Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft
File: 9qFyLout3DWKFYdCZbRmdD5wNlY.mft (raw, json)
Hash identifier: B/8fSGjq85ru+EHp9u/BdGhGpcvHRc0gJxNOsBuZKfQ=
Subject key identifier: 5B:79:67:1F:70:30:93:86:B6:9A:E7:35:89:41:D4:6D:C6:DC:7C:4F
Authority key identifier: F6:A1:72:2E:8B:AD:DC:35:8A:15:87:42:65:B4:66:74:3E:70:36:56
Certificate issuer: /CN=f6a1722e8baddc358a15874265b466743e703656
Certificate serial: 019673794218CF760E791409177230BE6D14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9qFyLout3DWKFYdCZbRmdD5wNlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft
Manifest number: 150F
Signing time: Sat 26 Apr 2025 19:00:48 +0000
Manifest this update: Sat 26 Apr 2025 19:00:48 +0000
Manifest next update: Sun 27 Apr 2025 19:00:48 +0000
Files and hashes: 1: 3gQqwuDknMD1by1_10QyLFjqTSQ.roa (hash: 7rS6ATpFIQATm/1nB63KRTZ9v2IEBgVrsScfZWZHuYo=)
2: 9qFyLout3DWKFYdCZbRmdD5wNlY.crl (hash: RBRw2jhTFfOKIour7x6WBbttsYIRmRWt6SQhzM9JXO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9qFyLout3DWKFYdCZbRmdD5wNlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 19:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:79:42:18:cf:76:0e:79:14:09:17:72:30:be:6d:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6a1722e8baddc358a15874265b466743e703656
Validity
Not Before: Apr 26 19:00:48 2025 GMT
Not After : Apr 27 19:00:48 2025 GMT
Subject: CN=5b79671f70309386b69ae7358941d46dc6dc7c4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:70:5e:b7:10:f8:c8:79:2b:93:73:44:30:2e:
bc:bf:15:fd:10:a8:4f:6c:c5:fb:bf:1e:10:ce:61:
e2:a9:dc:61:c2:dd:ca:7e:61:bb:7b:6d:3b:72:8c:
8c:6d:df:ea:28:b7:1b:a4:2e:13:4b:4a:78:14:58:
1a:05:4f:2e:63:8d:b8:dc:72:38:81:0d:21:e1:25:
a5:93:a8:fb:32:dc:f0:83:a3:04:da:50:af:d0:ad:
6b:e4:e6:71:15:b9:77:b4:a6:53:f8:c1:d8:e9:ca:
6a:c0:13:5b:38:8c:c8:6e:9a:5a:6b:3e:51:1d:3d:
d8:eb:3f:03:36:ef:12:4b:d8:df:01:f9:b5:80:c0:
9a:cc:5c:51:4f:15:e8:13:ee:a9:27:1b:dd:c3:0b:
48:7a:36:47:06:c3:9c:fc:c2:3d:e7:d7:8d:88:c3:
be:6f:29:f3:89:64:09:05:5a:1c:eb:30:08:60:31:
4a:aa:39:40:33:a6:2b:16:19:c9:44:36:c9:ba:b4:
61:ea:a6:18:b8:8a:fa:81:41:a5:2c:3e:c2:9d:43:
a6:57:f3:91:e3:e1:d4:01:0f:8a:f5:d5:b5:e8:61:
47:45:d2:30:06:69:aa:e3:30:17:6e:c6:0b:04:ee:
3e:33:1e:1a:f3:59:8c:15:45:35:fb:84:68:f5:26:
0f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:79:67:1F:70:30:93:86:B6:9A:E7:35:89:41:D4:6D:C6:DC:7C:4F
X509v3 Authority Key Identifier:
keyid:F6:A1:72:2E:8B:AD:DC:35:8A:15:87:42:65:B4:66:74:3E:70:36:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9qFyLout3DWKFYdCZbRmdD5wNlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:27:2b:c4:47:f8:aa:12:d1:88:8b:26:43:27:1a:61:50:d0:
16:e6:cf:7f:af:b6:1b:f8:d3:02:86:a3:e5:f9:00:6b:c8:9c:
b3:09:88:62:5a:d7:51:51:9e:7b:b7:3a:09:0b:54:87:75:02:
67:d2:98:66:78:fd:45:2d:22:2c:0e:82:84:ea:f3:be:4c:91:
22:42:a7:85:13:3e:9b:88:73:59:78:48:d8:00:28:2f:b6:11:
87:ac:f1:18:e0:8a:03:69:00:00:a7:a0:a4:ff:be:c7:8e:87:
35:f6:5c:f8:3b:08:41:dc:1e:21:7d:ff:e1:cd:84:0d:4f:25:
e9:23:db:3e:6d:94:45:06:49:f4:6d:f6:36:7b:03:d5:cd:ac:
8b:ec:a4:fe:96:d7:3b:38:1c:cb:bb:89:5e:22:11:77:e8:e3:
0b:08:9a:e4:5e:98:e1:00:8f:fa:68:78:cf:c3:a4:53:fa:82:
e4:22:23:ff:ca:09:e0:33:97:f1:ae:48:3c:93:6a:eb:b4:5c:
92:3b:44:fb:26:8d:cd:9c:48:84:b6:d9:c2:93:32:87:3e:d0:
3b:aa:0f:7d:66:fb:89:22:a4:7d:f9:9b:c8:04:98:17:1d:6a:
f4:f2:1c:ff:a3:65:ee:0a:27:ce:0f:43:18:db:13:8f:c9:f5:
cf:2b:68:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:37:41 2025 by rpki-client