Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/c33df9-edd5-463b-b052-0f0bc401e1e1/1/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.mft
File: _9PBdC_AWoCi3Guw6-EDCpu8jJQ.mft (raw, json)
Hash identifier: hNdrosEdtMzcHByHhNw7nOcQf3f6Y5fvvEaJAjZx2n4=
Subject key identifier: 27:1C:B5:50:BB:20:E7:25:67:CD:BC:17:0E:D7:8F:75:EE:3D:1A:32
Authority key identifier: FF:D3:C1:74:2F:C0:5A:80:A2:DC:6B:B0:EB:E1:03:0A:9B:BC:8C:94
Certificate issuer: /CN=ffd3c1742fc05a80a2dc6bb0ebe1030a9bbc8c94
Certificate serial: 0196789F29C3686047499EB867EE13F87C10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/c33df9-edd5-463b-b052-0f0bc401e1e1/1/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.mft
Manifest number: 14A1
Signing time: Sun 27 Apr 2025 19:00:18 +0000
Manifest this update: Sun 27 Apr 2025 19:00:18 +0000
Manifest next update: Mon 28 Apr 2025 19:00:18 +0000
Files and hashes: 1: GDYfoKKG3yFaIjJkJ3YCAK8hLqA.roa (hash: erb5aM2h7W5I1XqnWYG/lDx7/8zDPLRd0RbZw0dE/qs=)
2: _9PBdC_AWoCi3Guw6-EDCpu8jJQ.crl (hash: 45VKb7YnQfPtk3eE8ptyW8yOfTU/izBlVsNt+hwA10M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/c33df9-edd5-463b-b052-0f0bc401e1e1/1/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/c33df9-edd5-463b-b052-0f0bc401e1e1/1/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:9f:29:c3:68:60:47:49:9e:b8:67:ee:13:f8:7c:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffd3c1742fc05a80a2dc6bb0ebe1030a9bbc8c94
Validity
Not Before: Apr 27 19:00:18 2025 GMT
Not After : Apr 28 19:00:18 2025 GMT
Subject: CN=271cb550bb20e72567cdbc170ed78f75ee3d1a32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f5:38:9d:7e:d8:ee:0f:94:f2:61:4b:62:20:
78:50:f3:6c:b8:79:ca:0c:82:cb:9a:35:d6:85:7c:
c4:aa:99:8e:2f:ea:8f:64:78:23:b9:da:02:a7:36:
a9:be:f0:00:0f:07:4a:d0:98:ed:13:33:6e:67:e0:
f9:ad:17:61:7d:d5:d2:cf:c2:7f:73:61:21:56:15:
1d:1e:f4:15:14:41:90:f7:99:23:70:73:0a:bc:31:
11:2d:3c:eb:62:7e:6b:7d:a8:63:0f:c0:a3:d7:b7:
cd:d1:43:0f:10:ae:0c:d3:a5:eb:54:9d:56:fa:81:
7c:48:23:53:b8:4f:a4:ad:01:3f:82:16:c6:90:79:
d6:9a:85:a7:4c:b1:71:be:0e:7c:b5:fb:87:d4:97:
58:45:13:d5:03:46:31:d4:ef:c0:0a:3d:29:92:45:
36:78:4d:f6:8d:9c:76:db:9c:c9:1a:e1:ed:d6:1a:
12:62:c7:42:1f:41:24:2f:15:71:1b:f5:02:d6:33:
56:6d:46:7d:89:11:79:68:fe:d7:fe:6f:02:81:46:
3f:9f:a3:7b:e4:ea:2c:3e:c1:50:d2:9c:96:d2:7b:
7b:d8:a1:35:64:d3:a3:2e:25:29:cf:ad:2e:57:96:
e3:61:e5:22:ee:62:77:cf:b9:dd:b1:ba:cd:90:5a:
7a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:1C:B5:50:BB:20:E7:25:67:CD:BC:17:0E:D7:8F:75:EE:3D:1A:32
X509v3 Authority Key Identifier:
keyid:FF:D3:C1:74:2F:C0:5A:80:A2:DC:6B:B0:EB:E1:03:0A:9B:BC:8C:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/c33df9-edd5-463b-b052-0f0bc401e1e1/1/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/c33df9-edd5-463b-b052-0f0bc401e1e1/1/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:fe:c4:b4:7a:83:81:04:32:05:3c:fe:e2:80:51:32:39:70:
ac:c5:8b:27:b9:af:80:79:93:7d:cb:40:74:14:9f:12:4b:a5:
54:2c:ae:c0:2e:39:a8:5f:80:f0:c2:67:27:f9:63:15:64:3c:
23:7a:81:3e:00:3a:d6:4d:e8:99:41:09:6e:fe:18:ac:e7:2f:
b6:5b:70:c3:e3:66:88:b8:de:86:cd:e1:6b:d2:42:8f:72:27:
4d:aa:aa:01:1d:39:67:02:ad:e9:ff:da:41:03:92:5b:39:1b:
03:17:ce:6b:39:68:59:f7:8b:54:64:9b:d7:9e:02:4c:8d:f8:
23:49:3a:c7:b1:6e:5b:74:71:bf:6a:3b:0b:ac:4c:0e:15:ef:
82:88:3d:d0:00:cf:12:d9:80:c0:f6:55:fd:7b:76:5b:81:66:
38:fe:d8:f1:f4:ce:7c:52:50:0f:69:e3:6a:6a:d8:f9:57:a6:
52:3a:96:e5:8e:06:74:a0:86:c7:31:1c:ef:23:61:b8:5a:28:
87:52:4a:39:fe:16:61:62:53:ff:d7:f8:d0:d6:07:8c:d5:8b:
59:5e:f7:91:d3:c6:87:ba:38:bc:26:eb:fb:7f:ae:a1:2d:fb:
43:a9:6d:a4:d3:b9:6b:ec:0b:92:ea:e2:f9:ff:c6:c1:5a:81:
28:8d:da:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:14:37 2025 by rpki-client