Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.mft
File: 9URgWW1tUyQB3jE9-JA2blN21gI.mft (raw, json)
Hash identifier: DGfK0mB/sTgRSMiDoTI99PPORibsFoFbTixNmGbTUtg=
Subject key identifier: 07:01:FC:6F:53:5C:65:AE:1D:4B:3A:17:FF:2A:74:91:68:10:AA:97
Authority key identifier: F5:44:60:59:6D:6D:53:24:01:DE:31:3D:F8:90:36:6E:53:76:D6:02
Certificate issuer: /CN=f54460596d6d532401de313df890366e5376d602
Certificate serial: 019685EDCAFD26919305239131EEA07C95AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9URgWW1tUyQB3jE9-JA2blN21gI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.mft
Manifest number: 04E9
Signing time: Wed 30 Apr 2025 09:01:15 +0000
Manifest this update: Wed 30 Apr 2025 09:01:15 +0000
Manifest next update: Thu 01 May 2025 09:01:15 +0000
Files and hashes: 1: 9URgWW1tUyQB3jE9-JA2blN21gI.crl (hash: 5saBOY8DNB7sJdMX460HU6J/r2ih06UmzR8bt+yHuMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9URgWW1tUyQB3jE9-JA2blN21gI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 09:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:ed:ca:fd:26:91:93:05:23:91:31:ee:a0:7c:95:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f54460596d6d532401de313df890366e5376d602
Validity
Not Before: Apr 30 09:01:15 2025 GMT
Not After : May 1 09:01:15 2025 GMT
Subject: CN=0701fc6f535c65ae1d4b3a17ff2a74916810aa97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7a:33:a1:24:1f:09:dd:88:1c:68:8b:31:d3:
94:d2:82:b1:66:c7:dc:54:04:65:86:7b:00:08:14:
11:ba:28:a2:48:5e:39:bb:2b:80:9c:13:56:c4:b2:
7b:fe:f0:36:d2:06:73:28:b7:c9:d5:7a:1f:7b:34:
0a:82:33:71:72:16:91:01:e2:61:d1:c7:50:d8:25:
a6:2f:4a:8b:eb:13:a9:0f:bc:41:e3:1c:cc:e8:f1:
57:de:d5:0b:34:eb:70:2f:45:45:c9:bb:1b:c1:b5:
c8:71:53:14:82:4c:b1:2e:ab:c4:62:b6:d3:fd:2d:
98:62:be:e9:db:ee:d2:01:15:b8:6f:55:b9:3f:38:
0b:ab:89:60:96:c0:77:c3:50:68:23:c8:b9:ce:a8:
ed:5a:45:d7:08:ff:e8:9a:ae:6c:67:9d:64:ec:52:
18:4e:64:89:f9:da:61:ad:8a:82:72:c2:fc:fa:fa:
54:91:c7:4a:21:a1:cb:d7:51:85:0e:96:5d:18:8f:
42:26:ed:1b:8a:2a:3d:4d:c8:d5:ad:38:37:50:bb:
cf:66:be:1b:09:26:b0:6d:99:f7:3c:ad:e3:bb:44:
91:5e:94:fe:a5:9b:9a:97:a9:af:87:8b:cd:e2:8a:
bf:d0:b6:8e:67:26:36:c5:4c:ed:65:b6:43:54:21:
6f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:01:FC:6F:53:5C:65:AE:1D:4B:3A:17:FF:2A:74:91:68:10:AA:97
X509v3 Authority Key Identifier:
keyid:F5:44:60:59:6D:6D:53:24:01:DE:31:3D:F8:90:36:6E:53:76:D6:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9URgWW1tUyQB3jE9-JA2blN21gI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:06:66:00:a1:0a:72:e3:18:cc:92:d9:b8:26:d0:a7:88:b3:
22:da:38:ff:ff:aa:b2:a3:e6:bd:0c:aa:e6:9b:fc:79:59:d6:
c3:61:1d:d4:b9:12:6c:eb:4a:8c:a5:25:3d:f1:ce:6f:ab:7c:
ab:2d:17:a1:94:da:72:e2:f7:58:06:d3:47:5f:40:d2:80:69:
3a:bf:94:35:aa:31:09:90:6d:fb:83:69:54:7b:06:b7:ab:a3:
7d:22:02:56:77:fb:4f:32:ad:62:9c:99:53:c8:70:b2:c2:ca:
a6:31:ee:20:b0:65:b3:12:45:19:52:d7:69:0d:0b:2a:a9:08:
fd:6f:17:46:d7:46:d7:fe:a6:69:19:cc:a7:8b:b0:8c:ff:6a:
1d:0e:5b:ac:4b:aa:f9:72:eb:ec:74:e1:35:2e:c6:85:ae:c3:
9e:c5:c7:a9:38:0c:75:81:2d:c5:b8:c3:c8:3c:72:e9:11:ea:
82:1e:35:7a:aa:89:a1:16:7c:62:c9:a0:28:c0:c8:e9:2a:b2:
c8:e8:15:f0:6a:74:c7:f5:76:52:bf:15:6d:b9:90:8a:77:e8:
12:84:c7:8d:95:8e:c8:22:2a:3e:53:1c:7c:96:84:32:88:fc:
10:b0:0f:75:2c:0e:90:06:a6:02:e1:9d:51:2c:7c:b3:cf:a9:
68:97:38:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 19:17:49 2025 by rpki-client