Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.mft
File: 9kixVYLTS9UXCp3RO4EyW6uuXjo.mft (raw, json)
Hash identifier: ZFDkB+chkpAYlxhWtVRqemz+r+n7MNduADciVxDVy3E=
Subject key identifier: 2C:33:F4:8F:CC:10:BC:11:C9:BB:F4:0C:87:93:16:83:87:51:2B:2D
Authority key identifier: F6:48:B1:55:82:D3:4B:D5:17:0A:9D:D1:3B:81:32:5B:AB:AE:5E:3A
Certificate issuer: /CN=f648b15582d34bd5170a9dd13b81325babae5e3a
Certificate serial: 019675672C9B9FA348B957523571B09BDA13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9kixVYLTS9UXCp3RO4EyW6uuXjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.mft
Manifest number: 150F
Signing time: Sun 27 Apr 2025 04:00:17 +0000
Manifest this update: Sun 27 Apr 2025 04:00:17 +0000
Manifest next update: Mon 28 Apr 2025 04:00:17 +0000
Files and hashes: 1: 9kixVYLTS9UXCp3RO4EyW6uuXjo.crl (hash: hRDYJWp4cj1nKxDlje/gXTYEaVbV1Rzu0DT5Mn7D0Ac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9kixVYLTS9UXCp3RO4EyW6uuXjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:67:2c:9b:9f:a3:48:b9:57:52:35:71:b0:9b:da:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f648b15582d34bd5170a9dd13b81325babae5e3a
Validity
Not Before: Apr 27 04:00:17 2025 GMT
Not After : Apr 28 04:00:17 2025 GMT
Subject: CN=2c33f48fcc10bc11c9bbf40c8793168387512b2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:85:c7:76:63:89:74:cf:e0:36:bb:ab:36:ea:
4c:5a:83:af:ab:1c:e5:31:14:7d:32:68:73:92:3d:
1c:74:09:7c:26:da:6c:b9:a9:c0:09:1d:98:4a:25:
34:e6:f1:d4:c3:1d:79:f3:28:3a:72:49:ea:f5:d4:
58:dc:95:67:a0:06:ec:b0:bf:2d:9a:43:07:c7:fd:
5d:2e:7f:dc:09:0d:cd:93:ac:d0:7f:0f:c8:7e:83:
c6:19:15:14:67:15:9d:74:06:fa:40:5b:a4:54:82:
d1:2e:01:0b:bb:f8:ab:6d:de:2f:d0:d7:36:d1:06:
ec:bf:38:1a:38:88:4c:8e:d0:12:b7:f5:96:73:1d:
bb:52:29:ec:12:e1:31:10:34:4a:2d:1e:60:37:2e:
ad:02:83:12:01:dc:ac:b3:c8:87:ef:09:79:54:ba:
bb:7e:6b:8b:23:d6:d1:0e:5e:97:ce:98:df:d9:fa:
86:60:d5:ee:c4:ce:4e:6c:3c:72:44:9d:42:dd:0b:
be:3f:9b:d0:32:6c:ec:d8:2d:f7:39:e3:8f:67:f6:
09:44:65:84:36:f5:9b:62:90:21:b7:77:de:e4:58:
16:b3:c8:ff:a3:d8:0d:9d:a3:41:0d:22:3f:33:e4:
d5:e8:c2:6e:d5:c2:9a:56:0c:d9:ad:97:e4:98:27:
a9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:33:F4:8F:CC:10:BC:11:C9:BB:F4:0C:87:93:16:83:87:51:2B:2D
X509v3 Authority Key Identifier:
keyid:F6:48:B1:55:82:D3:4B:D5:17:0A:9D:D1:3B:81:32:5B:AB:AE:5E:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kixVYLTS9UXCp3RO4EyW6uuXjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:b9:6a:bd:ea:19:36:04:14:ed:cc:dd:36:6e:d9:0c:66:68:
bf:4a:ca:82:d1:5b:85:ad:6b:80:0a:9b:ff:f7:3b:06:64:f9:
96:4f:69:77:2f:48:1b:70:f5:3d:73:3c:e7:8c:01:18:14:4b:
44:9f:bd:57:a4:e6:7f:42:6a:e1:31:b2:bd:da:8e:88:1f:f4:
26:aa:5f:6d:8f:9f:55:39:20:f1:cd:6c:02:84:ad:82:ad:a3:
48:fe:0d:ae:51:9d:85:5f:78:45:03:a3:34:e4:08:fe:02:53:
15:2c:c1:6b:62:22:b5:7a:11:b9:ba:31:75:f0:4d:4b:bd:39:
c5:22:b1:e7:e7:2e:80:43:78:8c:00:28:c8:3b:82:8f:94:10:
5d:c4:d8:cf:22:1f:5d:aa:99:3a:bc:44:df:26:c4:0f:3a:cc:
68:a4:a7:89:73:90:b4:5a:ce:ea:6e:f4:13:89:b5:a5:bb:8d:
60:92:ff:26:c2:64:6a:cf:cd:32:68:8e:ae:3c:24:28:0e:b0:
4b:f8:2a:a0:d1:a2:e1:17:bc:a2:91:e3:6c:6a:d9:c4:6e:05:
35:04:1f:4f:2c:63:7b:fd:6e:78:77:16:3c:4a:8b:6f:d4:82:
b6:73:34:1f:e8:4b:ea:54:bb:77:4e:3c:01:e8:75:b5:d3:8a:
3b:10:f6:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:53:23 2025 by rpki-client