
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/14d7b8-afce-45a1-b272-04d96fa83d07/1/_9YayMVuOP32EjgDbHNUcnADRjE.mft
File: _9YayMVuOP32EjgDbHNUcnADRjE.mft (raw, json)
Hash identifier: 7DNOAyv5vjI2vtwM/uZ4e2WfcnKQ/f6POq+pDH4/hgg=
Subject key identifier: 6A:6D:C4:6D:ED:FB:79:31:5E:B5:D9:55:5D:D6:66:CE:0A:99:42:2E
Authority key identifier: FF:D6:1A:C8:C5:6E:38:FD:F6:12:38:03:6C:73:54:72:70:03:46:31
Certificate issuer: /CN=ffd61ac8c56e38fdf61238036c73547270034631
Certificate serial: 0196790D708E5338176A8B89D7EA1818F873
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_9YayMVuOP32EjgDbHNUcnADRjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/14d7b8-afce-45a1-b272-04d96fa83d07/1/_9YayMVuOP32EjgDbHNUcnADRjE.mft
Manifest number: 1510
Signing time: Sun 27 Apr 2025 21:00:46 +0000
Manifest this update: Sun 27 Apr 2025 21:00:46 +0000
Manifest next update: Mon 28 Apr 2025 21:00:46 +0000
Files and hashes: 1: _9YayMVuOP32EjgDbHNUcnADRjE.crl (hash: oqwsCeUupQreOw2QEOXxFT4UORyeoZZI7vSHzhcG4cQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/14d7b8-afce-45a1-b272-04d96fa83d07/1/_9YayMVuOP32EjgDbHNUcnADRjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/14d7b8-afce-45a1-b272-04d96fa83d07/1/_9YayMVuOP32EjgDbHNUcnADRjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_9YayMVuOP32EjgDbHNUcnADRjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:0d:70:8e:53:38:17:6a:8b:89:d7:ea:18:18:f8:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffd61ac8c56e38fdf61238036c73547270034631
Validity
Not Before: Apr 27 21:00:46 2025 GMT
Not After : Apr 28 21:00:46 2025 GMT
Subject: CN=6a6dc46dedfb79315eb5d9555dd666ce0a99422e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:59:7b:e3:37:fa:37:4d:c7:62:54:93:5e:9b:
5d:d0:7b:54:1a:b7:a6:ca:a4:fb:8b:08:95:47:8d:
be:bb:82:60:e6:7b:4b:fc:cc:d5:b6:bc:1f:d3:11:
04:0c:94:23:50:61:16:c4:f5:d3:d9:e5:68:69:86:
70:b0:e6:77:c5:81:fa:d4:9f:17:ad:ad:39:59:eb:
e3:fc:f0:17:64:0e:80:c4:4f:07:a5:a9:2a:e1:2d:
1a:fd:33:7e:27:8d:e8:30:31:34:15:96:67:8b:14:
46:ce:da:6e:c1:4b:3f:45:c0:cc:fd:40:3d:6c:4d:
e5:94:96:e0:5a:2a:48:97:e4:61:9c:21:ca:ea:f0:
8b:e2:8a:d8:76:0c:14:8d:cd:18:c3:51:fe:73:86:
76:67:e0:73:f6:6e:7b:97:2b:d6:1d:54:f2:c5:eb:
fb:46:39:ca:4e:02:50:15:02:42:d4:d6:a0:e0:75:
62:07:69:c0:43:04:4a:bc:55:65:e2:7b:74:28:67:
1c:dd:79:45:84:4d:8c:26:c7:5e:1b:20:b1:4a:ee:
fe:c3:52:53:e0:f7:78:53:77:d7:1d:04:e1:1c:ca:
76:7e:5f:aa:76:12:70:d8:fb:2c:e3:18:8b:64:41:
01:f8:e3:4d:28:49:17:f0:ac:7c:54:4c:db:c4:d0:
c4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:6D:C4:6D:ED:FB:79:31:5E:B5:D9:55:5D:D6:66:CE:0A:99:42:2E
X509v3 Authority Key Identifier:
keyid:FF:D6:1A:C8:C5:6E:38:FD:F6:12:38:03:6C:73:54:72:70:03:46:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_9YayMVuOP32EjgDbHNUcnADRjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/14d7b8-afce-45a1-b272-04d96fa83d07/1/_9YayMVuOP32EjgDbHNUcnADRjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/14d7b8-afce-45a1-b272-04d96fa83d07/1/_9YayMVuOP32EjgDbHNUcnADRjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:eb:df:11:3d:b0:04:1f:52:c2:fd:4b:1e:2e:55:3b:29:2e:
90:68:83:07:05:c5:4e:29:f9:11:5c:3c:06:d5:11:55:3a:e2:
fa:ea:56:de:b0:17:87:36:11:d4:1a:15:78:80:b3:49:cd:0c:
e0:08:04:c5:a0:ef:5c:34:8e:80:b1:66:14:eb:7a:4c:43:84:
47:99:cf:e0:6c:b8:8c:3f:b6:f1:9d:56:dc:ff:cc:13:29:99:
16:1a:54:1e:a1:fa:1a:dc:1d:00:9d:af:10:27:2f:69:25:1a:
b4:99:28:62:b2:51:4d:43:45:a0:8b:6e:ae:ca:2c:f4:d5:71:
ee:3b:74:96:d7:51:ed:50:da:36:1c:e5:6a:8a:8e:05:0f:f4:
79:e8:e4:12:7d:b3:60:f1:06:1f:06:4f:1a:ed:9a:6a:5f:dc:
ba:1c:89:75:94:b2:c4:e4:4c:b4:11:40:b3:36:aa:9c:0c:59:
17:fa:a0:00:29:0a:d4:94:83:43:12:10:ca:ba:dd:ad:46:56:
4c:be:8a:0e:4f:e3:2c:48:94:4b:16:1f:3e:d0:80:ba:4d:60:
34:c9:e7:5b:c2:d8:97:f6:f2:53:72:65:b2:65:98:c6:a3:b7:
87:a5:8f:49:34:ce:59:33:a0:ed:61:58:53:42:2b:53:b8:ca:
72:16:ac:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:48:55 2025 by rpki-client