Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.mft
File: R9Bk-z5UHyNWMGXkjzAPLP3-AJo.mft (raw, json)
Hash identifier: bS1YbKQOfx7r+XaGYcKyk13HIVJ8GRZ8CtA7kKk4z5o=
Subject key identifier: DB:38:FC:78:63:DA:18:0B:7F:F6:20:74:C0:FE:AA:06:D4:9F:C9:FA
Authority key identifier: 47:D0:64:FB:3E:54:1F:23:56:30:65:E4:8F:30:0F:2C:FD:FE:00:9A
Certificate issuer: /CN=47d064fb3e541f23563065e48f300f2cfdfe009a
Certificate serial: 0196718A6238C5FE80B15FE8CAF1940B4BEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.mft
Manifest number: 0FB1
Signing time: Sat 26 Apr 2025 10:00:16 +0000
Manifest this update: Sat 26 Apr 2025 10:00:16 +0000
Manifest next update: Sun 27 Apr 2025 10:00:16 +0000
Files and hashes: 1: LsBMcdJw5xS8I63MgOSx7GP6YGo.roa (hash: eclfzXKV6RSN6OrnDOnk9OvTtMq4JN86esMRl2QpoQY=)
2: R9Bk-z5UHyNWMGXkjzAPLP3-AJo.crl (hash: MjgnwO0+cA6r7vTRY/YvE2R5sjQywJmyXQ4jZtQO6gM=)
3: RP5jpn-uKD4VZqtBiaKoc8atoPw.roa (hash: QDcnUril7uwVWWdbILh+cVbAEXM+2Qt6gMgTdP6yAQo=)
4: hP4RlSdcYGNnTpuPiY_-lw9F7k8.roa (hash: C3TpjMqyfvy/eCoQ7B0XWPy+vgrcOa/QV9L4/p4cn7c=)
5: ufd9I1sTMu_-cmgS_4wyO_C2LOU.roa (hash: t8YD8zi5UguFlovOm8R2XRjIBtMUKaWMQ8CNRGn6mYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 10:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:71:8a:62:38:c5:fe:80:b1:5f:e8:ca:f1:94:0b:4b:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47d064fb3e541f23563065e48f300f2cfdfe009a
Validity
Not Before: Apr 26 10:00:16 2025 GMT
Not After : Apr 27 10:00:16 2025 GMT
Subject: CN=db38fc7863da180b7ff62074c0feaa06d49fc9fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7c:1a:36:4f:0c:a7:ea:3c:a7:74:85:35:67:
d2:6f:6b:66:a6:12:42:d7:56:9a:08:9e:76:4a:a9:
0d:c4:e6:8d:1a:c6:b0:2d:e0:0d:d4:38:a5:bf:2c:
e9:bd:f0:f9:58:82:97:7e:67:c1:6c:06:87:66:58:
2f:15:ba:f2:bf:27:28:18:8d:5c:6e:72:99:42:71:
68:61:23:05:0b:68:cb:2d:5d:29:43:f6:79:d8:3e:
1e:7b:de:cf:2f:70:61:69:ec:39:f0:f5:45:29:f2:
d8:58:18:5d:06:66:3a:9d:e3:27:9a:09:c2:c7:6e:
9a:55:e9:8b:dc:6a:b7:74:bc:eb:96:8d:b8:87:8b:
18:b7:b6:be:fa:a5:a2:86:93:e3:5f:f7:c2:6c:e7:
67:58:05:05:47:bc:3e:21:da:0d:67:32:19:af:b9:
9f:07:46:96:ae:1e:76:80:17:5e:58:26:38:28:c7:
b0:a9:ff:62:b8:ed:30:b4:10:ae:31:68:ea:7a:3d:
11:0f:42:a0:3f:c1:9d:d1:c7:15:f1:3b:83:02:db:
46:1a:7a:55:1d:4e:a5:8a:ef:44:bd:3d:7f:32:bc:
a0:11:a1:3b:fb:71:ad:52:8c:6c:50:94:66:6d:6d:
be:f7:0d:51:20:ce:13:07:6a:08:9c:bb:c1:5f:78:
c2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:38:FC:78:63:DA:18:0B:7F:F6:20:74:C0:FE:AA:06:D4:9F:C9:FA
X509v3 Authority Key Identifier:
keyid:47:D0:64:FB:3E:54:1F:23:56:30:65:E4:8F:30:0F:2C:FD:FE:00:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:c8:c0:f9:0b:39:16:e7:a1:d8:c5:e4:42:eb:72:29:7c:35:
ef:2d:a9:0c:9a:6f:30:a4:b8:49:f0:fc:bb:05:65:a4:4b:73:
d7:10:2a:17:68:6d:6a:88:28:fa:8d:5d:ef:e1:7f:75:d1:d5:
00:c4:e2:23:51:9c:50:48:de:3d:e7:76:76:f6:af:da:ee:ba:
db:09:d8:a7:fb:4b:37:67:2a:58:e6:f2:5e:dc:1c:32:70:1b:
c2:64:14:a7:45:77:03:a8:1f:f2:e1:6f:a0:a7:aa:bf:51:32:
48:3d:ea:ba:d9:c4:b8:cf:6f:f0:1b:42:42:73:d8:ff:03:38:
40:b6:f4:de:f2:93:f3:ca:4b:19:07:69:16:18:6a:58:6a:9a:
6b:2b:d7:94:2f:17:6b:cb:9c:39:70:9b:d4:eb:43:22:54:7c:
ff:5f:4f:67:d7:16:0a:12:43:2d:1a:50:0b:70:dd:c7:4f:a7:
9e:aa:fa:9b:b7:c9:af:23:a7:fa:6e:a7:d5:2f:0b:42:86:76:
a8:45:2b:fa:0a:4e:e9:ea:09:7a:2d:8a:0a:67:87:13:6f:32:
76:6d:4d:53:9c:44:d8:9a:59:f9:af:11:db:59:20:3a:7c:35:
f3:e6:b0:e6:b0:ea:3c:fa:a9:fb:9b:84:30:17:ca:5a:2a:77:
6f:3f:ac:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:04:25 2025 by rpki-client