Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/0947f2-22ca-47cb-89ad-3e50a5f01998/1/f9GKakmRDMMx3JERSuWbcYXV8w0.mft
File: f9GKakmRDMMx3JERSuWbcYXV8w0.mft (raw, json)
Hash identifier: TOHu/3ue6bb9iQteYhEM0rQzJ6OuwKBS985vuBUUfck=
Subject key identifier: 9D:9E:F1:FB:35:02:06:2D:4D:7E:12:6F:97:0B:4B:1A:A2:89:7D:46
Authority key identifier: 7F:D1:8A:6A:49:91:0C:C3:31:DC:91:11:4A:E5:9B:71:85:D5:F3:0D
Certificate issuer: /CN=7fd18a6a49910cc331dc91114ae59b7185d5f30d
Certificate serial: 01967F7D18BF441B4625F18BCA71CAB46DF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f9GKakmRDMMx3JERSuWbcYXV8w0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/0947f2-22ca-47cb-89ad-3e50a5f01998/1/f9GKakmRDMMx3JERSuWbcYXV8w0.mft
Manifest number: 1514
Signing time: Tue 29 Apr 2025 03:00:26 +0000
Manifest this update: Tue 29 Apr 2025 03:00:26 +0000
Manifest next update: Wed 30 Apr 2025 03:00:26 +0000
Files and hashes: 1: V0avlIfWr1Ry2dGFNI3vVU-t6qU.roa (hash: 9Z/Tt+Wupiygby78OxWX59dKpP6JLPmGNyGTYRjbjHQ=)
2: f9GKakmRDMMx3JERSuWbcYXV8w0.crl (hash: i2vtkw6VkQ51RFLf0yH03RvPZz+CyeBl55+4Ohsu1dU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/0947f2-22ca-47cb-89ad-3e50a5f01998/1/f9GKakmRDMMx3JERSuWbcYXV8w0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/0947f2-22ca-47cb-89ad-3e50a5f01998/1/f9GKakmRDMMx3JERSuWbcYXV8w0.mft
rsync://rpki.ripe.net/repository/DEFAULT/f9GKakmRDMMx3JERSuWbcYXV8w0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 03:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:7d:18:bf:44:1b:46:25:f1:8b:ca:71:ca:b4:6d:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fd18a6a49910cc331dc91114ae59b7185d5f30d
Validity
Not Before: Apr 29 03:00:26 2025 GMT
Not After : Apr 30 03:00:26 2025 GMT
Subject: CN=9d9ef1fb3502062d4d7e126f970b4b1aa2897d46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3b:74:72:ec:b7:89:79:9e:93:28:d4:1b:1f:
55:12:a0:27:3b:3a:4a:c7:34:6b:d0:c1:33:1f:9a:
dc:57:74:6d:2f:33:c9:17:01:22:e6:90:02:97:8c:
56:eb:04:b8:0e:fb:09:73:96:ff:0a:89:75:f8:a0:
61:ad:c1:81:f5:be:f2:45:1a:6c:86:df:44:2e:9c:
44:82:b0:90:de:c3:40:1a:91:f4:65:5b:ec:19:18:
84:d4:d8:30:37:1e:23:1c:1f:2c:87:3e:06:9d:f7:
4e:c8:74:fc:db:b2:6b:2c:0f:ca:8f:9c:d2:65:ce:
b3:3b:9e:67:00:ca:97:f7:9c:0b:12:04:55:f0:df:
f2:85:84:c2:99:2d:09:dd:e6:31:b7:e3:fb:c8:0e:
e7:10:9c:29:44:c6:fb:54:8f:55:28:ca:73:cc:9a:
ae:27:b5:7c:89:ab:58:1e:15:63:7e:a5:6f:6d:17:
86:f6:da:e4:6c:dd:81:90:13:03:b2:b2:b9:7f:62:
1e:d5:9b:5b:a4:1a:be:65:24:10:6f:dd:cf:68:28:
2d:10:c9:78:62:3b:ee:ad:79:da:ba:60:e4:e2:e2:
cf:a8:b1:8f:97:cb:12:4e:e5:df:40:57:72:65:d1:
94:22:49:7d:89:53:99:b6:0c:51:f0:0b:6e:70:93:
69:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:9E:F1:FB:35:02:06:2D:4D:7E:12:6F:97:0B:4B:1A:A2:89:7D:46
X509v3 Authority Key Identifier:
keyid:7F:D1:8A:6A:49:91:0C:C3:31:DC:91:11:4A:E5:9B:71:85:D5:F3:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9GKakmRDMMx3JERSuWbcYXV8w0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0947f2-22ca-47cb-89ad-3e50a5f01998/1/f9GKakmRDMMx3JERSuWbcYXV8w0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0947f2-22ca-47cb-89ad-3e50a5f01998/1/f9GKakmRDMMx3JERSuWbcYXV8w0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:56:9f:0c:62:3f:9f:71:cd:7c:65:b9:36:75:d7:82:25:7d:
eb:ac:79:31:97:be:70:92:46:a2:a0:54:86:2e:d7:9c:cd:05:
93:8a:07:6c:49:87:8a:45:5c:cf:03:31:76:b0:28:5b:fd:e1:
4f:06:ac:4d:01:1f:4a:32:4d:a7:fa:cb:ee:d5:1c:56:e1:4c:
ef:0e:a2:78:38:b2:bb:01:92:f5:6a:7f:28:37:1e:50:88:b3:
e2:cb:6e:24:aa:97:1b:a0:6f:c0:3f:14:1b:73:a6:fd:ac:60:
49:d8:24:eb:7e:62:3d:56:f9:2e:4e:5d:9e:12:37:44:69:50:
ab:4a:aa:03:74:66:28:e0:ab:d6:bd:12:f2:69:09:c8:19:40:
0c:d2:b6:13:77:ce:a7:b3:9d:43:f1:de:1a:1b:d7:fd:81:64:
c7:44:f6:54:97:4b:3a:8d:17:9f:21:d4:d0:7a:1a:ac:09:6c:
64:c5:9b:47:6e:e6:96:cf:92:78:37:cd:73:f6:45:75:48:58:
92:eb:54:ce:f2:ba:37:f6:8b:9c:88:d6:d7:fc:28:7c:0b:54:
64:06:86:bb:a5:82:1a:9f:c8:fe:7e:b9:af:59:1e:98:72:a2:
3a:26:0f:51:43:79:2c:4e:63:2f:28:38:0e:48:69:47:7c:41:
dd:4a:9d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:27:12 2025 by rpki-client