Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft
File: 9QtrQlYAolptwTLeUUeX4qpLAkc.mft (raw, json)
Hash identifier: wmBkos6vTQDDG8so89rgglSJ+7BD1gNl7cBpLSeC8po=
Subject key identifier: AC:08:00:12:C2:A2:33:52:7E:1E:DD:F7:F7:2B:DD:F1:28:90:4E:2D
Authority key identifier: F5:0B:6B:42:56:00:A2:5A:6D:C1:32:DE:51:47:97:E2:AA:4B:02:47
Certificate issuer: /CN=f50b6b425600a25a6dc132de514797e2aa4b0247
Certificate serial: 0196771E8A520BB3B8910E0C4CAF255AA104
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9QtrQlYAolptwTLeUUeX4qpLAkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft
Manifest number: 1511
Signing time: Sun 27 Apr 2025 12:00:12 +0000
Manifest this update: Sun 27 Apr 2025 12:00:12 +0000
Manifest next update: Mon 28 Apr 2025 12:00:12 +0000
Files and hashes: 1: 9QtrQlYAolptwTLeUUeX4qpLAkc.crl (hash: f6FiXmlugpgrhsOL4uk0+mexri603QNhSMWdNB9Pq18=)
2: LF_3HwZmRrCki2d-FP5TfnY-Yfo.roa (hash: OqUUHUSkyKdGpgaBU1hHW7IYtyTJfajGz9ID3t644ac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9QtrQlYAolptwTLeUUeX4qpLAkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:1e:8a:52:0b:b3:b8:91:0e:0c:4c:af:25:5a:a1:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f50b6b425600a25a6dc132de514797e2aa4b0247
Validity
Not Before: Apr 27 12:00:12 2025 GMT
Not After : Apr 28 12:00:12 2025 GMT
Subject: CN=ac080012c2a233527e1eddf7f72bddf128904e2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:50:92:48:81:03:b6:90:75:4c:ac:1d:bd:b7:
3e:72:47:43:4e:48:3e:e3:0a:80:e4:f1:2e:ee:0d:
86:a7:10:09:84:1b:54:30:26:60:8f:52:ad:07:61:
a2:67:02:8d:83:33:58:82:ba:a2:d6:8e:31:1c:3d:
7c:84:8c:69:66:e9:59:16:7e:e1:61:de:17:a6:3e:
9f:81:30:ec:c0:05:3f:bc:61:dd:86:f7:ab:f1:4b:
a5:2f:cf:36:be:7b:5b:1a:04:18:4f:75:9e:bc:b9:
c0:8e:93:7f:d5:ed:cf:47:e7:c7:d3:4d:e5:b3:bd:
a2:1c:84:45:d7:15:1c:e3:cd:7b:31:3d:86:b5:dc:
dc:c6:ca:c3:60:26:94:6c:1a:59:8f:c9:a5:69:08:
b8:06:07:1a:4f:24:25:ee:b5:a2:6b:ed:ee:16:b2:
ea:74:f3:8c:01:a1:98:31:61:c2:c4:0e:aa:3a:72:
ed:65:67:f2:65:2c:0a:0b:3e:c2:80:5f:c4:3a:8a:
88:bb:d3:0c:38:03:51:7d:5d:ad:87:a4:e5:44:e8:
71:74:2f:fa:f2:19:c9:81:1f:6e:2e:31:c0:01:df:
d2:b4:4f:1f:b3:2d:b6:fc:e2:85:a4:8b:d6:bb:e7:
ef:b6:ca:a4:a7:da:26:11:a5:00:74:32:14:55:03:
90:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:08:00:12:C2:A2:33:52:7E:1E:DD:F7:F7:2B:DD:F1:28:90:4E:2D
X509v3 Authority Key Identifier:
keyid:F5:0B:6B:42:56:00:A2:5A:6D:C1:32:DE:51:47:97:E2:AA:4B:02:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QtrQlYAolptwTLeUUeX4qpLAkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:b3:b6:c1:40:ef:f1:bc:14:b7:73:1b:f7:af:75:56:81:cf:
ac:e7:2e:1d:43:c9:e5:de:da:09:ba:2b:2c:e7:86:b1:e0:ff:
38:f2:06:71:f4:7f:41:9c:0d:c1:ce:69:e5:b4:33:ef:da:3a:
9f:4b:5b:ee:58:88:79:45:72:ec:10:b8:92:e5:3e:87:9d:75:
d0:28:e8:f5:50:fe:fa:e2:4d:c9:7b:58:b7:78:a2:0d:fa:6b:
e8:b9:11:cf:34:75:c7:3f:15:47:ea:85:f2:9e:16:2f:31:92:
dc:92:11:3b:a6:6e:5d:d2:73:ce:f6:a2:05:a6:92:04:df:c4:
58:95:1e:a1:31:b1:67:56:92:d6:72:cc:aa:8b:20:d0:b7:7a:
ad:3b:c1:4e:79:15:13:7a:a7:56:28:57:72:0f:63:b4:c2:4e:
9d:d5:82:39:76:1a:90:52:c0:b9:df:a4:cc:4c:1f:53:0a:23:
5b:5a:e9:c4:d9:90:a0:d8:c6:cf:32:a6:fb:2c:68:48:44:08:
2c:f0:3c:98:1f:e4:da:c2:7b:7c:5a:cf:5b:d4:14:0a:64:27:
6a:85:44:0c:6c:40:e6:5c:ff:24:e6:27:fd:4a:c9:d1:9d:2d:
e9:7a:54:71:5a:e8:22:ab:32:8a:0b:ba:0a:0c:f2:4a:c3:6b:
ce:9d:07:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:22:40 2025 by rpki-client