Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/7bab97-48a3-4ae7-a151-151bf34f468b/1/d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.mft
File: d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.mft (raw, json)
Hash identifier: VwAVQEgkOkiHHzKKs3ORRA9Vk/IW4eeaptVPlPQUMjI=
Subject key identifier: 8C:18:4A:3A:02:48:AE:B0:19:CE:96:B0:B8:C8:E8:81:0C:BB:F7:39
Authority key identifier: 77:DF:CF:09:82:48:68:69:B7:1D:BD:B7:CC:61:3C:4B:38:13:67:C4
Certificate issuer: /CN=77dfcf0982486869b71dbdb7cc613c4b381367c4
Certificate serial: 0196575CAE4B01F69B4EBADEBEB0B2676511
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/7bab97-48a3-4ae7-a151-151bf34f468b/1/d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.mft
Manifest number: 0C7C
Signing time: Mon 21 Apr 2025 08:00:13 +0000
Manifest this update: Mon 21 Apr 2025 08:00:13 +0000
Manifest next update: Tue 22 Apr 2025 08:00:13 +0000
Files and hashes: 1: DaccjHojB95-TCoADZK32YMFyKo.roa (hash: ihqtrBhocSRh86RahK6DG9qn8vgDTCS7AhN7/gul0Fs=)
2: d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.crl (hash: S70KUspxlnjs3m+uLw3iMIF2AWFreL1/sbexyJl5c3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/7bab97-48a3-4ae7-a151-151bf34f468b/1/d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/7bab97-48a3-4ae7-a151-151bf34f468b/1/d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:5c:ae:4b:01:f6:9b:4e:ba:de:be:b0:b2:67:65:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77dfcf0982486869b71dbdb7cc613c4b381367c4
Validity
Not Before: Apr 21 08:00:13 2025 GMT
Not After : Apr 22 08:00:13 2025 GMT
Subject: CN=8c184a3a0248aeb019ce96b0b8c8e8810cbbf739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c0:fe:cc:1c:ba:42:39:98:ef:a6:93:d3:34:
a0:3a:b4:ba:d0:91:4e:d3:7e:e1:f9:2c:21:28:6c:
45:d8:a8:41:1e:4a:71:78:96:e0:38:c9:6c:17:3a:
f9:cc:45:5a:9d:b3:5f:48:39:ca:35:dd:41:94:1d:
a6:6c:04:ee:ad:66:57:f4:ff:e7:52:29:e7:03:0e:
32:7c:35:52:9a:fb:b7:fd:5f:ed:3a:46:41:14:2c:
b6:cf:8a:44:8c:c5:7d:10:69:ad:4a:44:2f:2f:4b:
11:e4:5d:8d:fe:90:eb:a1:fa:61:e2:4a:23:16:c1:
b1:ac:4a:e6:a0:05:ca:a3:45:31:10:db:4c:ed:9b:
30:25:90:b7:99:c3:96:09:23:b5:37:bb:f5:95:30:
72:0b:d3:59:2a:6e:6d:78:a2:f2:1c:06:ab:94:5d:
f6:ed:84:49:72:b6:f1:3d:d8:31:2e:48:9a:d0:b1:
4e:74:62:1f:28:4c:06:18:a0:4e:6d:37:ed:03:e6:
43:b1:ac:15:40:74:87:97:41:b2:87:b4:2b:39:be:
0e:ea:14:12:15:be:4b:5c:0f:5f:da:33:18:f5:e6:
cd:ab:4a:d8:b7:e3:24:35:39:48:80:ae:b0:3a:7f:
60:89:62:d3:f7:dc:4a:9e:74:db:34:7b:0c:51:95:
80:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:18:4A:3A:02:48:AE:B0:19:CE:96:B0:B8:C8:E8:81:0C:BB:F7:39
X509v3 Authority Key Identifier:
keyid:77:DF:CF:09:82:48:68:69:B7:1D:BD:B7:CC:61:3C:4B:38:13:67:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7bab97-48a3-4ae7-a151-151bf34f468b/1/d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7bab97-48a3-4ae7-a151-151bf34f468b/1/d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:90:79:ac:1d:9e:34:93:c7:cf:f9:37:b2:07:9a:ef:92:1d:
ca:bf:35:d3:94:0e:fa:47:33:86:7a:53:7f:7e:fe:e0:de:6a:
ac:d5:49:65:4e:dd:8e:53:c4:ec:0a:6e:1e:a5:d2:d1:c0:4a:
9d:82:5f:81:67:96:a0:22:ad:f0:58:4f:22:cc:f6:09:50:17:
f7:a2:ea:ef:fd:17:47:62:7a:71:40:17:48:ed:a4:c5:b3:e7:
4c:6e:cb:5c:d3:86:43:42:4b:e4:0c:5a:42:40:ee:9c:de:83:
36:08:43:d3:ed:d8:ec:f1:d0:8a:05:0e:c5:d1:92:0f:be:1f:
c0:bd:7d:16:c5:90:73:26:47:a0:73:03:d1:fb:a6:b2:52:f9:
d7:9b:62:34:77:23:d2:1c:34:08:28:0f:7c:2d:b3:56:da:d1:
2e:10:af:2c:7b:2b:ce:b4:79:44:0d:4c:12:51:89:26:32:ec:
52:5e:3d:ed:7d:61:e1:15:49:16:5b:57:61:b8:3d:ff:90:bc:
31:f4:c3:f3:96:f1:9c:ba:f0:c6:db:58:47:0d:4b:ee:ff:82:
48:d6:6e:3c:ab:27:f8:3e:1c:a6:47:5c:14:63:73:32:7d:fe:
64:31:73:8d:c4:9b:28:31:20:76:5a:d0:84:0b:21:3b:94:bf:
9e:63:b0:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:46:46 2025 by rpki-client