Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
File: 9poKXR6NVCSOh2Z-mIPJAvF14uc.mft (raw, json)
Hash identifier: Fu1/O4lpaJUnSuR2L3hxCBRgM6CqdiPB7ZXhGjYl67I=
Subject key identifier: CC:E2:54:48:99:89:B2:44:E7:EC:26:AC:E2:06:A7:5F:71:14:AF:82
Authority key identifier: F6:9A:0A:5D:1E:8D:54:24:8E:87:66:7E:98:83:C9:02:F1:75:E2:E7
Certificate issuer: /CN=f69a0a5d1e8d54248e87667e9883c902f175e2e7
Certificate serial: 019685487B31CB970720B6E2D9CEEEDEDB73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
Manifest number: 1517
Signing time: Wed 30 Apr 2025 06:00:41 +0000
Manifest this update: Wed 30 Apr 2025 06:00:41 +0000
Manifest next update: Thu 01 May 2025 06:00:41 +0000
Files and hashes: 1: 9poKXR6NVCSOh2Z-mIPJAvF14uc.crl (hash: cAtK+S08pUew8pVSKD9tXf7zpRzxEXZTbZqwtU+tyJw=)
2: HmMkZMs_L5qVhevMb58XTv8ACos.roa (hash: p6Cspm4w36V6nse6CJ6sMJJCGrV41tHwZhdpXbj7GQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:48:7b:31:cb:97:07:20:b6:e2:d9:ce:ee:de:db:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69a0a5d1e8d54248e87667e9883c902f175e2e7
Validity
Not Before: Apr 30 06:00:41 2025 GMT
Not After : May 1 06:00:41 2025 GMT
Subject: CN=cce254489989b244e7ec26ace206a75f7114af82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3f:a2:2f:b3:db:8b:10:fa:64:87:39:a2:5d:
d3:ed:4c:11:b9:ce:a1:00:a9:19:92:ec:f0:c9:a3:
13:3b:1d:35:5b:ac:03:ca:e1:f9:13:cd:6d:68:1e:
6e:10:02:f7:db:a5:e0:68:86:7b:14:a0:c8:14:4d:
05:c9:e2:60:7c:fc:71:a1:7c:72:c3:e6:e4:2f:71:
ab:5f:28:fe:c3:0e:22:01:73:b7:d2:6b:f6:f0:6f:
e5:14:05:2a:e0:ec:f3:43:63:83:75:8a:3d:f8:fc:
55:34:ad:c2:5f:68:31:f7:90:6a:89:9e:d7:7d:eb:
6c:7c:4e:d2:10:ff:b3:6e:1a:41:09:34:fb:1a:bf:
bf:d2:6f:6a:1c:70:57:b2:27:71:b6:11:0a:8b:ab:
7c:6e:79:e2:1f:c3:d2:c0:8b:61:ba:8e:25:e1:5e:
8b:4d:b7:05:66:e7:3b:b8:1a:72:e4:2e:32:0b:6f:
70:a1:d3:2b:b3:06:08:4f:a5:6f:fe:3d:bf:71:5e:
b5:5f:ac:35:50:e7:ef:e0:4a:d1:cb:50:1a:6a:90:
af:47:e8:f5:bc:5c:6b:48:98:fb:f4:81:93:8a:12:
9e:7a:37:f2:d3:ff:78:dc:b1:1d:c8:6b:28:d2:fd:
54:fe:4a:72:45:27:eb:fd:4d:e0:e8:e8:cf:f4:3b:
ad:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:E2:54:48:99:89:B2:44:E7:EC:26:AC:E2:06:A7:5F:71:14:AF:82
X509v3 Authority Key Identifier:
keyid:F6:9A:0A:5D:1E:8D:54:24:8E:87:66:7E:98:83:C9:02:F1:75:E2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:cd:7f:cb:8e:a1:6e:f1:18:a1:84:1e:2f:8f:94:ad:6d:64:
6a:be:91:4d:ed:86:38:3f:2b:87:3b:d2:75:d2:26:6d:0d:b7:
81:87:78:78:5a:e7:3b:6d:fe:51:87:67:f7:29:dc:bf:36:47:
d0:e7:43:6f:86:2a:d6:dc:ab:45:bd:fd:5a:e1:f2:92:33:37:
44:08:4d:b6:94:e1:66:80:ff:43:e5:49:5e:0a:43:4d:48:81:
b5:c5:93:3f:43:dd:ec:89:0e:20:cc:0e:15:a8:e2:7a:b6:9d:
0d:1e:c3:b0:45:05:ef:b2:cb:76:5d:4e:8a:bd:b8:a8:00:b5:
fc:0e:12:74:1e:20:0a:19:27:78:2f:49:5a:b6:bd:d9:bc:ca:
58:d2:36:50:0f:48:d8:c5:69:94:b1:b2:68:8e:76:54:06:11:
cb:3d:5b:36:f3:cc:0c:8a:65:03:6d:c2:6e:42:e6:a1:ce:60:
e3:7f:84:f3:b4:00:8e:76:6a:48:45:9b:3e:30:b0:e4:d4:2c:
77:f7:11:3a:44:c7:50:f8:47:58:dc:14:61:d7:d1:61:08:c2:
87:94:9a:f2:2c:dd:94:b0:e3:03:8b:e2:b7:f9:f4:3b:79:47:
9f:72:c7:bc:53:70:a3:86:02:35:26:54:41:ac:43:6d:a7:bc:
b9:b7:10:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 12:35:57 2025 by rpki-client