Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft
File: 9lQZ43AKNrorA5Bsn49NLf2EgHA.mft (raw, json)
Hash identifier: 4Bsvq6n2D5gVxz/woMcQuIxwSRwyUyx75dA+79jKacQ=
Subject key identifier: 63:DC:D5:2F:BF:1C:9D:D3:02:76:31:D3:83:20:01:8A:BB:32:0A:E4
Authority key identifier: F6:54:19:E3:70:0A:36:BA:2B:03:90:6C:9F:8F:4D:2D:FD:84:80:70
Certificate issuer: /CN=f65419e3700a36ba2b03906c9f8f4d2dfd848070
Certificate serial: 0196A051E032714AEF58E912D02FC005DDEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lQZ43AKNrorA5Bsn49NLf2EgHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft
Manifest number: 0C40
Signing time: Mon 05 May 2025 12:00:42 +0000
Manifest this update: Mon 05 May 2025 12:00:42 +0000
Manifest next update: Tue 06 May 2025 12:00:42 +0000
Files and hashes: 1: 9lQZ43AKNrorA5Bsn49NLf2EgHA.crl (hash: e9U8g59g0HE9XH0BIe2QER2S5nlA2v78/pfDue4FVAQ=)
2: khAk69GaviX3ISVPskdgmXYxHg0.roa (hash: iZg+JNU8yAUj+GbVfYYrGDVbFREqgvj716gjoOSNlMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9lQZ43AKNrorA5Bsn49NLf2EgHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:51:e0:32:71:4a:ef:58:e9:12:d0:2f:c0:05:dd:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f65419e3700a36ba2b03906c9f8f4d2dfd848070
Validity
Not Before: May 5 12:00:42 2025 GMT
Not After : May 6 12:00:42 2025 GMT
Subject: CN=63dcd52fbf1c9dd3027631d38320018abb320ae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5e:db:cf:95:31:e1:ff:49:66:fd:a0:17:05:
e9:d6:7a:6a:ec:4c:7f:05:8a:9d:bb:f5:4e:4e:da:
da:cb:be:c4:29:f4:8f:fd:a7:f3:0d:31:c1:9e:39:
7f:5e:ab:6c:14:9a:f3:41:dd:dd:16:45:ca:72:df:
8e:6f:0f:d6:ee:a3:23:04:d8:0f:d9:54:9a:7b:2c:
df:a8:58:b5:65:79:08:b3:3e:05:82:57:17:72:38:
a9:53:5a:06:65:ab:78:7a:f4:d9:62:26:5c:3c:11:
54:bc:aa:92:18:46:16:fb:02:23:69:a7:26:5d:02:
93:c1:46:49:58:8d:ce:1b:69:96:46:0e:e3:3c:41:
03:7f:19:83:4d:83:38:18:b9:04:d6:3e:b1:37:f6:
bd:ee:97:28:7e:13:c9:41:49:08:9e:fc:a3:7f:41:
13:6d:9d:22:5b:16:47:c6:8f:ef:9b:b7:aa:56:1d:
4b:b0:75:fb:10:17:31:f4:34:41:4a:18:2b:6f:f7:
36:39:11:66:73:26:15:90:d7:c1:87:3a:20:6b:14:
77:7d:b8:a8:cb:57:f3:d8:03:27:eb:e8:24:e5:d5:
66:18:d2:dc:1d:30:96:df:c9:ba:7c:c9:c8:4d:de:
8f:27:20:e1:f5:90:2a:df:17:aa:f2:5e:5d:e0:08:
36:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:DC:D5:2F:BF:1C:9D:D3:02:76:31:D3:83:20:01:8A:BB:32:0A:E4
X509v3 Authority Key Identifier:
keyid:F6:54:19:E3:70:0A:36:BA:2B:03:90:6C:9F:8F:4D:2D:FD:84:80:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lQZ43AKNrorA5Bsn49NLf2EgHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:f6:a1:01:c6:8b:38:2e:56:32:a1:c1:75:3c:b6:12:8f:ce:
80:8a:08:b4:0f:36:ff:61:06:f6:f3:e3:15:1d:13:71:df:bc:
0a:2a:c2:b6:7e:3e:e4:17:bb:66:a7:16:0f:03:81:c6:1a:1c:
cc:aa:94:08:0b:84:26:63:6c:f3:8b:4f:85:cb:be:78:c8:52:
d8:ac:d8:9a:3b:3f:5c:50:a0:cd:68:f5:6c:a0:e7:54:3d:79:
6f:e8:2c:de:3d:e3:d7:f5:2b:d5:7c:8f:6f:e9:47:10:d4:3f:
0b:24:65:da:5e:1a:d5:2d:ef:2b:d7:5f:e7:ba:5e:50:d5:ee:
78:cf:67:63:6d:a6:33:00:c0:7f:2b:86:c8:82:20:8d:0f:a4:
c8:aa:1c:78:12:07:0e:32:7a:ad:7e:5c:f6:3e:b8:ee:e0:f5:
fd:7a:e6:24:70:a4:8a:5c:e6:a8:16:56:4b:2e:f3:15:c5:a4:
08:de:c4:a7:57:c9:31:e9:31:9b:6c:d9:8c:ea:80:53:c9:51:
35:b9:f3:c8:e6:03:34:a7:30:b9:f4:55:b3:11:88:ef:48:27:
5c:4a:5a:28:2a:2b:c8:a9:94:9a:71:29:79:87:2b:b1:80:2e:
7e:81:0c:7b:2c:84:92:ec:a5:91:15:5b:10:be:c4:bf:07:27:
cc:e0:38:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 16:51:27 2025 by rpki-client