Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft
File: 9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft (raw, json)
Hash identifier: QGJHs2HTHPIkLRYQHGuNUAQpi5P5clz0GYp5DUoM/4Y=
Subject key identifier: BF:C3:19:F3:F9:1A:2F:F7:FC:94:AD:58:65:0F:D8:7D:F3:6D:2A:BE
Authority key identifier: F7:E6:79:E5:8E:4B:8B:F6:3E:95:00:2B:54:BE:47:1D:63:4B:95:06
Certificate issuer: /CN=f7e679e58e4b8bf63e95002b54be471d634b9506
Certificate serial: 019677FAFCFF477E90D5301CADAECDBD601C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft
Manifest number: 14F9
Signing time: Sun 27 Apr 2025 16:00:59 +0000
Manifest this update: Sun 27 Apr 2025 16:00:59 +0000
Manifest next update: Mon 28 Apr 2025 16:00:59 +0000
Files and hashes: 1: 9-Z55Y5Li_Y-lQArVL5HHWNLlQY.crl (hash: CLhrKo1FoslHyrNZkG3q5eGio8/Vm4aH+e+hvtRXDLA=)
2: SJe0yiKrFFgre-LwlA373na16-M.roa (hash: W+lZ86QtGfH27JSeGBvOgaus0tZU6nh0IODmn6TYevo=)
3: rXYQihXZcHzDYDPfOCw2uf0QxOs.roa (hash: mgxpGPq3j8kcIVwK/lsmtpT+En8AA3E9GG8LueVY7g4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fa:fc:ff:47:7e:90:d5:30:1c:ad:ae:cd:bd:60:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7e679e58e4b8bf63e95002b54be471d634b9506
Validity
Not Before: Apr 27 16:00:59 2025 GMT
Not After : Apr 28 16:00:59 2025 GMT
Subject: CN=bfc319f3f91a2ff7fc94ad58650fd87df36d2abe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fa:99:bb:b6:04:cb:58:36:4d:8d:ac:6c:14:
9f:cc:c4:9b:ad:63:6b:a7:22:c3:bb:02:1d:6d:e8:
f6:6c:0d:ce:bc:2f:db:41:f3:e1:5d:b0:e1:19:34:
4c:23:64:ef:88:4c:98:8c:71:a4:cc:78:95:28:27:
8e:e6:44:0b:3d:73:63:8c:35:ed:3f:b3:42:af:e5:
03:89:9d:24:96:d8:05:b8:3a:3b:49:f5:4a:b9:8b:
c3:a9:fb:e4:a3:6f:51:ff:ab:4d:66:62:70:8d:e1:
b5:b4:56:07:ca:70:2d:cd:29:0d:38:3f:6a:d3:28:
5a:59:b6:46:e6:bc:a0:0d:9c:32:df:21:b9:ad:e8:
b9:e4:d8:3b:24:49:8c:6f:6b:ec:74:83:a1:34:1b:
24:4f:51:e1:5a:00:53:d4:e3:09:da:58:1d:a6:f8:
52:14:16:d3:01:d3:17:62:a9:53:a2:dd:6e:a6:28:
20:33:59:55:e6:c8:1f:f1:32:eb:53:3a:39:c8:3b:
30:72:88:8f:ce:ee:12:bb:20:61:06:0b:5c:9c:3d:
10:d5:43:25:81:5a:e4:49:ed:1c:6d:60:b5:b6:34:
6b:8a:d3:f7:5b:6c:df:08:94:62:7b:f5:fc:be:66:
bd:bb:9b:82:ad:ee:b5:9c:80:a7:ce:ba:cc:8c:a3:
a5:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:C3:19:F3:F9:1A:2F:F7:FC:94:AD:58:65:0F:D8:7D:F3:6D:2A:BE
X509v3 Authority Key Identifier:
keyid:F7:E6:79:E5:8E:4B:8B:F6:3E:95:00:2B:54:BE:47:1D:63:4B:95:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:7e:81:5f:87:1c:68:41:9c:72:d5:fc:77:98:97:fa:05:c4:
73:77:62:2a:cb:3c:f4:98:59:42:4d:c1:7b:a8:bd:54:9b:5b:
12:56:c5:8f:ee:01:36:aa:0f:40:f6:2f:94:c0:e6:d2:39:0c:
82:0e:a2:f0:4d:aa:4b:32:0e:2f:63:2d:fc:34:e9:cf:e6:33:
1f:d6:de:72:56:14:6d:59:47:36:12:ca:c4:af:67:a2:da:e6:
61:3c:1c:da:ab:5b:c5:4f:b2:33:3d:d1:35:01:b1:32:f9:fa:
2c:10:7d:cc:c4:99:dc:59:ff:e6:18:20:6d:87:a5:fd:fa:4e:
36:5e:92:ee:20:0d:c7:70:36:69:19:fe:93:1d:c5:5f:26:f1:
66:ae:82:7d:0b:2d:33:9f:18:bb:a8:3a:e8:6f:9c:84:93:a4:
43:92:95:fd:2c:1a:d8:b2:1d:a9:53:48:9e:d6:2e:b7:fb:ec:
a1:ea:aa:2c:e5:85:64:af:bb:07:65:93:c3:4c:11:f2:12:71:
6d:1c:08:7e:cb:f1:c2:53:f4:57:39:94:1b:b9:6a:e1:67:8e:
e2:04:52:48:fd:dc:da:d7:c1:2a:0f:15:8c:33:70:1f:03:ee:
73:5f:85:d8:91:0d:51:4c:70:df:8a:e6:96:f9:eb:cc:a5:ce:
02:87:4d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:09:19 2025 by rpki-client