Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.mft
File: 9l50I9P3sbLnrMG6HO4CQLfWedY.mft (raw, json)
Hash identifier: oZhH0rxuh80Hq8/jEE9UGJ5hb0Z2CHTZTCd51+Q1nj0=
Subject key identifier: 69:88:90:C1:45:66:34:82:91:A4:9C:00:66:39:F3:BD:C9:AE:C5:00
Authority key identifier: F6:5E:74:23:D3:F7:B1:B2:E7:AC:C1:BA:1C:EE:02:40:B7:D6:79:D6
Certificate issuer: /CN=f65e7423d3f7b1b2e7acc1ba1cee0240b7d679d6
Certificate serial: 01968AA5E510A19661D7F57594EE47B70394
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9l50I9P3sbLnrMG6HO4CQLfWedY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.mft
Manifest number: 1519
Signing time: Thu 01 May 2025 07:00:49 +0000
Manifest this update: Thu 01 May 2025 07:00:49 +0000
Manifest next update: Fri 02 May 2025 07:00:49 +0000
Files and hashes: 1: 9l50I9P3sbLnrMG6HO4CQLfWedY.crl (hash: 16GoK78wcEchwhay+zibBgu+K7CzAA//S77VaNg3sQg=)
2: FAJKZDo6nLNipexAJT8L9FAGXrE.roa (hash: NVIidy7uobZX7hs2QRQ052g+pZeZGSMOgKQJmZ0nDuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9l50I9P3sbLnrMG6HO4CQLfWedY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:a5:e5:10:a1:96:61:d7:f5:75:94:ee:47:b7:03:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f65e7423d3f7b1b2e7acc1ba1cee0240b7d679d6
Validity
Not Before: May 1 07:00:49 2025 GMT
Not After : May 2 07:00:49 2025 GMT
Subject: CN=698890c14566348291a49c006639f3bdc9aec500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c6:fc:07:52:43:a0:0f:77:74:bd:68:35:7d:
ed:e7:2c:9f:a5:e3:82:21:9d:25:e3:c9:75:19:8a:
19:93:4e:d5:97:59:13:94:73:37:3d:c1:c7:65:44:
fe:1b:4b:93:c6:d4:f2:98:74:a3:0e:6a:cd:7f:d7:
24:0f:d8:94:ce:76:a8:af:5d:a5:2a:46:82:8d:b0:
9c:b1:40:8f:8e:b6:c9:5b:24:fd:b5:f7:f0:8a:a6:
62:26:2a:4f:72:b8:89:aa:7a:d9:ca:da:09:d3:e4:
cd:ad:06:a0:28:22:ee:67:1d:e7:96:33:ee:a7:9e:
ab:89:51:87:d5:fb:9a:b5:48:4b:e3:1e:d2:54:2e:
98:65:aa:10:3e:18:f2:aa:c7:97:6b:cd:f4:ee:cb:
ce:02:b2:70:ab:94:85:f6:c8:fe:d2:5f:7c:31:dd:
07:27:ae:c0:e1:c0:cb:fb:fa:cb:45:71:6a:78:eb:
75:5d:4a:22:5b:c3:1d:94:89:75:3f:4f:17:7c:0e:
62:2f:de:c8:e8:df:9a:92:66:ee:f4:54:55:a2:fe:
59:25:12:e3:74:28:b4:f2:54:04:be:5b:ca:25:7a:
04:8a:04:e7:58:f5:44:29:0b:99:3a:7f:7b:11:a8:
45:ea:4e:da:38:ee:bb:ad:09:bd:df:f3:c3:ec:e0:
69:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:88:90:C1:45:66:34:82:91:A4:9C:00:66:39:F3:BD:C9:AE:C5:00
X509v3 Authority Key Identifier:
keyid:F6:5E:74:23:D3:F7:B1:B2:E7:AC:C1:BA:1C:EE:02:40:B7:D6:79:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9l50I9P3sbLnrMG6HO4CQLfWedY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:9e:37:fd:81:e0:dd:a2:08:b4:a6:6a:64:cb:6a:5f:9d:fa:
a7:83:7d:f4:77:14:6d:bc:23:30:82:a1:56:87:6a:fc:c8:7c:
23:1b:dd:7d:94:58:6a:e1:23:9e:10:b4:8c:96:0b:c6:29:f5:
b1:34:0f:1d:ba:80:bb:ab:33:56:58:cc:99:5a:61:7d:09:80:
5f:cf:55:c9:9c:7d:33:55:f3:21:77:89:c1:5a:97:3f:7b:2d:
47:3e:09:8f:30:7e:9c:2d:7e:12:98:3f:26:a5:ad:9b:3d:bc:
ce:a6:27:1a:22:a9:f5:2a:64:72:bb:50:c7:d3:f6:3a:90:ba:
9d:56:b1:0c:23:ea:d1:d7:ba:9c:49:10:6f:1e:95:82:d0:44:
c9:89:87:c5:65:d3:80:31:ff:c3:1c:2e:3a:ea:16:64:33:09:
99:1d:ba:ca:07:42:cc:1a:be:5d:28:16:7b:7e:fd:10:31:4f:
23:77:d4:a4:d6:f1:b5:d5:07:6d:0c:95:55:c1:bc:3a:94:df:
03:3d:b5:c1:e8:36:bb:00:44:fe:cf:20:75:5e:e1:6c:b0:fb:
04:2e:34:85:82:6d:3f:9d:8f:1b:d8:e6:b5:44:ff:21:bd:4b:
71:2c:a9:9a:d7:d9:b6:2d:ba:a4:64:ce:e6:16:1c:72:4f:e5:
4f:cb:ce:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:03:04 2025 by rpki-client