Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/a0bfd9-5fa7-448d-a514-8d1bac63efc6/1/9QtjTgs8aefagY27mc3jjqhJj3E.mft
File: 9QtjTgs8aefagY27mc3jjqhJj3E.mft (raw, json)
Hash identifier: W3CJ5eCKjpkhKaQjd/Q01uKFIyFpqukqahCeXpzZ+KE=
Subject key identifier: 34:6B:83:70:C5:F3:3A:DE:07:6C:86:2A:EF:AC:DF:9D:40:0F:9F:AF
Authority key identifier: F5:0B:63:4E:0B:3C:69:E7:DA:81:8D:BB:99:CD:E3:8E:A8:49:8F:71
Certificate issuer: /CN=f50b634e0b3c69e7da818dbb99cde38ea8498f71
Certificate serial: 0196591530E7CD2C34BB9F18D7655356D835
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9QtjTgs8aefagY27mc3jjqhJj3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/a0bfd9-5fa7-448d-a514-8d1bac63efc6/1/9QtjTgs8aefagY27mc3jjqhJj3E.mft
Manifest number: 09F8
Signing time: Mon 21 Apr 2025 16:01:22 +0000
Manifest this update: Mon 21 Apr 2025 16:01:22 +0000
Manifest next update: Tue 22 Apr 2025 16:01:22 +0000
Files and hashes: 1: 9QtjTgs8aefagY27mc3jjqhJj3E.crl (hash: /CA/fiep6PzJ22YZwiz3qhYv8OHc6/QAhv/Km790BDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/a0bfd9-5fa7-448d-a514-8d1bac63efc6/1/9QtjTgs8aefagY27mc3jjqhJj3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/a0bfd9-5fa7-448d-a514-8d1bac63efc6/1/9QtjTgs8aefagY27mc3jjqhJj3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/9QtjTgs8aefagY27mc3jjqhJj3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 16:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:15:30:e7:cd:2c:34:bb:9f:18:d7:65:53:56:d8:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f50b634e0b3c69e7da818dbb99cde38ea8498f71
Validity
Not Before: Apr 21 16:01:22 2025 GMT
Not After : Apr 22 16:01:22 2025 GMT
Subject: CN=346b8370c5f33ade076c862aefacdf9d400f9faf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:dd:dd:3d:13:38:08:71:5b:d6:95:ba:32:a8:
e5:1a:59:93:df:e0:ce:28:2c:03:62:ee:de:ce:74:
1a:0a:fd:10:50:ed:3a:24:5d:6b:73:1c:4c:5c:69:
4a:bf:64:1e:90:2a:f7:dc:ca:9e:4b:49:a6:c4:b9:
f5:02:0c:40:a3:88:32:02:78:24:11:39:3e:43:82:
49:e1:3e:4d:00:af:d8:73:16:ee:6e:ea:48:aa:10:
4d:b9:37:95:d1:a2:0d:4f:92:74:5f:6a:c6:f9:3d:
d9:1d:bc:1e:ca:4e:30:83:0e:47:1b:06:33:9e:f2:
76:50:01:02:12:ed:f6:f0:ee:48:9a:b6:68:9c:56:
6f:53:ce:f7:aa:c1:55:97:8b:a7:b0:0c:05:89:ef:
07:6c:bc:ea:c6:0f:19:9d:75:d4:c4:75:1e:0f:42:
9f:99:34:9f:5d:52:d7:c6:b6:7c:f9:f4:cd:6e:09:
8a:1d:bc:28:69:f9:23:4b:e9:48:a7:e7:bb:cf:7f:
c0:20:3d:1f:93:a9:e8:6c:21:8b:e7:6c:bd:20:29:
24:0c:c5:33:e7:f9:85:56:0c:3b:7c:34:03:9b:36:
70:2a:53:3b:e0:2b:03:a0:1f:76:70:6e:bb:98:0d:
ee:8f:cc:27:8a:38:ab:b8:9c:78:4b:13:dc:2e:e0:
57:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:6B:83:70:C5:F3:3A:DE:07:6C:86:2A:EF:AC:DF:9D:40:0F:9F:AF
X509v3 Authority Key Identifier:
keyid:F5:0B:63:4E:0B:3C:69:E7:DA:81:8D:BB:99:CD:E3:8E:A8:49:8F:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QtjTgs8aefagY27mc3jjqhJj3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a0bfd9-5fa7-448d-a514-8d1bac63efc6/1/9QtjTgs8aefagY27mc3jjqhJj3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a0bfd9-5fa7-448d-a514-8d1bac63efc6/1/9QtjTgs8aefagY27mc3jjqhJj3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:86:d1:54:6e:f7:db:f7:23:40:7d:b4:a3:78:00:8b:0d:47:
a5:f2:63:eb:a9:da:91:86:6f:47:ca:29:5b:54:a2:28:3f:ce:
fe:c7:a3:23:60:1b:e9:73:b4:6a:d5:89:2d:a3:79:08:83:2b:
c3:b2:50:f4:37:c7:4a:b5:86:6c:80:5e:63:ab:ba:59:4a:f0:
56:8f:7f:5f:7d:33:05:5f:50:eb:8e:08:eb:c8:4d:7c:57:2f:
01:8e:ac:78:7b:f0:2d:8c:db:9f:5f:49:9a:62:a4:f8:2c:6b:
f7:38:25:53:5c:ae:3e:5d:dc:f5:51:e7:4d:77:87:a7:9e:21:
ff:fa:da:5c:28:68:71:c8:bb:6f:5f:87:e7:e3:ee:8c:7b:14:
dc:d4:0f:11:8d:1d:e7:65:78:68:aa:5c:f6:9c:a2:c0:be:ac:
ae:4e:cf:ab:f7:83:0a:7b:83:f2:cf:45:ee:3a:f3:af:ee:f8:
e6:b0:b5:c4:51:5f:bb:52:ba:2b:63:16:d3:32:e2:8d:26:a9:
65:81:17:fe:bc:29:f3:95:33:04:67:eb:ab:9f:6f:a8:cf:f3:
08:05:e5:44:3e:df:da:06:16:2b:55:9f:c9:4c:f8:57:45:b7:
1a:fa:f0:52:5d:ff:07:90:d0:c5:3a:3c:19:cf:32:34:32:d0:
99:75:80:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 23:58:50 2025 by rpki-client