Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.mft
File: 9vSb-yoLgkRgYMf8kHgQ5RhwWTY.mft (raw, json)
Hash identifier: g26HKV38PekRmRV6LHcuy6wMAjVWJ3/1okSC9cNsVPA=
Subject key identifier: 68:D3:8E:9B:BA:F5:A0:A7:35:B2:B8:3C:6F:EF:46:C8:F9:42:6D:37
Authority key identifier: F6:F4:9B:FB:2A:0B:82:44:60:60:C7:FC:90:78:10:E5:18:70:59:36
Certificate issuer: /CN=f6f49bfb2a0b82446060c7fc907810e518705936
Certificate serial: 01965801A49C0627D5E1F3950F254AE7F0C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.mft
Manifest number: 0166
Signing time: Mon 21 Apr 2025 11:00:24 +0000
Manifest this update: Mon 21 Apr 2025 11:00:24 +0000
Manifest next update: Tue 22 Apr 2025 11:00:24 +0000
Files and hashes: 1: 9vSb-yoLgkRgYMf8kHgQ5RhwWTY.crl (hash: oVXz9v5g3j3AJphc1B1Bm6rqGB+SkwvguIgmPu5Xs0k=)
2: jSx6lr1ClHwvX34A8pMwt0RR9b8.roa (hash: 8qaP26J8XC7Mhz3DA86mgKU6vMfpb43EGZW/j662nEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:01:a4:9c:06:27:d5:e1:f3:95:0f:25:4a:e7:f0:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6f49bfb2a0b82446060c7fc907810e518705936
Validity
Not Before: Apr 21 11:00:24 2025 GMT
Not After : Apr 22 11:00:24 2025 GMT
Subject: CN=68d38e9bbaf5a0a735b2b83c6fef46c8f9426d37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:70:9c:08:cb:fd:02:a5:b1:cd:33:dd:77:66:
b4:a8:fb:51:83:84:5b:81:f6:df:61:ad:f6:07:5c:
0e:81:60:99:55:6f:21:fe:fd:82:f1:76:cd:4c:c2:
26:8a:af:03:6b:4f:c5:51:a5:c3:1f:60:88:d8:e6:
d4:79:98:1b:b5:49:c3:65:65:70:56:8b:44:ea:e5:
b0:50:9e:97:64:4f:d8:2e:31:cd:08:5c:14:68:26:
42:d7:20:27:34:b2:40:e5:94:d8:f2:c2:84:ef:89:
07:b7:0e:44:20:1c:40:6f:48:1f:7a:c9:1e:b6:e8:
3f:a8:22:53:c7:e4:0e:f0:21:ef:4c:8d:f6:2e:df:
51:55:09:d9:ac:8c:2c:09:96:8a:37:fe:11:ad:a7:
5a:5d:c7:e6:86:59:dc:d8:3d:34:65:3f:f2:1a:e2:
22:6e:c7:09:45:44:d4:94:c2:a5:84:99:04:73:88:
58:8f:64:54:3e:f4:b1:55:d3:73:19:de:ac:ff:5f:
d7:b2:bc:dd:c3:73:b6:ef:28:e0:a6:04:71:82:99:
77:14:b9:28:65:05:00:a8:44:e5:1b:3e:2a:0c:f0:
c0:b5:31:a9:a5:dc:ce:46:38:77:6c:9e:2d:27:12:
20:d8:79:af:ab:71:cd:06:d9:c8:ac:4e:cf:2a:6a:
86:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:D3:8E:9B:BA:F5:A0:A7:35:B2:B8:3C:6F:EF:46:C8:F9:42:6D:37
X509v3 Authority Key Identifier:
keyid:F6:F4:9B:FB:2A:0B:82:44:60:60:C7:FC:90:78:10:E5:18:70:59:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:08:35:c6:71:00:ac:07:73:1a:98:35:5a:6b:91:8d:94:9e:
99:9d:27:63:8c:16:0a:7c:b0:36:af:1f:7b:db:72:f9:c7:e0:
82:41:1a:80:87:dc:2c:8e:8e:22:d1:01:9b:ff:2d:f0:e2:f5:
0f:07:93:3c:81:55:9a:9c:25:6d:45:03:1c:a2:5d:62:1c:20:
dc:7a:d0:d3:df:c1:d7:64:b8:1d:d8:a0:fc:f2:67:cd:ec:26:
ff:17:bf:9c:60:c3:bc:36:da:2e:7a:cb:0b:77:96:12:47:b3:
4f:75:d0:c9:9b:92:3d:48:cc:07:45:97:68:69:8f:1d:6c:7d:
09:54:e5:8a:e6:57:01:2e:23:35:69:bd:cd:bd:62:5f:f0:08:
53:20:94:f2:91:6c:f7:1e:d8:81:f1:43:0d:3e:0b:15:20:46:
eb:0d:97:aa:67:da:a8:c0:28:04:a4:29:5f:63:0e:63:d3:f0:
b4:a8:ef:ec:88:9b:d7:a3:2a:1e:12:73:b8:ae:cc:32:8e:23:
f8:e9:c2:7f:8f:d5:8e:c1:04:7f:c1:f0:0d:f4:bf:01:ce:da:
af:c0:1e:25:1d:e2:22:2d:cc:7e:96:4c:52:3d:e1:1f:cd:5e:
81:55:7c:10:fa:4c:7d:43:02:84:94:0a:14:ae:15:b5:d7:f2:
67:a6:a1:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:03:43 2025 by rpki-client