Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.mft
File: 9yjCKwJQJ1-m63NLoA55D343pVA.mft (raw, json)
Hash identifier: MLm9rZX83iUe8nCbeLGeDIokFKViLzmsJrO/wIPY8gk=
Subject key identifier: 3D:27:3C:E9:83:F2:9A:62:E9:65:21:91:CF:3B:D5:C0:0C:BC:38:56
Authority key identifier: F7:28:C2:2B:02:50:27:5F:A6:EB:73:4B:A0:0E:79:0F:7E:37:A5:50
Certificate issuer: /CN=f728c22b0250275fa6eb734ba00e790f7e37a550
Certificate serial: 01967FB4C21F3AA00AF3C243A1DBB9A10715
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9yjCKwJQJ1-m63NLoA55D343pVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.mft
Manifest number: 0841
Signing time: Tue 29 Apr 2025 04:01:14 +0000
Manifest this update: Tue 29 Apr 2025 04:01:14 +0000
Manifest next update: Wed 30 Apr 2025 04:01:14 +0000
Files and hashes: 1: 9yjCKwJQJ1-m63NLoA55D343pVA.crl (hash: JBjjNsJ4guF0rC5vPYGuYt65aUtgoziSb2jXSu3dWxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9yjCKwJQJ1-m63NLoA55D343pVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:b4:c2:1f:3a:a0:0a:f3:c2:43:a1:db:b9:a1:07:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f728c22b0250275fa6eb734ba00e790f7e37a550
Validity
Not Before: Apr 29 04:01:14 2025 GMT
Not After : Apr 30 04:01:14 2025 GMT
Subject: CN=3d273ce983f29a62e9652191cf3bd5c00cbc3856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ff:8a:39:64:86:20:e9:54:d4:b3:01:90:ee:
8d:13:e3:95:5f:2a:ba:28:a2:b0:b6:e0:56:9e:da:
8b:a9:5f:9b:3c:b5:a6:c0:ce:c1:5a:a2:51:38:37:
b7:28:62:1d:cb:71:9c:66:d6:2d:c2:50:e9:de:d8:
3a:bb:de:01:70:9c:9a:c3:a5:0b:36:87:1a:e3:0a:
f5:d1:9b:b4:cc:f1:80:3d:76:0d:da:c3:6e:12:80:
26:e4:de:e4:fa:ea:11:18:e6:6b:66:d2:32:b2:8e:
70:1c:b5:42:61:2b:18:ae:c9:fd:5b:8a:7e:fd:d0:
9c:26:2c:c7:2e:90:7a:94:86:ed:5c:80:fb:45:c9:
0d:20:2d:f9:9a:73:4b:49:e0:83:05:9b:8b:8c:62:
52:40:09:fa:b7:6e:56:e5:07:e9:56:33:a8:96:fb:
e4:63:b7:22:c4:9c:ea:e5:6c:70:01:09:05:09:cc:
e6:49:c7:4b:d7:8a:ec:ef:63:da:3a:70:24:68:eb:
ec:54:67:8e:d4:41:cc:6f:de:2c:29:2e:1f:d9:c7:
4e:13:8c:b4:39:33:bf:f3:5c:5d:e0:9e:5f:c5:c8:
b4:a6:1b:df:96:90:f3:3d:45:30:19:4c:ec:04:6d:
60:47:55:0b:80:71:db:f2:e5:ec:94:c6:40:ec:95:
54:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:27:3C:E9:83:F2:9A:62:E9:65:21:91:CF:3B:D5:C0:0C:BC:38:56
X509v3 Authority Key Identifier:
keyid:F7:28:C2:2B:02:50:27:5F:A6:EB:73:4B:A0:0E:79:0F:7E:37:A5:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9yjCKwJQJ1-m63NLoA55D343pVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:e9:e1:fe:62:31:ab:87:26:af:c5:5f:6c:ac:2c:19:90:d0:
3b:80:17:4a:25:9f:3f:ae:26:e3:61:c2:71:91:d3:09:6b:b1:
7c:7f:b2:5b:19:98:ab:9e:37:e7:7e:db:15:80:e8:a7:b2:a8:
60:18:39:3d:b3:91:3f:4c:cb:fd:3b:70:c0:91:7f:c7:86:3c:
d0:93:e1:fc:3e:46:69:2e:11:6c:ef:85:ef:ce:0c:4c:26:33:
4d:2b:0a:2f:bf:c7:bb:7d:cd:3e:a6:5f:92:b8:86:70:08:d4:
13:ed:5c:88:e4:1a:da:ac:9a:1a:ac:20:c7:b3:e0:97:16:bf:
d8:3c:22:44:49:f3:d9:91:b0:5c:74:38:c3:22:17:01:48:92:
9d:5e:23:00:61:d7:53:28:31:69:de:8e:c3:7d:fe:18:3f:53:
02:80:31:69:7a:7c:0e:00:5b:1b:b2:21:bf:ce:11:80:9d:16:
4c:28:2a:94:1e:66:f2:92:50:3d:77:98:4b:34:6f:9b:f6:43:
30:ad:6a:80:fe:b5:a2:a7:ae:ba:a8:c7:50:2f:05:06:0a:f9:
01:75:0d:ed:eb:ff:b5:1a:c4:d8:00:4b:67:a0:05:37:bd:07:
29:57:82:3d:d8:f9:d8:29:b1:06:f1:9c:e3:74:84:fc:53:5b:
9d:f6:02:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 08:31:01 2025 by rpki-client