Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft
File: 9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft (raw, json)
Hash identifier: O5AeX9b14ksrQuyXp6UvJ1M7wVGdrTvfCdYkLVlHKVw=
Subject key identifier: 6D:99:C3:AE:87:46:E3:82:51:6B:E9:3E:40:48:9A:2F:D0:64:E9:F7
Authority key identifier: F4:2B:08:4F:9B:9C:98:CF:D9:04:10:B8:30:5C:C6:CB:46:DC:CE:D8
Certificate issuer: /CN=f42b084f9b9c98cfd90410b8305cc6cb46dcced8
Certificate serial: 0196790D442CE6A26303FF6AFBC6E4D29173
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9CsIT5ucmM_ZBBC4MFzGy0bcztg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft
Manifest number: 1512
Signing time: Sun 27 Apr 2025 21:00:34 +0000
Manifest this update: Sun 27 Apr 2025 21:00:34 +0000
Manifest next update: Mon 28 Apr 2025 21:00:34 +0000
Files and hashes: 1: 9CsIT5ucmM_ZBBC4MFzGy0bcztg.crl (hash: 5jO+1TcIymOuR8ug8i5HwJprt1P1KAQpwWlN6TpddUU=)
2: OB1GsVdt7iCzhWhmgirUwJgGaak.roa (hash: HNRDkQU9zd4iAZZaAQcAxCYiJZDSBKH3pYjhla6LGLs=)
3: WMejWLM-fXx9J5hQgJ4TNGxlL40.roa (hash: 9oO47gALmpiotO1VgFePsYnaYk2I9wrq424pEV3SiMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9CsIT5ucmM_ZBBC4MFzGy0bcztg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:0d:44:2c:e6:a2:63:03:ff:6a:fb:c6:e4:d2:91:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f42b084f9b9c98cfd90410b8305cc6cb46dcced8
Validity
Not Before: Apr 27 21:00:34 2025 GMT
Not After : Apr 28 21:00:34 2025 GMT
Subject: CN=6d99c3ae8746e382516be93e40489a2fd064e9f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3a:7e:3d:6b:c7:94:5b:f4:88:d2:23:85:ad:
5f:24:8d:e6:fb:3b:41:33:5f:a6:57:bf:d6:be:90:
df:b3:1a:35:09:15:8a:46:51:05:2d:29:66:78:a5:
c5:5b:6c:11:5c:c6:78:4f:80:dc:27:2a:30:8d:93:
ad:53:0b:e0:c9:9d:e1:bf:13:ea:62:3f:94:10:c9:
9d:17:ba:9d:76:31:75:b7:c8:84:cf:be:58:27:2c:
44:99:62:12:4f:f5:3d:84:9e:34:be:bc:d6:34:39:
b4:8a:f4:4e:b8:14:ce:f0:b1:f0:7a:ea:d2:f2:2c:
12:52:3b:be:d8:7c:dd:4f:1c:da:75:92:d7:82:ad:
d9:e3:fc:f9:ab:81:79:ab:bb:2f:7d:af:76:98:99:
d1:72:77:c8:31:c0:bb:c7:b7:ed:60:d8:9c:07:75:
a8:06:1c:81:27:60:41:e8:2b:53:3e:45:86:b0:d2:
f6:90:33:30:7e:dc:be:ff:51:a7:7a:a0:4c:83:74:
90:05:66:89:1c:de:9f:d4:d8:3d:2a:c2:84:7a:03:
6e:3d:61:7a:63:03:d5:25:4e:3c:ba:39:7b:06:4d:
7d:52:52:84:b1:77:8f:0c:bb:90:39:8d:db:04:c6:
32:01:5c:94:63:3b:9c:9e:c1:fa:46:b9:c7:c4:61:
cf:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:99:C3:AE:87:46:E3:82:51:6B:E9:3E:40:48:9A:2F:D0:64:E9:F7
X509v3 Authority Key Identifier:
keyid:F4:2B:08:4F:9B:9C:98:CF:D9:04:10:B8:30:5C:C6:CB:46:DC:CE:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9CsIT5ucmM_ZBBC4MFzGy0bcztg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:37:18:e9:c1:17:8b:c5:e9:0e:81:3e:8a:f2:32:ee:00:3c:
79:d6:ba:ae:58:e1:dd:bc:71:49:75:70:f3:02:16:fa:91:36:
85:b2:b7:ec:00:8d:e3:ad:01:3a:b5:e2:21:26:c7:0a:29:a8:
a5:c2:7b:a1:c9:e1:6b:dc:c0:4c:e4:50:70:10:64:18:76:f0:
43:c7:4d:40:da:4e:8c:1f:48:5e:09:77:ac:e7:00:bf:4a:d0:
2f:d3:59:35:17:b4:69:3d:72:bf:2f:5d:70:14:ec:b0:1f:34:
a1:ea:c9:f6:9b:66:bd:4f:c2:87:eb:72:76:25:16:89:34:9c:
f0:92:67:38:30:3e:40:b8:44:44:c1:3f:5b:ec:74:c1:f3:df:
8b:3b:66:a7:32:df:67:ad:2c:3b:2b:6c:e1:0c:ae:b3:8c:fd:
76:3d:27:46:50:88:21:46:9c:f1:dd:da:42:10:06:4a:b0:d7:
2b:bf:e1:2a:eb:26:2e:28:dd:e8:62:27:74:d1:c4:56:9f:a4:
11:25:99:e0:c6:5c:86:82:6f:ab:8e:e9:c5:b2:73:38:05:5d:
4d:5a:98:e1:76:fb:dc:21:50:2a:71:dc:b4:44:d9:57:a9:26:
ff:5c:be:01:ff:b4:3d:dc:a1:c6:69:1e:b2:b1:a1:0b:60:83:
bd:92:1c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:38:31 2025 by rpki-client