Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft
File: 9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft (raw, json)
Hash identifier: MEIa5EidMRXUo08JKDonjmsFU2ppdsjPvQuyWW0F0HY=
Subject key identifier: 3E:33:79:55:15:1F:58:E7:A4:F7:69:DB:3B:DD:29:05:68:01:6C:67
Authority key identifier: F6:95:27:A0:6A:03:5C:BC:AE:CF:00:DA:CA:2F:D8:83:99:CF:9D:12
Certificate issuer: /CN=f69527a06a035cbcaecf00daca2fd88399cf9d12
Certificate serial: 0196760C76505453AC3ABE06BE5AF164227E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9pUnoGoDXLyuzwDayi_Yg5nPnRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft
Manifest number: 0AD7
Signing time: Sun 27 Apr 2025 07:00:50 +0000
Manifest this update: Sun 27 Apr 2025 07:00:50 +0000
Manifest next update: Mon 28 Apr 2025 07:00:50 +0000
Files and hashes: 1: 9pUnoGoDXLyuzwDayi_Yg5nPnRI.crl (hash: 6x/4Y9r1ByeMe7SqF9id76Hvju8/sq7nd5Ynk8SZHXM=)
2: HnZ1VjQW735MMUi4UDqiepCAdeM.roa (hash: 31a3rYl8qptlSMbknXPbZIkMQ7iUM4ri0d4GzZPfheM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9pUnoGoDXLyuzwDayi_Yg5nPnRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:76:50:54:53:ac:3a:be:06:be:5a:f1:64:22:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69527a06a035cbcaecf00daca2fd88399cf9d12
Validity
Not Before: Apr 27 07:00:50 2025 GMT
Not After : Apr 28 07:00:50 2025 GMT
Subject: CN=3e337955151f58e7a4f769db3bdd290568016c67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d1:a8:94:20:80:74:9d:5a:3f:96:78:3c:c0:
30:5c:e0:c6:75:63:1a:22:47:ba:9e:57:a9:36:4f:
74:b9:95:44:b3:37:ee:7c:82:95:cb:b8:dd:c6:28:
ee:9b:25:b4:d8:a9:26:6f:25:32:81:85:5c:8f:4d:
28:7e:77:1b:53:2f:57:b2:20:ca:9f:2d:32:ec:bc:
7f:44:9b:8a:83:37:81:1b:01:3d:bb:de:8c:e3:c0:
5c:e7:4b:1f:8a:98:31:d7:ba:b5:8f:42:fe:00:f2:
04:62:83:52:7e:b5:f4:b2:5b:25:9b:0b:0a:9c:ca:
65:02:22:69:c1:ab:bc:fe:1d:26:69:b4:5d:c9:f2:
29:1b:52:b9:be:40:08:63:5d:a9:df:3c:2d:e1:5f:
b0:d8:88:f8:fe:ef:e3:ae:ad:0e:6e:9c:ef:83:1e:
e1:ea:d5:3c:a5:c0:4a:fe:bb:af:ef:18:c3:3c:8b:
33:64:27:5d:8f:f6:4f:b7:87:b6:03:c9:c6:f4:e9:
31:42:04:f5:6e:eb:e1:a0:9d:d9:3a:98:c9:5b:ae:
27:36:f2:ec:be:23:46:05:cd:cf:2c:63:83:7d:2b:
95:95:96:0f:14:3a:17:35:43:75:4a:f2:ed:f3:c2:
32:bf:2f:16:e8:12:a8:ea:30:a1:5f:ff:c0:97:ad:
34:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:33:79:55:15:1F:58:E7:A4:F7:69:DB:3B:DD:29:05:68:01:6C:67
X509v3 Authority Key Identifier:
keyid:F6:95:27:A0:6A:03:5C:BC:AE:CF:00:DA:CA:2F:D8:83:99:CF:9D:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pUnoGoDXLyuzwDayi_Yg5nPnRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:9c:66:da:92:70:51:7b:f6:17:b3:b2:99:1a:96:d1:68:f8:
8a:cd:dc:be:2d:a0:bc:8c:8a:f0:0e:eb:bc:93:3c:db:f8:83:
06:75:45:6e:ef:47:74:c9:26:08:a2:e3:a5:cf:22:c8:56:3a:
29:2c:7c:9d:2b:cc:59:44:21:63:6e:7f:9a:17:5d:f1:14:25:
aa:ad:4e:d4:72:cb:8b:ad:73:9e:e5:b6:16:72:8e:a2:fa:72:
7c:78:a1:4f:76:5e:4b:8d:d7:e8:dc:61:6e:1a:76:6e:4f:35:
f1:bd:40:46:7b:c1:aa:70:e7:b9:f1:c7:c8:49:e8:78:a8:cb:
8a:f1:3a:a4:a0:70:49:97:c5:84:dc:6d:24:6f:c7:4e:b2:e6:
1e:c2:45:a9:79:45:a2:ae:45:a6:2c:ec:39:0b:b5:05:58:9d:
8a:47:10:ab:8f:7d:65:7c:f1:03:39:60:d0:a5:49:de:22:01:
f5:79:b0:aa:be:ab:a7:a6:c8:e7:6c:d1:72:ea:bc:89:a6:b6:
5d:22:a9:74:84:76:df:da:cc:fb:da:83:4c:73:a0:74:00:80:
97:91:d5:ce:7f:dd:49:df:b8:41:de:f4:7f:4e:71:e3:ab:19:
ba:57:1c:25:92:1e:cf:71:97:f7:03:cc:6c:2f:36:22:3e:60:
b2:46:3d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:59:12 2025 by rpki-client