Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.mft
File: 9iwrcwAEBoJN-8euOIbreGf47G4.mft (raw, json)
Hash identifier: hbTblzeMZXNQiDhP2zQJq0kfXMko3efFN9OrX49y57k=
Subject key identifier: FC:45:4F:28:D6:8F:CA:F4:47:38:ED:F6:97:3E:11:53:21:CD:C0:35
Authority key identifier: F6:2C:2B:73:00:04:06:82:4D:FB:C7:AE:38:86:EB:78:67:F8:EC:6E
Certificate issuer: /CN=f62c2b73000406824dfbc7ae3886eb7867f8ec6e
Certificate serial: 01968812C6FA1D08001E0BFE20A4DC7884C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9iwrcwAEBoJN-8euOIbreGf47G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.mft
Manifest number: 1517
Signing time: Wed 30 Apr 2025 19:00:53 +0000
Manifest this update: Wed 30 Apr 2025 19:00:53 +0000
Manifest next update: Thu 01 May 2025 19:00:53 +0000
Files and hashes: 1: 9iwrcwAEBoJN-8euOIbreGf47G4.crl (hash: WP9QeTIsN9yeBslZG0f+G2PZfoYy8PMu+Mfv3fH6NRw=)
2: ceDg72YenqK4_dFvq8QBAcGglOc.roa (hash: Zws7AOUBGinLUnjZoVBw7x3JkyX35Jt03arL9swrd5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9iwrcwAEBoJN-8euOIbreGf47G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 19:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:88:12:c6:fa:1d:08:00:1e:0b:fe:20:a4:dc:78:84:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f62c2b73000406824dfbc7ae3886eb7867f8ec6e
Validity
Not Before: Apr 30 19:00:53 2025 GMT
Not After : May 1 19:00:53 2025 GMT
Subject: CN=fc454f28d68fcaf44738edf6973e115321cdc035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:03:fa:9e:4b:db:df:c4:c5:69:d0:20:11:6d:
89:5f:03:72:42:5b:46:3d:8c:77:57:f8:c1:a4:9f:
45:0b:89:15:2e:5b:26:57:9c:05:88:97:29:a7:05:
f7:21:4a:6d:a3:93:ab:7d:02:a8:ec:66:29:65:df:
9e:70:02:1d:eb:2c:93:aa:7d:54:70:27:2a:44:3e:
38:7b:36:ee:9b:13:f7:72:bd:07:b0:84:d4:a8:5f:
e6:2f:39:2a:12:65:33:21:8a:8c:18:0c:d3:dd:11:
13:40:84:53:6f:c3:6b:af:da:38:fa:4a:52:a4:df:
72:ca:d6:9b:38:01:d7:bb:18:c4:70:4e:ad:ef:82:
f9:1c:23:d8:58:7a:f9:ad:15:9c:5c:2b:71:27:98:
82:d3:3c:47:49:8b:98:df:bc:d8:96:75:39:4c:2a:
38:f3:1e:48:ab:f7:0d:f7:79:7a:8c:cb:79:fb:05:
0f:2e:46:a0:53:8c:1a:c8:48:63:09:23:d1:e5:e4:
23:aa:d0:9d:c7:ef:d4:43:dc:91:0f:c4:5d:a5:76:
e0:ff:36:1e:49:f0:7d:bf:a7:67:07:45:ea:38:fb:
30:3d:de:44:42:c8:3e:e8:6e:d3:dd:52:0e:b7:a3:
78:12:ae:0f:43:fb:5b:66:cf:dd:3c:7d:e9:4a:86:
72:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:45:4F:28:D6:8F:CA:F4:47:38:ED:F6:97:3E:11:53:21:CD:C0:35
X509v3 Authority Key Identifier:
keyid:F6:2C:2B:73:00:04:06:82:4D:FB:C7:AE:38:86:EB:78:67:F8:EC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9iwrcwAEBoJN-8euOIbreGf47G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:d0:47:d8:5b:9f:96:0a:e1:ce:0d:f4:b6:87:2c:1c:22:d3:
7c:5a:17:94:22:2b:18:99:44:a0:34:98:32:9b:e0:23:8e:61:
3a:7f:0c:8e:18:e3:19:b3:cb:17:db:e2:0e:2c:45:99:e7:78:
23:b0:83:30:89:30:74:68:38:4e:47:cf:0d:39:bd:32:fd:37:
e0:61:57:a3:2e:89:8e:a9:c5:ab:3a:f0:8d:9f:df:7e:82:1f:
ee:db:c7:3e:1c:74:22:b2:6e:82:f2:bb:00:01:fc:44:c4:3f:
7c:17:9a:f1:73:31:70:e9:ba:7d:4e:09:ee:d1:dc:4d:5f:63:
77:5d:5e:e7:e8:bf:46:68:68:ec:e4:40:fd:b2:8d:7a:28:64:
04:8c:4d:fd:f8:ec:e1:f4:07:f9:02:f4:2a:57:d7:63:4c:46:
b8:fa:33:92:a6:a2:15:d3:fd:95:26:ec:54:16:4b:8a:0c:0c:
94:72:07:83:14:f7:1f:46:01:fc:8c:ea:a6:bc:2c:5a:47:d7:
83:03:13:4a:6f:68:07:56:ab:b1:81:a1:ce:7c:d4:67:a0:b8:
1b:5d:e2:6c:0e:0b:94:d2:b9:f5:b8:16:37:67:f6:88:50:66:
95:4c:76:77:2b:d1:e3:13:d2:8c:72:a6:e9:81:02:52:8f:a6:
55:e6:35:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 23:37:00 2025 by rpki-client