Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft
File: 9jiUfduJL186SKaa-XqPtSEDoNY.mft (raw, json)
Hash identifier: cgfcwwsy79a4wBIi34sC9boprMtEACgVs0nM80jkVuE=
Subject key identifier: DC:F7:83:FB:98:F7:BF:4F:DC:37:B7:1C:5A:1F:A7:21:95:87:50:5E
Authority key identifier: F6:38:94:7D:DB:89:2F:5F:3A:48:A6:9A:F9:7A:8F:B5:21:03:A0:D6
Certificate issuer: /CN=f638947ddb892f5f3a48a69af97a8fb52103a0d6
Certificate serial: 0196729D070F18919CF860050D0CA1381BCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9jiUfduJL186SKaa-XqPtSEDoNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft
Manifest number: 04C4
Signing time: Sat 26 Apr 2025 15:00:15 +0000
Manifest this update: Sat 26 Apr 2025 15:00:15 +0000
Manifest next update: Sun 27 Apr 2025 15:00:15 +0000
Files and hashes: 1: 67zW8t21om1pTXvyuagS0QWX12s.roa (hash: arwG9XkQ/+2dVagELL/zq8/mCR4dYaym8bqyA1sBk4A=)
2: 9jiUfduJL186SKaa-XqPtSEDoNY.crl (hash: 1zofxYcc5X7ulCbIaNgxfnvwLMQ4idzLFJrKrsY/zlA=)
3: cCgr35XwpirOi5T2NC-QhUoK0mY.roa (hash: aPFc2y18XhdFxhdVyRug+HbV1BK/ZT7q4hdqYZuvICQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9jiUfduJL186SKaa-XqPtSEDoNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:9d:07:0f:18:91:9c:f8:60:05:0d:0c:a1:38:1b:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f638947ddb892f5f3a48a69af97a8fb52103a0d6
Validity
Not Before: Apr 26 15:00:15 2025 GMT
Not After : Apr 27 15:00:15 2025 GMT
Subject: CN=dcf783fb98f7bf4fdc37b71c5a1fa7219587505e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:e1:81:5f:98:2c:61:01:b1:bd:f3:4a:b9:88:
5c:7d:5f:b2:cf:01:ad:dd:3e:39:32:61:dd:0b:c3:
d8:e6:40:a1:a6:c1:ee:9b:0e:a3:b0:ed:5f:7f:37:
f3:d8:a4:e1:80:63:8d:89:73:a3:52:76:24:4d:45:
d7:19:0a:43:1b:b7:d8:0b:46:14:ae:31:bf:06:23:
78:ec:e7:86:5f:98:f5:40:91:af:71:7a:dd:77:a8:
52:fd:04:8f:21:18:ec:af:12:82:83:80:8c:2c:ef:
aa:d8:4b:6c:07:ef:bc:dd:96:d9:bd:17:4c:3a:e8:
f0:95:da:2d:27:05:f7:1c:28:b8:23:80:f2:ae:bf:
cc:eb:cd:9c:2a:50:7d:09:94:71:c0:68:7f:4e:d6:
c3:c7:1b:c5:db:ee:cc:e0:82:16:68:e0:e6:af:44:
7e:5d:03:73:8a:5e:a2:7f:79:53:d6:fc:21:40:1f:
46:32:a7:0a:3d:5a:3d:0f:b7:5b:b6:12:db:91:09:
27:52:82:41:22:17:0a:37:bd:28:cf:f8:8f:c2:08:
1c:f7:6d:ff:7a:a0:05:72:33:6b:fc:d3:b8:42:8d:
57:74:38:97:4d:c4:0d:e7:fd:95:e3:d0:54:c0:fd:
9f:04:05:82:52:0e:d5:23:25:08:a0:e4:4c:a8:c8:
ed:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:F7:83:FB:98:F7:BF:4F:DC:37:B7:1C:5A:1F:A7:21:95:87:50:5E
X509v3 Authority Key Identifier:
keyid:F6:38:94:7D:DB:89:2F:5F:3A:48:A6:9A:F9:7A:8F:B5:21:03:A0:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9jiUfduJL186SKaa-XqPtSEDoNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:34:ff:e0:ab:57:c1:63:02:a0:1e:2b:47:9e:fc:b8:3d:90:
c1:dc:45:1d:a0:fa:ad:8e:74:e8:bf:54:e8:be:1d:e9:5f:92:
d5:97:9c:e2:56:1d:a5:39:21:ff:68:d2:14:29:c1:04:04:fc:
64:73:2d:81:1a:c4:3a:fb:19:81:1c:d9:36:88:61:09:80:f2:
01:1d:7f:de:7a:e8:e3:9e:b0:3f:9c:23:c9:59:5d:3c:52:c1:
d4:e5:61:d9:32:59:06:f4:6a:59:45:59:5a:43:cc:46:23:5c:
a3:78:7c:bb:90:dd:df:4d:29:eb:dd:2d:b6:d9:5a:30:99:fb:
89:05:82:33:2d:ab:a4:60:16:4f:36:d1:45:25:99:2d:9d:fc:
74:56:4f:8b:1a:86:16:63:61:a5:0c:c0:75:29:87:21:62:da:
f9:ea:47:44:db:4e:4d:e1:61:da:4c:c7:4a:8c:2d:a8:75:b9:
eb:cb:10:ee:f2:5b:1f:44:df:a2:07:67:d3:c3:60:30:a2:cc:
05:e8:10:27:8c:1e:24:8c:f8:db:05:84:83:bc:0c:6f:6a:5d:
01:65:5c:90:2b:e0:ab:e1:43:4f:a5:78:ce:2f:0f:f3:24:5d:
b7:86:ab:45:2a:ff:ee:51:5b:1c:84:11:8e:16:c9:66:4a:db:
3c:db:47:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:29:39 2025 by rpki-client