Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.mft
File: 9qyyafqKVU9SQ6Or1o1bjXb-Xrs.mft (raw, json)
Hash identifier: czNnJpwfAlwA4cMP0karXYzhG+KGwB0Ppj4b5HXqbro=
Subject key identifier: ED:FF:33:FB:FA:48:81:FD:C9:9D:DD:D0:E0:93:57:8E:83:4C:8F:BA
Authority key identifier: F6:AC:B2:69:FA:8A:55:4F:52:43:A3:AB:D6:8D:5B:8D:76:FE:5E:BB
Certificate issuer: /CN=f6acb269fa8a554f5243a3abd68d5b8d76fe5ebb
Certificate serial: 0196090BC547E9ACD6FC3B18909699D2C50C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.mft
Manifest number: 14D6
Signing time: Sun 06 Apr 2025 03:01:28 +0000
Manifest this update: Sun 06 Apr 2025 03:01:28 +0000
Manifest next update: Mon 07 Apr 2025 03:01:28 +0000
Files and hashes: 1: 9qyyafqKVU9SQ6Or1o1bjXb-Xrs.crl (hash: Srp3xOMdXDcsHp4Z51I7SrpTb+UyueguUa6eiDcTO7k=)
2: cZzu9h7JCSpAe7ubMeZNqvU_k-M.roa (hash: 9lLGwap+wzAcsgGorlbM31Osi8VLCiKaPunG1+P2vww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 03:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:09:0b:c5:47:e9:ac:d6:fc:3b:18:90:96:99:d2:c5:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6acb269fa8a554f5243a3abd68d5b8d76fe5ebb
Validity
Not Before: Apr 6 03:01:28 2025 GMT
Not After : Apr 7 03:01:28 2025 GMT
Subject: CN=edff33fbfa4881fdc99dddd0e093578e834c8fba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c8:40:39:f1:b0:15:41:c4:4a:29:1d:4b:e5:
ab:a0:5f:41:16:41:e1:94:e8:80:bf:44:2b:ac:62:
47:6e:d8:1b:6f:dd:8a:f1:b7:f0:8f:1b:d6:ed:ff:
45:07:1b:67:a7:ec:fe:05:25:d8:a8:2a:24:8a:66:
77:79:d9:b2:05:75:97:73:e0:bd:ca:65:fb:24:e1:
fb:82:4a:ea:75:eb:ea:50:5d:4c:53:e6:1a:d9:e0:
fb:ad:d6:47:e3:bb:7e:6f:2b:bd:6f:4c:ec:32:98:
a0:64:a5:d9:87:9a:7c:6f:20:a2:fa:f2:a5:12:8f:
5c:11:91:f7:f5:50:e9:12:b2:0c:70:af:a7:c4:30:
e5:04:f5:24:c2:19:60:5c:81:7c:b0:50:a3:03:8d:
1b:91:c2:b3:38:97:16:e1:bf:cc:79:95:33:64:89:
00:a4:5f:36:fe:b5:01:07:6b:8a:20:03:53:b6:3f:
c7:d3:0f:01:c3:0a:0c:01:12:a8:ee:5c:fe:40:d9:
1f:f3:5e:95:dd:54:17:b4:14:6e:5d:b7:f9:20:de:
9b:c7:10:61:5b:70:1e:17:83:ef:71:5d:1b:a3:23:
da:07:f6:ea:e3:e9:20:60:0c:08:e1:85:0a:2b:ce:
7e:9e:be:b4:ca:2f:45:43:13:69:26:c5:c2:f4:c3:
70:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:FF:33:FB:FA:48:81:FD:C9:9D:DD:D0:E0:93:57:8E:83:4C:8F:BA
X509v3 Authority Key Identifier:
keyid:F6:AC:B2:69:FA:8A:55:4F:52:43:A3:AB:D6:8D:5B:8D:76:FE:5E:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:b1:79:d9:a6:ae:42:75:c9:bb:3c:1a:06:c7:5b:04:99:06:
e7:78:5e:7e:73:ec:90:2e:bf:a1:28:ea:46:f1:1c:6e:2e:92:
a1:4c:22:8c:81:82:8f:23:2d:a8:7f:46:55:42:ab:d5:48:32:
67:40:0c:39:52:c1:7a:76:f7:43:1f:b4:e0:13:fe:bf:4c:5e:
a3:1e:d4:c2:04:fa:30:b4:37:a8:b4:86:4e:a9:b6:29:e5:c7:
58:d0:32:1e:9d:25:61:4f:dc:8a:de:0d:d7:87:62:bc:81:91:
ce:c5:e8:5c:42:d5:ae:2c:98:6a:68:1f:47:85:b2:bd:b8:1d:
2f:27:f5:32:0d:c0:b8:65:db:30:15:03:37:b7:40:1b:1b:f7:
c1:1f:dc:e2:18:55:0c:a6:8d:f3:4e:61:b9:5d:b3:c4:ab:de:
2c:2e:22:64:38:a4:69:fb:7f:8d:24:6d:2a:0b:02:d5:a5:61:
e9:b3:75:1e:9d:7e:71:f1:42:67:1a:5c:12:e4:66:6b:8d:41:
61:6b:52:cb:a4:61:31:a3:8e:d1:2d:27:84:97:eb:73:ce:ee:
84:72:5a:c3:e8:5f:6f:5d:68:c0:13:3b:7c:b1:c4:07:c7:26:
a1:37:4a:8d:a8:5e:e0:4d:0e:be:de:0a:37:a6:9a:7e:66:49:
5f:a7:ec:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:33:41 2025 by rpki-client