Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.mft
File: 9Zy5I-QGm_42Li2W_6sv8xB4MXo.mft (raw, json)
Hash identifier: lTksbAr9+wV8Mb22PmbuieLJ9SN08RmWR3LxjwCGomc=
Subject key identifier: FA:C0:89:AF:34:F0:BD:E6:F4:FA:18:54:35:94:52:BB:74:CC:8B:D0
Authority key identifier: F5:9C:B9:23:E4:06:9B:FE:36:2E:2D:96:FF:AB:2F:F3:10:78:31:7A
Certificate issuer: /CN=f59cb923e4069bfe362e2d96ffab2ff31078317a
Certificate serial: 01968691CC8DEE3373C075032EFFD378D0DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Zy5I-QGm_42Li2W_6sv8xB4MXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.mft
Manifest number: 130C
Signing time: Wed 30 Apr 2025 12:00:24 +0000
Manifest this update: Wed 30 Apr 2025 12:00:24 +0000
Manifest next update: Thu 01 May 2025 12:00:24 +0000
Files and hashes: 1: 9Zy5I-QGm_42Li2W_6sv8xB4MXo.crl (hash: rouNegGbSrhc782WjWEfi+3ilOS81TZ9oV3IjBJ3nho=)
2: rtyY9Cz1KYossj4NRjvNjMhwRZI.roa (hash: KYSFbkeXEHZUiKzf8OS4b0YogJmArNqO7BI7cVGBHSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Zy5I-QGm_42Li2W_6sv8xB4MXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 12:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:91:cc:8d:ee:33:73:c0:75:03:2e:ff:d3:78:d0:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f59cb923e4069bfe362e2d96ffab2ff31078317a
Validity
Not Before: Apr 30 12:00:24 2025 GMT
Not After : May 1 12:00:24 2025 GMT
Subject: CN=fac089af34f0bde6f4fa1854359452bb74cc8bd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2f:7a:00:ff:02:38:2b:14:e7:0b:20:ad:26:
9e:16:71:dc:f9:da:80:a5:3d:f6:57:86:ec:26:07:
af:66:c1:8e:33:79:f5:35:0a:60:7b:a5:2a:bb:68:
b8:e3:2b:59:a1:2b:f6:d8:8c:d6:6a:36:c9:97:38:
1f:86:5a:40:ea:5a:ee:84:1a:be:8e:5a:3a:c6:69:
1e:67:8d:9d:75:31:e3:d3:f9:f8:ce:a5:2b:73:e2:
96:24:24:0a:2d:1a:d3:ef:17:e7:49:f5:18:90:c7:
cc:87:ec:03:fb:04:87:8b:9c:1a:1b:f3:af:f3:f4:
9f:7e:57:19:8a:d9:16:be:7b:e5:e4:a8:e9:07:d2:
7c:d2:6f:91:cf:61:27:33:da:97:a9:80:ec:fd:2e:
f2:12:3f:9f:55:41:71:a9:e5:4e:6a:27:40:9d:6a:
e4:32:ad:e3:f8:3c:e0:ac:f5:51:2b:91:81:30:40:
6a:c1:66:04:6c:09:ec:d6:f4:96:c1:96:2a:86:92:
d9:c4:ba:66:a7:90:22:ea:b2:12:78:a2:36:32:8a:
3b:3f:6c:7d:0f:1d:ee:24:8e:01:e0:18:09:e5:26:
ee:8f:2a:36:bf:33:7b:11:c5:02:1a:8d:f2:47:ee:
c9:58:ef:f6:b9:6c:3f:40:39:16:d6:a2:06:42:78:
2e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:C0:89:AF:34:F0:BD:E6:F4:FA:18:54:35:94:52:BB:74:CC:8B:D0
X509v3 Authority Key Identifier:
keyid:F5:9C:B9:23:E4:06:9B:FE:36:2E:2D:96:FF:AB:2F:F3:10:78:31:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Zy5I-QGm_42Li2W_6sv8xB4MXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:f8:44:67:4e:f2:9b:3a:cd:3f:12:fc:af:b3:09:74:61:27:
50:84:b3:b9:32:09:18:53:d6:af:89:70:14:59:22:7f:3a:fc:
f7:e5:d1:bc:ef:f8:aa:59:bd:0f:d2:6a:9e:8d:b2:c0:b0:30:
ec:02:7e:77:9d:68:00:4d:a4:40:1e:e1:0d:e4:a3:81:fd:62:
d5:98:e4:73:6d:10:74:0c:35:89:b7:cf:17:3c:cc:d6:b1:dd:
8b:eb:c0:fe:90:4a:70:a1:00:93:0f:f9:a5:d9:07:60:0a:cb:
4d:07:95:54:f3:3c:dc:b6:fd:76:3a:05:3b:81:6e:3e:0b:c9:
d8:ad:dd:97:fb:89:04:23:0d:b2:14:9f:21:e2:c4:58:94:c8:
41:f0:fb:61:da:07:1e:8a:0d:be:b2:80:80:01:bb:7e:6a:67:
59:c4:cd:50:d0:c5:20:45:9b:38:93:28:5f:e7:78:03:83:9e:
eb:b4:62:fb:e6:fd:a8:4e:94:57:5c:8a:7f:f3:a3:70:12:3a:
ba:bf:b1:25:62:cb:8c:b4:b7:c5:9c:0b:0c:86:4c:47:c8:9b:
39:48:7c:6f:25:45:0b:9b:1d:8b:0a:af:4f:bf:a0:27:0e:58:
3c:36:98:2d:be:1c:46:af:40:b9:a6:fb:e9:6d:9e:32:64:a1:
67:81:18:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 23:05:22 2025 by rpki-client