Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/a0bfd9-5fa7-448d-a514-8d1bac63efc6/1/9QtjTgs8aefagY27mc3jjqhJj3E.mft
File: 9QtjTgs8aefagY27mc3jjqhJj3E.mft (raw, json)
Hash identifier: opfIneb3Eq6VLsY5F1sxEKPklWUGnpvg0WuFboKteZs=
Subject key identifier: 5F:77:1E:82:04:81:E8:42:F5:40:3F:81:C5:63:A6:D6:69:EA:9B:B4
Authority key identifier: F5:0B:63:4E:0B:3C:69:E7:DA:81:8D:BB:99:CD:E3:8E:A8:49:8F:71
Certificate issuer: /CN=f50b634e0b3c69e7da818dbb99cde38ea8498f71
Certificate serial: 01967BD840A35B490FF06B6BF42355AAB9D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9QtjTgs8aefagY27mc3jjqhJj3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/a0bfd9-5fa7-448d-a514-8d1bac63efc6/1/9QtjTgs8aefagY27mc3jjqhJj3E.mft
Manifest number: 0A0A
Signing time: Mon 28 Apr 2025 10:01:31 +0000
Manifest this update: Mon 28 Apr 2025 10:01:31 +0000
Manifest next update: Tue 29 Apr 2025 10:01:31 +0000
Files and hashes: 1: 9QtjTgs8aefagY27mc3jjqhJj3E.crl (hash: zUQuETweBSv88iQTWIvIxHCW+hQycwmdjN2ST2Yv70g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/a0bfd9-5fa7-448d-a514-8d1bac63efc6/1/9QtjTgs8aefagY27mc3jjqhJj3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/a0bfd9-5fa7-448d-a514-8d1bac63efc6/1/9QtjTgs8aefagY27mc3jjqhJj3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/9QtjTgs8aefagY27mc3jjqhJj3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 10:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:d8:40:a3:5b:49:0f:f0:6b:6b:f4:23:55:aa:b9:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f50b634e0b3c69e7da818dbb99cde38ea8498f71
Validity
Not Before: Apr 28 10:01:31 2025 GMT
Not After : Apr 29 10:01:31 2025 GMT
Subject: CN=5f771e820481e842f5403f81c563a6d669ea9bb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:69:ae:ec:be:62:a8:ac:76:56:ba:6b:8b:5c:
9e:59:b0:4f:aa:6f:cf:45:f8:ac:b5:c4:82:2c:25:
b7:01:6a:75:d5:a5:25:4f:10:3c:ab:60:b9:c0:8c:
f6:4f:1a:12:3e:75:a5:bc:68:d4:7d:a3:87:99:68:
88:ea:68:1f:8a:9b:da:e2:d5:66:84:11:79:49:f7:
de:e8:12:79:41:9e:23:87:13:25:3f:41:e0:08:35:
5f:8a:d6:5d:fe:c8:92:cc:6c:53:fe:93:11:cb:83:
de:77:c4:40:ed:7c:4c:1f:a4:7f:1e:27:ad:e3:94:
dc:91:98:b9:21:07:30:a4:ee:15:2d:ff:b1:1e:f5:
07:f9:13:b1:ea:d9:f2:b7:1b:22:72:a6:e6:12:b6:
83:32:e6:28:07:a9:82:d4:fb:19:d4:07:f6:b4:ed:
02:44:c2:94:32:a1:65:58:66:da:bf:d7:b1:7b:5d:
4f:58:e5:b2:62:83:12:45:b5:e2:97:09:75:a8:69:
7e:20:9f:f5:95:64:76:8d:93:9e:25:e3:d3:d1:42:
8e:14:04:69:e3:95:11:a3:23:ed:64:c0:a1:70:e9:
47:c0:c4:1d:6a:b9:13:20:83:28:5a:2f:32:7a:a1:
5c:52:bf:81:2e:24:05:d9:a2:e9:01:9e:f1:87:f6:
66:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:77:1E:82:04:81:E8:42:F5:40:3F:81:C5:63:A6:D6:69:EA:9B:B4
X509v3 Authority Key Identifier:
keyid:F5:0B:63:4E:0B:3C:69:E7:DA:81:8D:BB:99:CD:E3:8E:A8:49:8F:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QtjTgs8aefagY27mc3jjqhJj3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a0bfd9-5fa7-448d-a514-8d1bac63efc6/1/9QtjTgs8aefagY27mc3jjqhJj3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a0bfd9-5fa7-448d-a514-8d1bac63efc6/1/9QtjTgs8aefagY27mc3jjqhJj3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:06:ca:5a:98:e0:0f:ed:6a:1f:57:8f:43:37:97:36:82:c2:
02:60:f1:cd:cc:4b:2d:3a:7d:33:f8:01:9a:e9:54:33:e1:df:
1e:4a:7a:e1:b8:40:44:9b:01:56:ea:cd:d3:67:18:7a:ec:76:
f3:71:64:01:50:2d:83:6c:9a:25:bc:3b:0d:57:84:ee:2a:97:
ef:c4:73:64:de:f3:5b:ed:1e:bb:98:97:32:16:cb:65:77:12:
6f:ad:16:2b:10:10:50:84:50:a9:e9:ea:5a:bb:9a:5e:db:38:
0c:66:ba:7e:a6:ca:ff:90:9c:35:25:e2:a3:05:a2:d4:97:fa:
74:95:3d:a5:4f:97:60:6a:21:c7:c0:3b:aa:be:30:95:ce:46:
d8:3f:e9:52:ad:6c:15:a2:e5:b8:d7:58:0e:78:9c:ad:a4:ea:
51:c6:e4:37:e0:f8:68:d1:d5:fd:48:ab:4a:da:03:8e:e4:99:
36:87:4e:66:5c:5f:44:e5:7f:5a:cf:20:89:90:b1:31:47:8d:
bc:4e:81:9b:27:65:81:4e:a6:63:a0:b8:84:bc:22:9a:4a:1e:
f8:f0:7d:e8:b8:12:9d:a4:7c:b3:21:2d:f3:ec:d2:ec:ce:68:
bc:7f:b3:b8:7a:ea:dd:fa:c5:95:9d:7d:dd:45:ce:d9:f5:02:
dc:84:c1:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:32:17 2025 by rpki-client