Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.mft
File: 9f3nK_WgC97E0e_dfQICnueeRyA.mft (raw, json)
Hash identifier: NnK7Wz2eiK3u5fwKypDYep0P9LcEsCb2w5trtQmCsYY=
Subject key identifier: B9:5A:FC:96:2F:E1:73:C0:1C:AA:49:6F:DE:FC:B7:60:7B:E1:0E:5C
Authority key identifier: F5:FD:E7:2B:F5:A0:0B:DE:C4:D1:EF:DD:7D:02:02:9E:E7:9E:47:20
Certificate issuer: /CN=f5fde72bf5a00bdec4d1efdd7d02029ee79e4720
Certificate serial: 01968F280131F241DB4A7484F8DE87A5BFED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9f3nK_WgC97E0e_dfQICnueeRyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.mft
Manifest number: 08E6
Signing time: Fri 02 May 2025 04:01:25 +0000
Manifest this update: Fri 02 May 2025 04:01:25 +0000
Manifest next update: Sat 03 May 2025 04:01:25 +0000
Files and hashes: 1: 9f3nK_WgC97E0e_dfQICnueeRyA.crl (hash: NK9gYptNwXP1R2rTBCzlfkCe0JHmHVZPdq2syr7g4bw=)
2: VwdOphY_UgRaqYf3Kg3b6kzwRf0.roa (hash: RncMvUV6R6LkD/qjU1iWGPE4PHApbhUX2ZP/1640Hn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9f3nK_WgC97E0e_dfQICnueeRyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8f:28:01:31:f2:41:db:4a:74:84:f8:de:87:a5:bf:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5fde72bf5a00bdec4d1efdd7d02029ee79e4720
Validity
Not Before: May 2 04:01:25 2025 GMT
Not After : May 3 04:01:25 2025 GMT
Subject: CN=b95afc962fe173c01caa496fdefcb7607be10e5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7c:28:77:21:17:fd:9c:07:e9:b5:2e:fb:64:
84:d0:46:ed:be:16:d3:8c:48:7e:31:67:91:3c:00:
48:17:9a:a2:d1:ab:06:bd:e3:89:da:60:e2:b8:6f:
91:85:98:01:5f:62:29:fa:63:b5:66:5d:7d:33:e8:
2b:0e:96:33:68:7b:bb:19:f9:f2:a1:9b:f0:10:bc:
9a:57:5f:47:ac:12:37:a0:32:28:67:e1:ba:c9:74:
c9:68:be:6e:f1:15:c0:3b:f3:07:e5:f3:fb:c0:b7:
86:5b:db:ed:38:4b:49:c1:11:c9:1c:9b:fe:ef:84:
28:f5:8c:fe:40:0a:0c:78:3d:be:ca:05:31:65:b8:
27:b4:06:58:5a:c0:6d:e1:a8:dc:c1:4e:bc:68:3d:
dd:79:4d:e0:72:61:40:ae:f1:d8:ea:a9:05:75:97:
22:a0:f6:a2:bd:71:f2:da:35:94:fe:69:1e:12:02:
8d:a7:f1:08:07:12:2e:c0:2c:82:6d:cc:27:09:b1:
3b:ac:65:3b:5e:0c:38:53:54:f0:66:8b:1e:0a:0c:
ae:31:32:1d:f2:00:af:cf:c6:07:22:cd:d5:d3:96:
b8:9a:05:4f:61:c7:5b:60:dd:91:a8:5f:8d:88:73:
f5:13:0f:4c:8b:0b:10:d7:96:9e:eb:9b:54:e7:d6:
30:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:5A:FC:96:2F:E1:73:C0:1C:AA:49:6F:DE:FC:B7:60:7B:E1:0E:5C
X509v3 Authority Key Identifier:
keyid:F5:FD:E7:2B:F5:A0:0B:DE:C4:D1:EF:DD:7D:02:02:9E:E7:9E:47:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f3nK_WgC97E0e_dfQICnueeRyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:08:e5:46:10:46:e2:dd:20:c4:7a:57:4c:0b:00:59:86:3b:
d5:b9:fe:b2:de:73:56:2d:6d:22:3d:38:d3:1d:f7:16:fd:20:
a4:84:15:51:15:17:44:7f:07:b3:4b:80:db:27:82:36:a0:cc:
89:5e:80:77:6b:25:9b:bc:d5:1b:c9:94:58:5d:f6:76:90:d9:
a6:f2:80:97:98:e6:ae:a0:13:ad:d9:03:e3:06:43:bd:7f:dc:
9f:99:aa:26:f0:bb:87:57:71:b2:11:00:f1:55:af:46:fe:58:
20:ee:13:ba:6d:63:01:e6:e0:44:dd:e0:dc:7e:6d:6e:1c:91:
3b:0e:e0:74:e1:de:fd:a9:1b:5c:e2:d6:44:ee:12:77:be:5e:
f1:14:cb:d2:13:ff:73:18:a0:d8:55:d0:11:fd:4d:f3:89:f3:
d0:a4:7a:0e:1a:b1:11:8d:2e:9b:8d:aa:9b:df:d7:1a:fd:0d:
76:c9:68:cb:fd:9c:c1:0d:56:4b:ab:78:a2:70:c8:75:75:fc:
70:22:9a:ef:6d:a6:86:7a:52:77:b2:db:47:f2:0a:4e:37:bc:
63:29:4d:d4:7c:d2:3e:c5:57:ab:00:cd:5d:73:3f:67:d4:7b:
cc:ea:18:4e:a2:da:ba:b3:e9:1c:d2:87:fe:e0:81:5c:58:31:
0b:2c:a7:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 12:06:10 2025 by rpki-client