Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.mft
File: 9TNT82jdgBzWECIy36HOpp3Yy2w.mft (raw, json)
Hash identifier: LfB2aW6e2rpdrJBruugfHU80swnkoV5SYEiKlb40eLQ=
Subject key identifier: F5:2B:CF:81:5C:FF:A2:85:3A:64:E5:53:88:7C:BE:3E:7F:DF:66:33
Authority key identifier: F5:33:53:F3:68:DD:80:1C:D6:10:22:32:DF:A1:CE:A6:9D:D8:CB:6C
Certificate issuer: /CN=f53353f368dd801cd6102232dfa1cea69dd8cb6c
Certificate serial: 0196767A739EF03FBD12F599853E5AF55775
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9TNT82jdgBzWECIy36HOpp3Yy2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.mft
Manifest number: 1511
Signing time: Sun 27 Apr 2025 09:00:58 +0000
Manifest this update: Sun 27 Apr 2025 09:00:58 +0000
Manifest next update: Mon 28 Apr 2025 09:00:58 +0000
Files and hashes: 1: 9TNT82jdgBzWECIy36HOpp3Yy2w.crl (hash: D9dFeLe3ezCK0n+ssnBC7LVo/JxACVMjQ1sZhDU5kXY=)
2: KPjydIOJaGq7MrGDIyks0pG8OMc.roa (hash: EbMrbtdHkpWfjQpY4PIBNTo9mg3b+j3TofouOP6XhE4=)
3: j-eMIttscanFAqtICoI80Cr1JzI.roa (hash: 9wKinY0pxocac6rpiGpVi4F+dA87gof09Z9RuDhbY0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/9TNT82jdgBzWECIy36HOpp3Yy2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:73:9e:f0:3f:bd:12:f5:99:85:3e:5a:f5:57:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f53353f368dd801cd6102232dfa1cea69dd8cb6c
Validity
Not Before: Apr 27 09:00:58 2025 GMT
Not After : Apr 28 09:00:58 2025 GMT
Subject: CN=f52bcf815cffa2853a64e553887cbe3e7fdf6633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7a:08:ae:1a:3f:02:6d:d4:a7:17:2b:9a:6c:
69:5c:15:4f:c9:53:c1:60:99:f1:d8:2a:78:ca:27:
30:dc:05:28:9b:62:8a:18:f2:b4:73:98:f9:7b:e6:
60:b4:4a:8d:74:26:f2:ba:45:65:12:f6:56:8e:2d:
48:e2:59:6d:65:2b:a8:f2:53:5b:c5:9c:ab:13:59:
0a:60:7f:b9:2a:14:22:6c:96:f9:4e:29:c3:73:e8:
7f:cd:73:d8:a3:47:2a:8b:3a:04:db:94:ca:b7:53:
98:cc:d0:11:01:13:9a:8e:ae:70:33:e0:b5:28:af:
a3:22:b8:7e:d9:fb:89:f9:17:72:53:b0:86:f1:a1:
10:22:ae:4a:10:ee:cf:3e:a1:21:c2:28:cc:89:52:
14:3e:af:99:58:13:09:12:3a:9e:c3:d5:03:d7:3d:
f4:9f:f1:96:09:4a:23:da:64:10:86:2c:c4:58:79:
d1:20:11:cf:1d:65:b1:aa:33:bc:87:43:a4:6a:07:
66:e2:b7:02:d1:22:39:6e:1f:c6:29:b6:4d:00:2d:
f8:aa:03:24:92:24:23:bd:bf:2d:f1:cd:44:a9:05:
44:08:97:a7:7c:9e:e7:4d:84:29:06:90:96:05:40:
44:f0:a4:df:12:14:02:ea:5b:6a:c7:69:fb:66:2a:
b4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:2B:CF:81:5C:FF:A2:85:3A:64:E5:53:88:7C:BE:3E:7F:DF:66:33
X509v3 Authority Key Identifier:
keyid:F5:33:53:F3:68:DD:80:1C:D6:10:22:32:DF:A1:CE:A6:9D:D8:CB:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TNT82jdgBzWECIy36HOpp3Yy2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:7e:7d:54:51:07:3c:6e:6f:a7:2e:d5:af:83:25:a7:1e:ef:
b2:e8:4b:62:f4:d1:f3:90:aa:e2:b5:d0:b4:96:22:c3:c1:02:
fc:db:e3:1e:a8:f4:8e:4b:72:1b:39:4c:37:e9:5d:e2:65:6c:
38:92:00:fc:61:7b:74:07:f2:b7:ce:f6:01:20:b5:f0:67:56:
35:f9:f7:62:a4:bf:9d:41:76:aa:b8:f6:16:f0:ad:8a:84:15:
c9:be:fd:7d:bc:0a:91:8c:d6:a2:dd:b1:a3:9c:f4:40:7a:ad:
be:87:df:80:4d:e6:7c:33:a0:db:87:c5:e9:19:36:1e:66:5a:
09:57:1b:3f:7f:8f:09:49:9c:de:8b:84:5e:7d:97:82:ab:bf:
e6:00:8e:0c:70:05:a1:53:b2:af:7d:a2:84:70:a2:11:25:f3:
9d:be:32:21:1f:3f:b2:e7:92:d3:8e:4c:61:69:b9:df:fa:37:
53:9b:de:39:62:b3:01:dd:ae:c0:18:86:11:a4:4d:5c:24:36:
e3:01:c0:32:92:8f:75:40:f9:f5:ad:42:37:89:c5:6e:e3:60:
00:9c:6c:58:d0:5e:8e:ec:84:c9:d5:24:df:bf:27:20:b6:d3:
aa:20:c0:9f:9e:ed:6a:43:db:2c:80:c4:1f:66:cb:fe:97:fe:
11:31:be:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:55:38 2025 by rpki-client