a1:
07:a0:c3:b5:81:e5:26:ca:35:e0:16:17:e8:c9:34:
3c:4f:96:45:df:e1:2a:31:a9:4d:bc:19:6d:5d:46:
a1:1a:63:1b:7d:d3:e3:f9:d7:d7:4f:5b:b5:f0:fe:
69:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:14:AA:EF:7C:F2:66:8D:E6:22:D7:66:30:24:DB:BD:4C:79:C4:5C
X509v3 Authority Key Identifier:
keyid:F4:F7:AB:45:87:E6:90:22:E5:E2:BC:24:10:7B:50:1D:03:1C:37:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PerRYfmkCLl4rwkEHtQHQMcNyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:d6:4e:4e:b6:c2:a0:86:fc:04:09:f9:dd:77:58:57:c5:0a:
91:9a:eb:93:f9:b9:39:8b:48:fb:21:e7:b2:11:5a:03:2f:d0:
9e:97:08:40:60:61:19:e3:39:4b:9b:00:db:bc:81:fa:b2:ca:
45:6c:ec:01:e1:23:c7:68:50:c0:ec:3f:bc:3d:d1:c1:65:d0:
2c:91:00:df:48:f5:04:a3:58:98:bc:bf:7d:24:1c:e8:77:e5:
17:96:36:09:c6:61:ec:31:9d:12:83:a3:b5:75:f8:c9:d6:f0:
81:09:38:41:bf:4a:44:9f:b9:64:20:6c:e4:60:8d:7c:5a:66:
16:8f:01:59:29:4d:bc:7b:8f:99:10:ed:69:27:f2:23:ec:4e:
56:3c:92:f7:d9:f1:7c:94:b1:33:8c:92:ce:1e:26:c2:83:3c:
37:f1:67:ab:ed:8d:25:ae:c6:a9:03:83:15:0b:05:02:a6:77:
9b:2c:7a:06:09:36:63:6d:dc:65:7a:28:a3:9e:7b:aa:9e:e4:
3f:41:54:f7:55:a1:0d:04:6b:88:ff:d8:58:4f:c4:86:05:f0:
45:9d:4b:b2:cb:97:bb:11:67:21:01:c0:8d:08:c6:88:14:f4:
61:17:20:b8:c5:17:6f:4c:04:64:2b:fd:87:77:4b:81:c7:04:
bf:16:9e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:35:50 2025 by rpki-client