Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.mft
File: 9EAkreXkgCwKL2Hm-A9NItwVSFM.mft (raw, json)
Hash identifier: GeeBVW+P3iNJwzCvkFlkjPv5O9JeOJqcYD7He5Z31MA=
Subject key identifier: 7C:DF:74:D4:61:F1:38:B8:F0:79:E4:8F:41:71:D3:6E:52:BE:05:1D
Authority key identifier: F4:40:24:AD:E5:E4:80:2C:0A:2F:61:E6:F8:0F:4D:22:DC:15:48:53
Certificate issuer: /CN=f44024ade5e4802c0a2f61e6f80f4d22dc154853
Certificate serial: 0196759E528FE2568DCD9B8B96C49A64BE1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9EAkreXkgCwKL2Hm-A9NItwVSFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.mft
Manifest number: 1253
Signing time: Sun 27 Apr 2025 05:00:32 +0000
Manifest this update: Sun 27 Apr 2025 05:00:32 +0000
Manifest next update: Mon 28 Apr 2025 05:00:32 +0000
Files and hashes: 1: 4J1X6PCF39tH0Ho4_SbJ7AtxDbg.roa (hash: sDrnXJKsdAbmdaesDlUsR31uPE7GfMdA3txIVC37ks4=)
2: 9EAkreXkgCwKL2Hm-A9NItwVSFM.crl (hash: JZjSjAX1vTqDuxX36CoGP5+eC7YbbpL/HIvcaXYelaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9EAkreXkgCwKL2Hm-A9NItwVSFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:52:8f:e2:56:8d:cd:9b:8b:96:c4:9a:64:be:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f44024ade5e4802c0a2f61e6f80f4d22dc154853
Validity
Not Before: Apr 27 05:00:32 2025 GMT
Not After : Apr 28 05:00:32 2025 GMT
Subject: CN=7cdf74d461f138b8f079e48f4171d36e52be051d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7c:50:13:b7:c1:03:97:b8:6e:6b:a8:4a:7c:
8f:d5:c9:54:bd:44:6b:dc:39:23:cd:a2:a5:67:9b:
1b:97:57:38:4c:7f:72:fc:f2:24:63:b0:de:d9:45:
52:07:a1:0a:cc:03:c7:49:78:d2:75:91:28:c7:28:
91:3f:6a:7a:8a:b1:4e:69:c1:94:0a:9d:c5:da:fe:
1c:0e:85:2d:d2:0f:fc:a6:5b:9b:51:d8:0f:e8:67:
34:d1:fd:7b:b6:48:0b:25:78:6f:9a:7c:f8:8a:b9:
6c:ee:f7:bd:d9:28:27:2d:4c:af:7d:1d:2f:f6:53:
bf:56:f5:36:72:ef:df:f8:b4:61:9a:f7:6e:eb:09:
16:67:51:8f:2c:80:32:8f:db:58:a3:4b:ae:5d:98:
aa:6d:cb:84:12:30:d7:d9:15:d1:79:34:41:eb:cd:
97:ec:e2:3a:98:0a:d2:b6:64:cb:cb:d7:33:b2:b9:
53:44:0f:cf:9e:4c:14:71:8a:4e:2d:50:7f:f2:79:
27:0f:ff:ba:a3:6b:fe:9d:af:6c:81:7a:ca:19:3f:
dd:12:5b:3b:86:79:75:85:0a:3e:60:88:a2:9e:64:
67:56:6a:e4:04:d8:23:40:3a:91:3c:df:18:ca:31:
70:4e:33:2f:96:29:a6:2c:5d:14:85:b1:82:22:28:
6b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:DF:74:D4:61:F1:38:B8:F0:79:E4:8F:41:71:D3:6E:52:BE:05:1D
X509v3 Authority Key Identifier:
keyid:F4:40:24:AD:E5:E4:80:2C:0A:2F:61:E6:F8:0F:4D:22:DC:15:48:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EAkreXkgCwKL2Hm-A9NItwVSFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:85:6f:d4:c1:4d:89:1c:06:1a:48:49:fe:a7:fd:2f:2e:21:
02:84:fa:87:03:be:71:0f:62:46:25:b6:45:1f:75:a3:5c:6b:
b8:17:6e:22:ea:a0:92:a4:4b:55:95:ee:96:cf:15:56:96:a8:
25:2d:2d:ab:c2:e7:90:db:fc:5e:ee:62:13:f3:5c:a9:6b:e6:
2b:c5:b4:08:f1:fe:3c:f9:26:d0:1c:62:54:da:99:98:fa:c1:
e7:43:19:67:bc:12:5b:e9:ab:24:4e:44:b5:df:9d:a6:50:0d:
9f:f7:f7:c2:4d:8b:0b:9c:7a:28:d3:4f:d3:4f:47:74:9e:99:
9e:4e:ad:86:07:3f:40:21:d8:9a:23:9d:3a:c1:8b:b6:63:eb:
43:d4:01:e9:8e:9e:1a:f0:53:ca:da:18:86:e4:f7:ea:86:af:
1f:f2:c2:90:89:eb:0e:af:e9:13:e4:92:75:a6:21:32:a2:66:
58:ca:14:09:9e:4c:25:ee:37:57:a4:90:a5:92:ba:16:db:fa:
dd:9a:74:3c:8f:fb:4d:d3:98:cf:56:b8:65:72:dc:dd:8d:95:
bb:73:1f:66:56:08:e6:7d:e7:fc:b6:16:82:db:8a:d7:9f:df:
19:2c:c5:ca:5e:ae:c8:2c:21:6a:f2:5e:de:89:91:e0:dd:72:
5f:37:75:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:50:37 2025 by rpki-client