Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.mft
File: 9H0DN3zBCPRAkSa5oMIBYyQhxko.mft (raw, json)
Hash identifier: kYufuCt2wkcYzyw3//q+SNJTyILVq02I8ducJtMF0U4=
Subject key identifier: FD:43:33:42:FA:3C:EC:3F:DC:D5:B1:16:7E:AD:C4:CA:F5:98:68:31
Authority key identifier: F4:7D:03:37:7C:C1:08:F4:40:91:26:B9:A0:C2:01:63:24:21:C6:4A
Certificate issuer: /CN=f47d03377cc108f4409126b9a0c201632421c64a
Certificate serial: 0196760C29086D957D9CED8FA12412F472EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9H0DN3zBCPRAkSa5oMIBYyQhxko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.mft
Manifest number: 150A
Signing time: Sun 27 Apr 2025 07:00:30 +0000
Manifest this update: Sun 27 Apr 2025 07:00:30 +0000
Manifest next update: Mon 28 Apr 2025 07:00:30 +0000
Files and hashes: 1: 9H0DN3zBCPRAkSa5oMIBYyQhxko.crl (hash: 6S1HDh5nY2EZ8zMmbFr7WrNW67kKqxduX81ADCi2c9s=)
2: yhhMqOayivlP0HqWgBqkxI1f14U.roa (hash: w/NNRo63VlTAmPeepIG4fNxKMWjZVte8F0Xs65Wc7u4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.mft
rsync://rpki.ripe.net/repository/DEFAULT/9H0DN3zBCPRAkSa5oMIBYyQhxko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:29:08:6d:95:7d:9c:ed:8f:a1:24:12:f4:72:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f47d03377cc108f4409126b9a0c201632421c64a
Validity
Not Before: Apr 27 07:00:30 2025 GMT
Not After : Apr 28 07:00:30 2025 GMT
Subject: CN=fd433342fa3cec3fdcd5b1167eadc4caf5986831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a3:18:60:d6:dc:86:3c:c6:81:e1:af:e8:a8:
74:ff:98:e3:1a:58:68:fd:8e:92:dc:a9:c3:62:2a:
49:8a:3f:33:54:1f:ff:7c:49:90:03:a5:37:74:4f:
e9:cd:d7:68:95:1e:d2:24:e8:0d:78:b4:09:f4:e1:
54:6a:79:24:22:bf:3d:d9:1a:c8:b7:dc:95:e7:84:
67:24:2a:d8:a5:92:0e:35:98:d3:5d:95:38:b0:bd:
23:d1:41:c2:e5:97:99:49:ac:40:29:9f:3a:d8:61:
fd:d4:98:1a:d3:7a:6b:11:c0:84:88:8e:9e:af:66:
4c:13:c7:bd:4a:4b:da:bc:f5:84:7e:66:67:6a:43:
09:36:34:ec:c8:bc:d6:d7:bd:ee:1c:cd:79:ea:de:
b0:11:48:d9:b0:3f:75:fc:41:9c:9c:fb:8c:f0:30:
b4:d7:5f:62:85:96:c7:5e:c3:10:5c:a8:5b:28:1e:
66:78:8c:90:f0:d4:75:1d:eb:fb:f2:32:7e:9b:0a:
7a:b0:9b:24:df:26:55:e4:66:42:0f:bf:3d:be:fe:
bb:3c:48:4b:61:06:b4:33:55:05:51:9f:c8:8f:af:
61:b4:9d:0b:0e:2c:31:8b:eb:1d:b9:cc:87:23:04:
cc:d8:78:3c:5a:e0:4c:69:e7:ad:c6:7a:84:13:9b:
53:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:43:33:42:FA:3C:EC:3F:DC:D5:B1:16:7E:AD:C4:CA:F5:98:68:31
X509v3 Authority Key Identifier:
keyid:F4:7D:03:37:7C:C1:08:F4:40:91:26:B9:A0:C2:01:63:24:21:C6:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9H0DN3zBCPRAkSa5oMIBYyQhxko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:19:f8:4b:31:42:10:69:aa:72:de:a1:d9:60:6c:c4:a4:c9:
78:8f:96:a6:00:3c:7d:28:10:70:3e:a0:e2:34:ce:88:25:4d:
fb:27:19:92:1b:88:3a:a2:1a:7a:20:75:c6:0c:22:e0:18:16:
2a:b6:54:d1:96:9b:df:a3:14:cb:df:52:5f:86:7a:a4:a4:c5:
1a:0d:e0:72:c1:60:46:76:12:ab:c1:a8:01:f3:d2:9a:52:cb:
58:b5:5f:b9:4e:84:ca:9f:e0:30:9e:ca:01:22:b8:8f:c3:0b:
36:0c:43:33:af:07:02:e9:9a:a6:64:fc:16:67:c4:f6:ec:14:
a6:4d:42:0f:31:61:2e:21:b4:3b:71:af:78:3a:12:64:67:91:
d7:d4:76:57:15:7a:f1:a3:ea:69:2f:50:df:e1:89:09:1a:29:
82:92:c5:e1:04:83:f0:dd:f4:71:be:d5:39:34:7f:7b:09:6c:
09:3b:c3:60:88:3c:14:95:29:f3:81:be:57:6e:da:8c:a6:5e:
97:81:b1:7e:d3:99:7a:52:5a:46:2e:a3:25:06:7f:de:98:1b:
7d:61:63:c0:91:32:44:c8:c5:46:4a:3e:11:98:3d:8c:d7:1d:
37:9d:89:8f:d6:ab:79:8a:2d:3d:2d:e6:2d:0d:d6:72:2e:57:
25:4c:65:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:48:24 2025 by rpki-client