Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.mft
File: 9q2iC9mLq990w9Vs14raZu2HoUg.mft (raw, json)
Hash identifier: Fi5hYqc3rlvD88VzwdeHIelrYUd9ywASoft/VLWpOP8=
Subject key identifier: 84:A2:56:18:5E:34:8F:94:DC:7E:91:3C:6E:C7:20:16:89:A5:67:C9
Authority key identifier: F6:AD:A2:0B:D9:8B:AB:DF:74:C3:D5:6C:D7:8A:DA:66:ED:87:A1:48
Certificate issuer: /CN=f6ada20bd98babdf74c3d56cd78ada66ed87a148
Certificate serial: 01967679B75BF14C99CD06DA15B8A9535BF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9q2iC9mLq990w9Vs14raZu2HoUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.mft
Manifest number: 08D5
Signing time: Sun 27 Apr 2025 09:00:10 +0000
Manifest this update: Sun 27 Apr 2025 09:00:10 +0000
Manifest next update: Mon 28 Apr 2025 09:00:10 +0000
Files and hashes: 1: 9q2iC9mLq990w9Vs14raZu2HoUg.crl (hash: wMkuZwV1CVXZlmgnmmairvTJ5kBIxk7dpmLeBReGvVY=)
2: iIjePRipe22Xt3i-0k7Htqe5OiY.roa (hash: ZRSy/isYMR/Q32/3YEImTWCaf6Cp+8bokFU0sdfABNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9q2iC9mLq990w9Vs14raZu2HoUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:79:b7:5b:f1:4c:99:cd:06:da:15:b8:a9:53:5b:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6ada20bd98babdf74c3d56cd78ada66ed87a148
Validity
Not Before: Apr 27 09:00:10 2025 GMT
Not After : Apr 28 09:00:10 2025 GMT
Subject: CN=84a256185e348f94dc7e913c6ec7201689a567c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1c:25:59:48:e9:9f:51:cc:3a:d0:f6:09:e7:
ed:91:21:2b:f2:d3:31:0e:da:8d:71:0f:39:82:91:
06:4c:d2:e9:a4:cf:b2:34:09:c1:f9:61:67:26:6f:
ed:99:54:0a:10:83:1e:f0:04:9d:70:b5:0b:29:9c:
d5:2a:61:52:96:6e:fb:a3:bd:6f:02:d3:a6:f4:04:
45:e9:ca:21:31:1a:00:74:7c:f0:83:3c:2b:df:8b:
06:0c:c8:87:b9:8a:73:a2:22:fd:88:ea:1f:98:b2:
6c:7a:fb:4f:1a:60:e7:c1:ba:91:05:bd:ce:7b:ae:
5a:1f:dc:c5:b8:15:21:39:8b:c5:2d:f4:55:3b:75:
2c:9a:73:9d:12:28:8c:2e:f6:2b:38:59:52:87:b8:
f4:71:83:a3:2a:ec:88:13:c4:b4:51:cb:f3:9c:ec:
94:fa:01:f5:46:86:99:4f:58:c8:2e:7a:fb:51:2e:
f7:45:06:53:6c:0a:d7:e1:7e:6f:a5:4b:7f:77:1e:
07:3f:9e:50:e7:97:8e:f1:76:54:1d:87:ad:bc:e5:
cb:7e:a5:ee:80:16:36:51:ea:45:28:59:17:09:ff:
70:fe:13:c9:14:23:b6:89:a7:6e:46:d0:a4:a2:59:
cf:d8:df:4a:3a:54:30:52:99:8f:3d:6a:87:6b:d7:
55:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A2:56:18:5E:34:8F:94:DC:7E:91:3C:6E:C7:20:16:89:A5:67:C9
X509v3 Authority Key Identifier:
keyid:F6:AD:A2:0B:D9:8B:AB:DF:74:C3:D5:6C:D7:8A:DA:66:ED:87:A1:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9q2iC9mLq990w9Vs14raZu2HoUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:85:f1:d8:da:8f:4d:c7:e7:28:ea:f5:7c:f1:31:23:f1:99:
c5:da:4b:eb:1d:6c:c4:8d:df:63:22:f7:9d:80:48:f1:39:96:
34:72:de:d6:0e:69:ab:e3:ee:16:fb:41:d0:36:be:03:06:e0:
07:5b:82:60:0e:19:ca:41:2d:5b:cc:cc:0f:2c:6e:a2:9e:a2:
34:b5:f3:76:8e:8a:4c:63:51:58:cc:5e:af:93:80:27:cd:4b:
45:c3:61:64:49:e9:39:2e:3c:94:e8:11:f7:ab:4e:b9:33:a5:
82:61:f8:cf:63:78:88:65:ec:a5:81:19:12:60:0c:53:9c:1f:
4d:ba:b0:20:46:a4:b9:0c:e5:17:bf:f3:cc:57:f1:49:1b:de:
b2:05:5e:09:27:03:80:5c:d1:82:b5:c7:1d:09:a4:41:7d:e3:
53:ce:26:37:4f:5e:14:ad:15:99:c4:ad:a6:5b:ee:e2:8f:d2:
cb:d8:06:56:cb:e6:0c:48:f8:6c:50:6a:e3:bf:e6:51:6f:b2:
32:cf:33:8b:57:f7:09:e9:c2:fe:8c:25:66:e3:f7:92:98:b5:
06:46:65:69:58:b2:6b:fc:2c:9d:06:27:9c:54:35:f8:e1:46:
29:69:03:98:b9:b5:14:a3:e1:26:87:68:9c:11:47:86:03:0c:
49:b3:04:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:00:10 2025 by rpki-client