Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/f63307-4a0f-4053-8fc3-f535578984c2/1/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.mft
File: AT9tsP1X0Z-e4VJCouQWfvtSLQQ.mft (raw, json)
Hash identifier: nE868vRr4G6Q2BodFAkLSoIDsompqVmwDr3u2dFYAcA=
Subject key identifier: 77:FF:5D:21:2C:99:DE:36:7F:CC:CC:30:35:A6:F6:5F:03:C4:E0:38
Authority key identifier: 01:3F:6D:B0:FD:57:D1:9F:9E:E1:52:42:A2:E4:16:7E:FB:52:2D:04
Certificate issuer: /CN=013f6db0fd57d19f9ee15242a2e4167efb522d04
Certificate serial: 0196876DD3A848FA3D7759EED2AA62268099
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/f63307-4a0f-4053-8fc3-f535578984c2/1/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.mft
Manifest number: 09EE
Signing time: Wed 30 Apr 2025 16:00:43 +0000
Manifest this update: Wed 30 Apr 2025 16:00:43 +0000
Manifest next update: Thu 01 May 2025 16:00:43 +0000
Files and hashes: 1: AT9tsP1X0Z-e4VJCouQWfvtSLQQ.crl (hash: AJXUnv8NYcMvJ3RuyKT9XAmDe3t57pCEtchjHCPXJss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/f63307-4a0f-4053-8fc3-f535578984c2/1/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/f63307-4a0f-4053-8fc3-f535578984c2/1/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:6d:d3:a8:48:fa:3d:77:59:ee:d2:aa:62:26:80:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=013f6db0fd57d19f9ee15242a2e4167efb522d04
Validity
Not Before: Apr 30 16:00:43 2025 GMT
Not After : May 1 16:00:43 2025 GMT
Subject: CN=77ff5d212c99de367fcccc3035a6f65f03c4e038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f3:87:53:87:e6:ab:98:87:65:3e:a4:91:69:
3a:d6:d9:e2:a2:8b:a9:89:36:55:59:14:cf:b4:ad:
a2:13:7e:f6:80:d9:06:98:ef:69:a6:82:7b:b9:f3:
0e:53:41:4f:e8:cb:c9:c7:bd:8e:8c:72:77:19:e0:
d1:cc:c0:0c:48:fb:03:dd:1d:1f:8b:48:20:b7:2e:
68:9c:a5:28:1a:be:8b:e2:c7:2f:4f:50:5c:75:4e:
da:28:74:c3:d3:3f:a9:f9:b3:7c:bb:b0:e7:03:55:
75:d6:14:02:f3:16:d2:00:29:96:80:e9:3e:b5:8d:
da:20:f0:03:a9:05:26:ac:5c:a6:e1:fd:9e:17:31:
38:1a:a6:2a:e4:18:76:9d:0b:d0:2b:34:a8:6c:c6:
80:cb:20:12:c5:cf:6c:1a:42:e0:bd:2f:54:8b:7c:
58:97:7c:b4:25:e6:54:e0:90:ab:6f:f8:43:92:f5:
7d:ae:16:50:52:73:38:b7:41:82:f1:71:76:ad:bf:
96:78:cf:27:2b:e1:fa:f9:d6:40:2b:51:64:6c:e8:
82:32:86:82:73:b0:af:b3:53:f2:60:39:c4:8c:fc:
42:68:a9:26:9f:5a:38:fe:3f:b4:74:5d:d2:06:46:
de:64:5c:50:07:8f:36:f8:46:aa:c4:85:6f:87:a9:
2a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:FF:5D:21:2C:99:DE:36:7F:CC:CC:30:35:A6:F6:5F:03:C4:E0:38
X509v3 Authority Key Identifier:
keyid:01:3F:6D:B0:FD:57:D1:9F:9E:E1:52:42:A2:E4:16:7E:FB:52:2D:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f63307-4a0f-4053-8fc3-f535578984c2/1/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f63307-4a0f-4053-8fc3-f535578984c2/1/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:72:e6:ce:bc:6b:59:66:0d:a0:75:f7:c2:f6:85:58:14:b8:
d4:49:3b:2a:3a:ec:2b:d1:c4:35:75:df:6f:d3:95:28:9d:40:
79:3a:d7:46:96:26:1f:ac:5b:28:7a:41:80:7e:f2:44:90:22:
90:4e:bb:48:32:c4:18:10:67:3f:b5:71:99:26:ab:4e:42:f4:
5e:01:64:ab:ff:da:8d:b2:d6:d9:42:67:29:44:de:9a:f8:e0:
6f:f3:68:f4:94:04:9c:ae:c2:12:42:8c:9d:90:ac:15:7c:2c:
cc:ba:a9:87:46:0c:49:4b:44:e7:04:36:22:84:b8:04:86:15:
3b:be:04:78:1d:22:3d:f9:27:46:1e:c8:68:b0:a8:1a:1d:53:
ca:b6:88:7a:b9:84:39:b3:27:93:02:93:ce:46:a9:09:ad:5f:
7a:65:c6:89:eb:f3:fa:cd:b5:9b:32:20:cb:8b:1e:77:09:3c:
98:7e:64:9e:69:b4:ec:e0:ff:6e:a7:fa:e3:73:79:85:df:f4:
01:99:70:c7:bf:57:8b:7c:7c:06:ac:cc:16:7f:af:68:25:5a:
77:57:f6:32:aa:69:c9:7f:f9:c7:de:1f:28:1b:f4:eb:fa:dc:
b6:02:4f:12:38:33:bc:5e:26:23:91:1a:b9:fd:ad:ed:ca:da:
db:39:f4:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:27:56 2025 by rpki-client