Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.mft
File: 9pRmi6ds9VDEE5wXMAFgB33OoFk.mft (raw, json)
Hash identifier: dT2Pqlz+wmhY4A9Qo8EDMGQHUpJGxzlG18uJL7W9h2Y=
Subject key identifier: BD:42:6A:70:9E:4B:80:D0:FC:05:7D:61:E5:1E:36:42:BF:5C:BF:C1
Authority key identifier: F6:94:66:8B:A7:6C:F5:50:C4:13:9C:17:30:01:60:07:7D:CE:A0:59
Certificate issuer: /CN=f694668ba76cf550c4139c17300160077dcea059
Certificate serial: 019675D5674132BBBE6AE3C48146A3C2465A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9pRmi6ds9VDEE5wXMAFgB33OoFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.mft
Manifest number: 0E87
Signing time: Sun 27 Apr 2025 06:00:41 +0000
Manifest this update: Sun 27 Apr 2025 06:00:41 +0000
Manifest next update: Mon 28 Apr 2025 06:00:41 +0000
Files and hashes: 1: 2JNf8PoETHUWKrlbGvJA_rrI9NI.roa (hash: 1FKPW+J1lE2HkIdpCVRmwjCFGmaaz0tFXqdGn/MO/uM=)
2: 9pRmi6ds9VDEE5wXMAFgB33OoFk.crl (hash: JaA6Fzeksd2uLG4+I/BBaRrpD7iUfQUzD+QacXC4dbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9pRmi6ds9VDEE5wXMAFgB33OoFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:d5:67:41:32:bb:be:6a:e3:c4:81:46:a3:c2:46:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f694668ba76cf550c4139c17300160077dcea059
Validity
Not Before: Apr 27 06:00:41 2025 GMT
Not After : Apr 28 06:00:41 2025 GMT
Subject: CN=bd426a709e4b80d0fc057d61e51e3642bf5cbfc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:49:be:00:54:b1:90:17:2e:24:89:fc:cc:05:
ea:37:48:ba:4d:47:c9:4a:1b:8b:c7:dc:bd:85:bb:
82:95:18:3e:96:bb:4e:26:90:7e:08:ca:38:fb:86:
cf:a8:dd:db:08:80:ca:7d:0c:eb:df:57:59:62:6b:
f8:be:0d:cc:45:a5:9f:d8:8e:63:8e:76:21:65:87:
39:a7:29:51:d9:07:02:56:33:79:a3:ef:c6:a5:2b:
f9:8e:36:53:49:51:2d:f7:e1:fc:fd:57:38:3f:04:
4b:07:51:fc:98:dd:e7:a0:4d:e4:91:09:73:62:12:
b5:0d:e7:43:72:02:ef:1b:2f:7c:55:ca:7b:a7:f7:
91:70:f9:70:9a:ae:7f:6f:87:6b:27:82:58:80:50:
c5:c2:f5:05:52:a1:18:d4:ac:de:70:49:7d:43:a5:
9a:c6:d6:ab:c6:0a:d9:c1:fd:ea:07:31:de:c9:3e:
f9:da:db:15:f1:bf:ae:93:37:57:9e:ed:3e:49:0e:
4d:4e:39:eb:3e:0a:54:80:c5:ef:0a:a5:4c:47:c8:
96:9d:7e:3c:81:d5:97:b6:12:e1:13:c0:a7:4a:32:
8a:7b:d8:b2:9c:28:83:7f:a3:1a:63:69:7e:1c:ef:
51:74:1c:33:bc:e5:1d:19:40:5a:40:4e:f2:80:8b:
39:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:42:6A:70:9E:4B:80:D0:FC:05:7D:61:E5:1E:36:42:BF:5C:BF:C1
X509v3 Authority Key Identifier:
keyid:F6:94:66:8B:A7:6C:F5:50:C4:13:9C:17:30:01:60:07:7D:CE:A0:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pRmi6ds9VDEE5wXMAFgB33OoFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:07:89:50:c3:11:f9:6a:24:86:74:5b:58:0f:c0:c7:8e:7f:
35:c7:7f:8d:4a:4b:ec:0e:e2:4d:66:c2:b2:73:b0:a3:93:9b:
dc:16:97:6b:1d:c3:d9:8c:76:ad:1a:73:e4:09:23:ef:8d:be:
00:3e:ab:c6:37:d6:e6:dd:ea:5b:4b:4a:cb:c8:9f:b7:f3:c0:
d7:a6:ca:b5:06:e5:97:ab:22:4d:6c:05:de:b4:01:1d:4f:2a:
aa:6c:46:3e:40:90:c9:d2:73:da:b0:03:a7:c4:df:9f:62:e7:
08:a7:72:1e:6e:d3:25:49:13:30:59:d5:3d:57:3c:e2:43:5c:
12:a0:09:91:fd:be:6e:03:6d:0d:56:9d:bc:29:da:63:8f:57:
2c:4c:1a:78:0b:3e:38:b5:91:31:84:2f:df:2e:71:78:04:80:
88:44:54:05:37:09:84:01:5f:2f:ec:d2:da:de:b3:3c:4c:e9:
3d:8f:c0:ef:45:62:3c:8c:cf:47:df:f1:98:37:78:8c:53:5f:
7b:47:50:0f:86:43:cb:7a:1f:c5:a2:4b:00:3d:d2:5c:fb:fe:
84:40:9d:26:0f:2f:2e:4a:db:70:f6:c7:48:6c:1c:ed:35:79:
39:50:21:46:35:c9:4d:21:bd:ae:37:b9:e9:f3:83:61:5b:b5:
f4:ee:59:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:53:20 2025 by rpki-client