Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/d78bb4-568a-4545-b210-53ab86595fc0/1/9aKrEck1CB9eSaaFyDl49vc9TaE.mft
File: 9aKrEck1CB9eSaaFyDl49vc9TaE.mft (raw, json)
Hash identifier: 6B6u7ffRuTx3XKIFVBbnHD4q1Bi2g5XMDolX9DqKDcM=
Subject key identifier: 7F:1C:AB:36:A5:AE:DF:71:28:D0:02:58:74:B9:C3:7C:73:A7:4E:30
Authority key identifier: F5:A2:AB:11:C9:35:08:1F:5E:49:A6:85:C8:39:78:F6:F7:3D:4D:A1
Certificate issuer: /CN=f5a2ab11c935081f5e49a685c83978f6f73d4da1
Certificate serial: 01968134AEB92EEBE79A9DB8034F43C22B8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9aKrEck1CB9eSaaFyDl49vc9TaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/d78bb4-568a-4545-b210-53ab86595fc0/1/9aKrEck1CB9eSaaFyDl49vc9TaE.mft
Manifest number: 0262
Signing time: Tue 29 Apr 2025 11:00:35 +0000
Manifest this update: Tue 29 Apr 2025 11:00:35 +0000
Manifest next update: Wed 30 Apr 2025 11:00:35 +0000
Files and hashes: 1: 9aKrEck1CB9eSaaFyDl49vc9TaE.crl (hash: fxKMan1UtceQBCw+eTxXCSoAVdx+qSElYImzRYd1njw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/d78bb4-568a-4545-b210-53ab86595fc0/1/9aKrEck1CB9eSaaFyDl49vc9TaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/d78bb4-568a-4545-b210-53ab86595fc0/1/9aKrEck1CB9eSaaFyDl49vc9TaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9aKrEck1CB9eSaaFyDl49vc9TaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:34:ae:b9:2e:eb:e7:9a:9d:b8:03:4f:43:c2:2b:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a2ab11c935081f5e49a685c83978f6f73d4da1
Validity
Not Before: Apr 29 11:00:35 2025 GMT
Not After : Apr 30 11:00:35 2025 GMT
Subject: CN=7f1cab36a5aedf7128d0025874b9c37c73a74e30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:fd:b4:f3:20:0e:7b:bb:05:0f:5d:6b:11:e1:
7e:0c:9d:a7:b9:f1:70:b2:93:e2:d2:92:d6:dc:6d:
06:1d:58:16:cc:ae:71:b4:09:b2:b3:b8:cb:df:07:
f3:a4:80:45:95:25:39:69:62:83:32:52:07:e0:02:
cf:84:87:09:2e:10:57:f6:94:49:6c:66:21:11:19:
0b:e6:f2:42:f9:b1:8e:4b:3a:9a:01:8b:73:fe:4a:
bd:74:67:b0:57:31:61:f0:1d:64:b7:05:b6:e4:27:
b9:95:47:22:c5:7e:5c:73:62:e6:7e:6d:01:2f:01:
d1:fc:a1:a5:09:85:c9:ef:6e:ee:21:23:a5:fa:93:
38:c3:52:23:80:f4:3a:4a:8c:ed:b0:fd:68:29:ea:
bf:08:58:b9:94:5b:d4:30:84:b1:69:06:94:e5:37:
64:9c:bb:8d:1c:49:ee:d5:d0:8a:8a:3e:4a:12:7a:
e9:02:cf:85:84:37:25:d9:fc:a4:98:5b:4c:e2:e5:
0b:5d:e5:9f:f4:b9:be:7a:31:d0:6d:df:07:c3:65:
6f:15:92:23:8d:5f:a7:d9:62:5b:fd:74:ee:84:90:
23:e2:48:d6:97:ba:5b:f3:cb:4c:4d:f7:d7:e6:6e:
4f:59:74:60:63:01:9e:45:f5:fe:43:77:63:2f:ec:
3b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:1C:AB:36:A5:AE:DF:71:28:D0:02:58:74:B9:C3:7C:73:A7:4E:30
X509v3 Authority Key Identifier:
keyid:F5:A2:AB:11:C9:35:08:1F:5E:49:A6:85:C8:39:78:F6:F7:3D:4D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9aKrEck1CB9eSaaFyDl49vc9TaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d78bb4-568a-4545-b210-53ab86595fc0/1/9aKrEck1CB9eSaaFyDl49vc9TaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d78bb4-568a-4545-b210-53ab86595fc0/1/9aKrEck1CB9eSaaFyDl49vc9TaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:ce:28:21:5f:5e:3d:c4:47:3b:4c:57:4d:3e:2d:5f:b0:e3:
02:ab:b1:d4:b2:ec:f0:36:eb:89:64:00:e3:3d:94:f5:34:f6:
dd:56:73:75:b7:69:74:e1:13:01:d6:b5:ca:7d:53:cb:f1:8a:
7f:8b:2a:80:62:73:fa:d7:84:31:36:d2:6c:ab:9c:e2:1e:90:
f0:0c:8e:a3:95:77:f4:f1:8a:b4:f4:f9:43:1f:0b:db:da:ec:
90:0a:ba:1b:b5:c3:49:a4:28:7a:2b:aa:f3:8c:d7:07:f1:95:
96:95:04:bb:4e:8b:4c:92:9a:96:2c:c2:62:28:4f:fe:b1:3c:
03:c6:d0:0a:bd:56:65:5f:04:8e:c7:b6:c6:e0:b0:00:ff:d3:
93:ac:ee:9b:52:63:7f:fc:48:cd:12:32:24:bb:c2:d4:61:df:
c1:14:83:21:a9:12:d9:93:be:25:66:76:43:aa:10:b1:e6:a7:
33:e4:b0:d8:86:12:9d:78:37:31:93:f3:04:92:48:67:f2:74:
2f:96:1c:91:45:ea:f3:8a:c1:c1:2b:ab:4d:fa:01:3b:06:7d:
17:48:b6:68:f6:3a:54:09:e5:09:b3:63:11:15:c8:af:26:3a:
73:9b:db:cb:98:0f:80:05:c7:f4:41:58:a8:a5:3c:d4:32:7f:
47:1f:66:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:19:24 2025 by rpki-client