Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft
File: 9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft (raw, json)
Hash identifier: tJrGAkTIxEZnQrua7PnhBVfppPw9rUj0mz63U/y8IVA=
Subject key identifier: D0:C5:3D:E6:57:0C:24:EA:BB:42:6A:16:65:BC:CA:C5:38:E8:0A:9D
Authority key identifier: F4:1C:7D:47:71:8A:8A:4A:9D:8C:50:B2:60:83:E7:18:52:5B:6C:1B
Certificate issuer: /CN=f41c7d47718a8a4a9d8c50b26083e718525b6c1b
Certificate serial: 019683911B797F0239EF975E63BF828800C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Bx9R3GKikqdjFCyYIPnGFJbbBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft
Manifest number: 0214
Signing time: Tue 29 Apr 2025 22:00:47 +0000
Manifest this update: Tue 29 Apr 2025 22:00:47 +0000
Manifest next update: Wed 30 Apr 2025 22:00:47 +0000
Files and hashes: 1: 9Bx9R3GKikqdjFCyYIPnGFJbbBs.crl (hash: zgkj9VI5hk4i4gvv9MjoKIOazRHmkNWEP0tn+p7OT+c=)
2: OHGF750j4DJGNc1Oe80dc-FWYaY.roa (hash: h+xssOn739NLfAUDZmv5GlRt0V3PO+xTJdzfH9zAWE8=)
3: _HF2gqhC9uCDDnAOpKs3WUfmbDo.roa (hash: QhESuMW1F4EzEaEsL+0TS0hEypm5aO6tHQYl52gTh58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Bx9R3GKikqdjFCyYIPnGFJbbBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 22:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:91:1b:79:7f:02:39:ef:97:5e:63:bf:82:88:00:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f41c7d47718a8a4a9d8c50b26083e718525b6c1b
Validity
Not Before: Apr 29 22:00:47 2025 GMT
Not After : Apr 30 22:00:47 2025 GMT
Subject: CN=d0c53de6570c24eabb426a1665bccac538e80a9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:dd:58:7c:23:26:3a:40:3b:04:a2:76:88:0f:
25:62:e1:a4:af:26:04:23:c7:72:3d:7f:ff:e3:e4:
4e:d6:e2:a2:19:dc:7b:41:1d:85:4b:39:14:54:db:
f0:b2:7f:7d:77:7e:aa:ce:6d:e9:5f:81:34:02:8e:
e6:d0:17:1e:17:76:c4:26:a5:b2:1f:54:63:53:ca:
ad:cf:d3:47:30:e6:cd:67:8b:af:34:ec:57:f2:d3:
76:67:20:3e:64:ad:f5:50:f2:7a:c8:f6:2b:6f:24:
07:43:61:b2:99:db:26:8b:66:b4:d5:95:27:b7:8e:
e0:22:92:36:0a:80:fa:f8:74:ec:b1:af:33:1f:71:
28:91:ac:0e:07:d8:a7:d8:26:8a:5a:51:d0:36:db:
8c:9e:ca:7f:41:55:7e:ec:ff:04:83:c7:42:7f:68:
eb:5b:43:17:3b:8e:db:b6:f4:37:0d:aa:c8:a4:61:
f3:e6:9f:08:90:1a:d0:4d:71:f8:de:e8:e7:03:ed:
b6:6b:f5:c8:15:97:4e:b9:f3:fb:7d:58:79:51:8f:
e1:01:22:d8:6e:f0:7b:68:74:ee:1f:8f:3b:b6:be:
af:9b:7d:8f:f6:8c:77:82:cf:80:e6:9a:f4:04:8a:
57:72:bd:99:31:09:e0:39:1c:06:b5:8a:31:f2:d8:
39:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C5:3D:E6:57:0C:24:EA:BB:42:6A:16:65:BC:CA:C5:38:E8:0A:9D
X509v3 Authority Key Identifier:
keyid:F4:1C:7D:47:71:8A:8A:4A:9D:8C:50:B2:60:83:E7:18:52:5B:6C:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Bx9R3GKikqdjFCyYIPnGFJbbBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:04:ea:3e:1f:bb:82:bf:12:2f:5f:09:16:1b:51:45:0a:a4:
dd:52:b9:c9:df:8e:89:3c:d5:aa:bb:31:8a:02:ea:6a:2f:ce:
38:cc:a6:8c:d1:73:ee:be:38:89:07:a3:01:93:1c:52:47:82:
df:05:04:4b:79:04:f9:68:3e:63:b3:7b:5a:5a:30:c9:19:6b:
70:a2:5f:8d:40:ee:65:9e:f8:89:3f:d9:dd:b8:f5:b2:f3:1f:
c7:30:01:f1:d7:83:a3:00:84:dd:cf:f7:48:10:9e:6d:1b:28:
48:06:e7:85:b8:57:c5:ce:ad:57:1a:db:c2:01:fd:0e:8d:e1:
06:e9:5e:1c:d2:0a:37:ef:20:a4:2f:dd:50:5b:a3:16:77:53:
85:2e:96:75:77:eb:8b:f0:86:71:30:3e:8c:46:f2:8f:9f:ec:
3d:9b:a2:55:08:2c:51:84:15:27:d0:55:cd:a3:53:83:7d:0c:
2d:33:f5:ae:b2:b4:31:a6:53:6c:be:18:df:72:1f:4e:6b:4d:
98:40:04:92:cd:9d:a9:d1:55:30:d8:9c:80:45:3f:89:bb:34:
d2:34:44:2e:c7:df:68:0a:8a:5e:a0:73:a5:72:26:66:f6:47:
3c:8a:57:3e:1a:bf:d2:fa:cc:07:6e:25:ad:35:23:cf:a5:64:
b6:ab:1b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 02:07:32 2025 by rpki-client