Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.mft
File: S9H1DfJj_lCfxd6cWkc6KOOBJjk.mft (raw, json)
Hash identifier: 0HYsZ6VFos2RSfzoXadcNJtfGcLvNGdY4jFvPHDk0qY=
Subject key identifier: 8B:C3:59:C6:7A:44:FA:1A:D1:A2:5A:55:44:B8:D1:C3:42:A8:5B:53
Authority key identifier: 4B:D1:F5:0D:F2:63:FE:50:9F:C5:DE:9C:5A:47:3A:28:E3:81:26:39
Certificate issuer: /CN=4bd1f50df263fe509fc5de9c5a473a28e3812639
Certificate serial: 0196760CFA44B5EA778D69D46210D287D43F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9H1DfJj_lCfxd6cWkc6KOOBJjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.mft
Manifest number: 107E
Signing time: Sun 27 Apr 2025 07:01:24 +0000
Manifest this update: Sun 27 Apr 2025 07:01:24 +0000
Manifest next update: Mon 28 Apr 2025 07:01:24 +0000
Files and hashes: 1: S9H1DfJj_lCfxd6cWkc6KOOBJjk.crl (hash: FBn97Dnk31MqvRy9WKTIbKw8XToJgj3jzDbR34wdhS8=)
2: ejjlASXkUcRdnr6-VdCF2Mgcm40.roa (hash: vzr2w6+iif68HBa0Udg4Ex8g0igxmMWxnsZRKLXilEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/S9H1DfJj_lCfxd6cWkc6KOOBJjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:fa:44:b5:ea:77:8d:69:d4:62:10:d2:87:d4:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bd1f50df263fe509fc5de9c5a473a28e3812639
Validity
Not Before: Apr 27 07:01:24 2025 GMT
Not After : Apr 28 07:01:24 2025 GMT
Subject: CN=8bc359c67a44fa1ad1a25a5544b8d1c342a85b53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e0:13:1e:25:ab:c0:8e:23:e2:de:24:12:58:
4a:f2:12:e2:0d:82:fc:f5:56:42:43:1e:01:33:30:
50:eb:36:6d:c0:cd:a9:3d:77:33:f8:57:b6:f4:af:
dd:5e:55:47:09:93:7f:b1:6e:d3:75:9e:71:37:c2:
6d:72:73:50:70:aa:c9:cf:03:42:85:5c:b9:03:68:
e4:fb:ef:ae:3a:90:8d:71:be:dd:ba:41:95:38:3e:
f6:dd:73:a7:c5:bb:4f:59:65:22:07:b0:93:9c:38:
fe:25:cb:84:8e:d5:e9:22:29:18:29:ac:33:ac:d0:
05:8c:a0:e1:50:e4:97:f9:9e:9b:4e:05:e2:f0:14:
60:f4:d7:e1:b6:58:16:de:c1:71:3e:fc:6c:8b:ee:
13:36:37:32:8c:d9:9f:de:db:74:dc:be:4c:ba:de:
38:56:ba:72:c0:70:a9:ae:33:f1:1a:06:8a:9b:df:
36:5c:44:ee:12:fb:cd:3c:34:af:74:98:2b:db:e3:
ac:86:bd:7d:f1:c5:8d:68:30:9f:e8:77:9a:f2:68:
50:08:d4:9a:4b:71:cb:37:81:53:55:d2:06:38:79:
b7:9d:e6:aa:82:ac:3f:18:21:65:69:74:ff:29:c4:
39:7a:9f:75:dc:ba:7c:32:f6:ce:eb:ad:fa:79:cf:
13:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:C3:59:C6:7A:44:FA:1A:D1:A2:5A:55:44:B8:D1:C3:42:A8:5B:53
X509v3 Authority Key Identifier:
keyid:4B:D1:F5:0D:F2:63:FE:50:9F:C5:DE:9C:5A:47:3A:28:E3:81:26:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9H1DfJj_lCfxd6cWkc6KOOBJjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:ad:87:96:1f:a1:74:b3:b4:2d:b8:dc:9b:50:fc:0f:48:9d:
c9:ea:9b:8a:a7:d4:a2:bf:04:92:2c:98:a7:85:1b:57:de:3e:
11:99:25:4a:4f:be:86:c7:02:34:39:93:d8:67:92:46:ea:92:
76:db:38:40:dd:80:9a:45:c3:7a:66:ba:38:9c:6d:cc:20:15:
a7:13:b0:ea:5b:aa:18:55:b5:0a:4d:10:a6:48:71:1e:52:9d:
e0:d7:f9:f2:3d:11:9d:6d:8d:57:68:6d:5f:a0:2f:5f:f8:c8:
32:b6:35:12:a6:2e:2f:53:a9:a9:72:ec:2f:40:19:51:5a:df:
67:8f:57:4e:da:36:a3:1a:d5:ba:72:00:f9:50:80:c3:9d:6f:
ed:7f:ef:48:d0:01:f2:1e:5c:84:24:00:65:1b:e6:f9:31:6a:
22:0f:06:92:cf:6c:c1:80:51:84:57:8d:34:06:3a:37:cd:bb:
6a:8f:a7:39:55:33:58:fc:2c:93:d1:f6:26:20:e7:c5:fc:b3:
1b:65:99:4b:f9:8a:e0:eb:17:6d:57:eb:65:46:83:1f:a1:1b:
6e:bd:8f:f0:30:12:5b:a7:fb:4d:59:6e:96:b5:23:56:9c:38:
02:35:43:c7:5b:23:80:a5:5c:2a:5a:e0:ec:ef:db:51:2d:c6:
9e:71:2e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:18:46 2025 by rpki-client