Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.mft
File: 9_38M32M4OBe9_e3KvJ-thzUcDc.mft (raw, json)
Hash identifier: LXISNCpbM0MQfkZM3AGwEi9b4g7qjsTPWG/A921LDYk=
Subject key identifier: 3B:11:D7:56:FD:C8:34:4F:88:B5:E0:40:17:60:B6:43:A1:CD:66:01
Authority key identifier: F7:FD:FC:33:7D:8C:E0:E0:5E:F7:F7:B7:2A:F2:7E:B6:1C:D4:70:37
Certificate issuer: /CN=f7fdfc337d8ce0e05ef7f7b72af27eb61cd47037
Certificate serial: 0196759E890692925A0FD71885A09BFC55A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9_38M32M4OBe9_e3KvJ-thzUcDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.mft
Manifest number: 1513
Signing time: Sun 27 Apr 2025 05:00:46 +0000
Manifest this update: Sun 27 Apr 2025 05:00:46 +0000
Manifest next update: Mon 28 Apr 2025 05:00:46 +0000
Files and hashes: 1: 9_38M32M4OBe9_e3KvJ-thzUcDc.crl (hash: OJkS9ct6SBg5u0XobCY0uf+aEsoT49ovf4vFe5uv0Us=)
2: fCHzIX3PF5IX4vTpqhp12B4ANgE.roa (hash: 56hifj5pI9Tipd1DppPjnl4odiFdle6vhykV6J1DFck=)
3: g7wXivy3539LtXi_LoOdOIVbDx8.roa (hash: +5hEq5/dYKWbMKLOksJvPEMNRWQVyUVWOFEW1b0Bio8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9_38M32M4OBe9_e3KvJ-thzUcDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:89:06:92:92:5a:0f:d7:18:85:a0:9b:fc:55:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7fdfc337d8ce0e05ef7f7b72af27eb61cd47037
Validity
Not Before: Apr 27 05:00:46 2025 GMT
Not After : Apr 28 05:00:46 2025 GMT
Subject: CN=3b11d756fdc8344f88b5e0401760b643a1cd6601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:00:0f:45:51:e9:90:85:18:0e:f0:4c:77:15:
fa:be:ad:43:c0:db:37:10:34:a9:cc:cc:61:8f:71:
a8:1a:1d:ce:81:d7:15:5a:8d:9b:6e:86:10:52:e3:
f0:ac:6d:77:c1:25:54:c3:87:2a:33:55:b7:33:e4:
59:ba:0b:73:a4:0a:e4:59:1d:cd:8f:56:d5:24:95:
a9:87:bf:d6:79:b1:ad:cd:99:37:58:7a:3e:ac:d7:
1a:55:e4:03:db:0f:a6:97:ef:fb:81:93:e9:22:f0:
ec:79:79:e8:d5:91:c8:3c:1e:e8:74:de:8c:3b:f9:
66:85:e9:e3:6b:5f:3d:90:4e:3a:92:21:27:8e:46:
3b:13:52:82:07:5a:cc:00:08:3e:4c:d8:bf:db:ec:
0f:c4:b3:57:fd:45:52:c5:d4:79:d4:5c:36:3a:1e:
2c:3b:49:8d:da:42:89:f3:e0:70:24:3d:46:0e:c8:
6e:54:7d:1a:64:1f:86:6b:d3:1f:3d:42:51:05:05:
47:c4:f8:30:53:44:4b:03:47:cf:36:73:11:e7:25:
94:21:38:da:15:7f:6c:39:5b:34:6f:60:93:34:7d:
36:d1:25:42:dd:57:39:b2:04:b7:45:d8:d7:ca:ec:
f1:40:5f:14:22:44:14:be:09:21:03:5a:93:a4:fa:
48:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:11:D7:56:FD:C8:34:4F:88:B5:E0:40:17:60:B6:43:A1:CD:66:01
X509v3 Authority Key Identifier:
keyid:F7:FD:FC:33:7D:8C:E0:E0:5E:F7:F7:B7:2A:F2:7E:B6:1C:D4:70:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9_38M32M4OBe9_e3KvJ-thzUcDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:60:44:07:ae:c5:b2:f4:c9:87:4b:2f:86:1f:7d:0f:e3:44:
36:e7:ea:5d:14:0d:09:09:28:e3:d0:44:c3:23:1c:6a:c2:3e:
39:70:ef:67:e2:be:88:e5:8e:cd:cc:9d:e4:65:43:d4:5e:c7:
9b:94:d1:d2:c5:0a:b7:6f:72:f5:c1:a3:dc:d5:26:30:f5:1e:
6c:8e:f6:0e:ee:ff:7a:72:f7:a6:a9:44:bd:c2:13:1a:7a:d6:
64:0d:e9:a5:64:7e:32:7a:9d:43:ed:2e:ff:0d:04:c8:d8:f6:
aa:c1:7b:7c:7b:ed:26:b7:5e:28:14:21:d0:72:7f:39:19:4b:
91:52:84:fd:cb:08:70:dd:68:d4:64:69:05:3e:44:8d:a1:2d:
21:bc:84:38:6c:62:9f:a2:ea:e7:93:f1:71:22:e5:bd:70:89:
ad:7c:f5:92:e6:d2:44:4b:42:2b:ba:d5:68:17:df:6c:82:75:
3a:cb:13:e0:ba:60:c6:4b:37:f6:14:31:50:9a:25:38:5d:bf:
30:1a:b1:d5:b2:ee:8e:fb:b3:47:74:bd:f8:79:23:58:05:72:
b9:f4:02:6e:71:3e:a5:04:5a:6f:1a:57:58:90:7f:a1:9e:fe:
00:4b:7d:d7:7f:33:9e:04:46:40:19:07:9d:4c:fa:7b:56:d2:
86:26:7a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:37:30 2025 by rpki-client