Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.mft
File: 9n1n2ohguDIsTyBNYRsAYTjxs5E.mft (raw, json)
Hash identifier: /2k5xu0NuNasfkPggNHhFvMBdGnFP5gcuS0N+hHnl1U=
Subject key identifier: 9E:1D:D5:CF:9C:CB:3F:07:1A:9E:DF:62:2C:97:95:18:61:C1:5F:CF
Authority key identifier: F6:7D:67:DA:88:60:B8:32:2C:4F:20:4D:61:1B:00:61:38:F1:B3:91
Certificate issuer: /CN=f67d67da8860b8322c4f204d611b006138f1b391
Certificate serial: 01968058F20C1F175C35891A163E4C29DA12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9n1n2ohguDIsTyBNYRsAYTjxs5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.mft
Manifest number: 0213
Signing time: Tue 29 Apr 2025 07:00:34 +0000
Manifest this update: Tue 29 Apr 2025 07:00:34 +0000
Manifest next update: Wed 30 Apr 2025 07:00:34 +0000
Files and hashes: 1: 9n1n2ohguDIsTyBNYRsAYTjxs5E.crl (hash: FzmBoDLVcUuZMGmo9J0153p8WekA/r2Sf9MWuWrG34U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/9n1n2ohguDIsTyBNYRsAYTjxs5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 07:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:58:f2:0c:1f:17:5c:35:89:1a:16:3e:4c:29:da:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f67d67da8860b8322c4f204d611b006138f1b391
Validity
Not Before: Apr 29 07:00:34 2025 GMT
Not After : Apr 30 07:00:34 2025 GMT
Subject: CN=9e1dd5cf9ccb3f071a9edf622c97951861c15fcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a7:e0:ef:2f:36:9f:81:83:01:b1:5f:68:37:
c5:ff:53:c1:c2:be:52:e8:ff:bc:91:b9:3d:cb:ca:
82:56:d8:53:a1:50:35:a4:59:2e:bf:77:dc:1f:a9:
92:66:a1:a7:4b:46:1b:27:8e:e6:ff:91:6e:82:0c:
cf:fd:43:97:94:5f:14:3f:d2:95:c6:42:7f:eb:62:
e9:82:b1:6c:09:d4:ba:07:35:09:d1:ce:31:53:b9:
95:b3:7b:2a:26:c4:4f:34:3d:ca:93:4f:28:ec:0f:
be:48:0a:9c:0a:e0:51:db:24:77:19:c9:14:68:47:
ea:d0:1d:dd:a5:74:e8:aa:ac:5a:30:a1:4c:26:12:
b0:5b:b2:a3:61:84:1c:99:f5:13:ef:81:7d:a6:78:
58:1c:11:84:a6:d6:18:16:ae:07:42:c5:d9:68:92:
32:5b:7a:c9:cc:8b:48:79:b1:e5:b1:c3:c5:62:4e:
47:6c:14:29:84:ca:e1:23:09:25:34:4d:cc:37:b8:
e6:68:9f:ed:ea:20:8a:3c:0e:3d:5c:0b:33:3f:a0:
f4:f6:8d:65:b4:91:6e:b1:95:37:ea:75:4b:59:fa:
eb:56:3e:c7:03:98:f4:c0:be:26:6f:f6:47:f9:4e:
3e:8d:54:68:b8:fb:64:b6:4b:89:8e:2b:28:a8:ea:
67:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:1D:D5:CF:9C:CB:3F:07:1A:9E:DF:62:2C:97:95:18:61:C1:5F:CF
X509v3 Authority Key Identifier:
keyid:F6:7D:67:DA:88:60:B8:32:2C:4F:20:4D:61:1B:00:61:38:F1:B3:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9n1n2ohguDIsTyBNYRsAYTjxs5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:47:02:7f:75:8a:5c:a3:3b:75:55:26:be:f7:ae:96:72:97:
75:e1:0c:81:08:81:89:d2:33:0d:cb:23:bf:39:da:35:34:fe:
ba:98:93:ee:11:40:72:b2:f6:19:11:63:86:10:65:bd:ad:a6:
90:16:97:f8:07:e6:b3:c3:47:09:12:d0:34:32:57:64:65:0d:
c7:1a:86:d9:67:0b:48:58:7a:16:a0:22:4a:de:0a:51:e2:1b:
70:08:30:85:67:7f:03:19:fb:00:8a:43:dd:05:ca:d3:9e:04:
02:89:0b:81:5b:a1:e2:1b:cf:ec:64:7f:e7:9e:e6:87:e8:5e:
a3:4e:5a:d6:ae:f8:6f:b8:05:50:e2:ca:7d:9f:ce:1d:9d:b1:
bc:1c:c2:d3:5f:52:2c:d8:97:35:fe:ad:a8:21:65:07:cd:7f:
40:b8:db:47:24:2a:cb:d0:f4:25:90:78:d9:70:6f:c6:e3:dd:
70:b3:a3:8d:29:67:5e:1a:1a:22:b8:0f:dd:8a:7a:cc:1d:26:
72:e5:7d:c7:fc:94:ea:c8:ae:c7:82:a5:10:03:6a:d7:3f:3a:
bd:15:79:fe:95:fb:1b:34:54:3a:0b:d2:5c:d3:92:3f:1c:cb:
3c:e3:7e:68:78:9b:bc:05:9b:ab:00:e5:02:c2:c6:c0:80:ad:
76:5e:13:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:31:51 2025 by rpki-client