Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/fa396e-0dd4-4226-ae61-6e89a88dae93/1/09XiCPMtcw1DHUpNTtgJWx59lDE.mft
File: 09XiCPMtcw1DHUpNTtgJWx59lDE.mft (raw, json)
Hash identifier: ROdrmvauXmvTGIzVEZ8HXtN5elmWWX3y+lbTCHAFIJM=
Subject key identifier: FF:B1:94:54:D8:B6:57:27:13:B1:B0:22:52:85:25:39:59:93:92:65
Authority key identifier: D3:D5:E2:08:F3:2D:73:0D:43:1D:4A:4D:4E:D8:09:5B:1E:7D:94:31
Certificate issuer: /CN=d3d5e208f32d730d431d4a4d4ed8095b1e7d9431
Certificate serial: 01965CF19D1500BBEEE6E0439BE2BCB09B6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/09XiCPMtcw1DHUpNTtgJWx59lDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/fa396e-0dd4-4226-ae61-6e89a88dae93/1/09XiCPMtcw1DHUpNTtgJWx59lDE.mft
Manifest number: 2F
Signing time: Tue 22 Apr 2025 10:01:00 +0000
Manifest this update: Tue 22 Apr 2025 10:01:00 +0000
Manifest next update: Wed 23 Apr 2025 10:01:00 +0000
Files and hashes: 1: 09XiCPMtcw1DHUpNTtgJWx59lDE.crl (hash: T7YGP5Xetm7sxDXyx5P5U3/f5luvN+LL4uiEIT28nCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/fa396e-0dd4-4226-ae61-6e89a88dae93/1/09XiCPMtcw1DHUpNTtgJWx59lDE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/fa396e-0dd4-4226-ae61-6e89a88dae93/1/09XiCPMtcw1DHUpNTtgJWx59lDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/09XiCPMtcw1DHUpNTtgJWx59lDE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:f1:9d:15:00:bb:ee:e6:e0:43:9b:e2:bc:b0:9b:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3d5e208f32d730d431d4a4d4ed8095b1e7d9431
Validity
Not Before: Apr 22 10:01:00 2025 GMT
Not After : Apr 23 10:01:00 2025 GMT
Subject: CN=ffb19454d8b6572713b1b0225285253959939265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e3:d6:65:5c:ce:61:a5:28:5e:81:9e:07:b4:
d5:f1:8d:37:35:22:9e:13:b7:1e:0d:7e:db:a3:6e:
91:af:88:78:64:27:56:60:e5:7a:3d:08:8d:e3:f6:
1e:4f:f0:82:9f:17:d3:f3:ab:c0:b1:8f:fd:b9:dc:
3e:5b:bc:78:cd:e1:62:dd:1e:32:4f:54:64:e3:44:
de:3c:3c:84:cc:d9:33:c9:06:ee:2d:4c:ea:65:c6:
ca:49:30:a4:7b:d1:12:bd:f5:4c:72:63:06:df:60:
9f:f9:a9:a2:28:be:31:12:70:79:8d:07:fd:85:d4:
6f:a5:2f:ee:16:39:8d:5a:66:f6:fa:c4:c5:93:1c:
7a:b7:34:41:10:9d:8a:4b:eb:fb:5e:46:29:d6:b1:
4a:20:63:04:de:72:9f:1e:11:13:f4:17:ca:fb:ee:
0d:f8:1c:13:33:9e:01:e6:74:5b:d8:2b:d7:87:f4:
2b:48:21:c7:a9:59:93:4c:d2:e7:85:80:b1:53:15:
0f:a9:29:ff:d0:df:e9:99:e2:77:83:a8:64:15:c7:
17:ca:f2:0f:29:f8:98:5e:6a:38:04:c3:db:c4:90:
91:fb:83:c4:1e:4b:a2:c1:53:c8:fc:1f:b0:46:08:
2c:ba:08:92:07:20:cc:94:82:ce:1a:dd:f2:d5:af:
bc:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:B1:94:54:D8:B6:57:27:13:B1:B0:22:52:85:25:39:59:93:92:65
X509v3 Authority Key Identifier:
keyid:D3:D5:E2:08:F3:2D:73:0D:43:1D:4A:4D:4E:D8:09:5B:1E:7D:94:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/09XiCPMtcw1DHUpNTtgJWx59lDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/fa396e-0dd4-4226-ae61-6e89a88dae93/1/09XiCPMtcw1DHUpNTtgJWx59lDE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/fa396e-0dd4-4226-ae61-6e89a88dae93/1/09XiCPMtcw1DHUpNTtgJWx59lDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:b8:53:48:ec:f1:8b:53:0b:05:78:42:75:24:bb:4b:7c:f9:
56:cb:22:b8:23:d0:22:84:e5:06:36:d5:54:b1:7e:b7:35:fb:
10:aa:0a:85:32:db:0c:c7:8a:a3:84:27:27:a9:f0:fe:4c:6a:
95:26:f8:88:30:6d:cb:26:5c:49:fc:6a:3a:d6:c5:dd:8c:1b:
37:7f:2b:43:0e:60:88:b6:81:37:f3:e3:6a:31:3a:51:82:25:
57:b9:36:74:c4:35:1b:e0:46:1a:6b:8c:10:07:8b:70:41:75:
83:96:14:27:79:3b:cc:6e:0f:62:ce:2a:cd:8d:f6:fe:9e:28:
bc:2f:71:52:76:82:4a:57:dc:04:e0:e8:0b:ce:0e:2e:dd:9c:
44:e5:3d:16:b7:bc:af:05:55:75:03:5c:85:6d:60:61:a1:9f:
dd:f3:88:66:d6:63:d6:f7:96:d8:c4:4e:74:1b:e3:7d:79:d1:
0d:ed:64:66:06:f0:9a:37:1f:09:78:bc:ba:e5:9e:7e:da:4f:
b2:14:7c:19:1e:39:ca:93:4a:49:7b:e7:e9:21:a0:8b:cb:2f:
a1:c1:f7:0b:9a:2f:4d:d8:c4:4f:da:14:81:18:2d:af:30:cf:
24:03:8f:32:e9:ae:de:cb:e9:aa:0d:55:c8:54:24:ec:dc:bc:
81:f8:b4:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:58:58 2025 by rpki-client