Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.mft
File: f9YuQsCOFgHEVx4NiKNJoFCd6l4.mft (raw, json)
Hash identifier: 7VgLKe4zcpdjyiVibo0RVk08JjuBWtNb+rIcitpOLSc=
Subject key identifier: 97:59:48:69:A5:9A:58:34:D2:54:49:06:A4:90:92:E0:14:CA:ED:72
Authority key identifier: 7F:D6:2E:42:C0:8E:16:01:C4:57:1E:0D:88:A3:49:A0:50:9D:EA:5E
Certificate issuer: /CN=7fd62e42c08e1601c4571e0d88a349a0509dea5e
Certificate serial: 01965C1554F57007EEEED8760CD2FF3240E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f9YuQsCOFgHEVx4NiKNJoFCd6l4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.mft
Manifest number: 1089
Signing time: Tue 22 Apr 2025 06:00:23 +0000
Manifest this update: Tue 22 Apr 2025 06:00:23 +0000
Manifest next update: Wed 23 Apr 2025 06:00:23 +0000
Files and hashes: 1: CrYUOPAFPEtuHkKyJhzQE8UrUoM.roa (hash: 9NqhKYyaxDuqPrOUEVd5P1RqZQxAPP5YeCq0DGdnu/4=)
2: f9YuQsCOFgHEVx4NiKNJoFCd6l4.crl (hash: 9Kr/M0aJu4JkPUzOjolDEFZEIHPYyjDYo4Va0/osg3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.mft
rsync://rpki.ripe.net/repository/DEFAULT/f9YuQsCOFgHEVx4NiKNJoFCd6l4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:15:54:f5:70:07:ee:ee:d8:76:0c:d2:ff:32:40:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fd62e42c08e1601c4571e0d88a349a0509dea5e
Validity
Not Before: Apr 22 06:00:23 2025 GMT
Not After : Apr 23 06:00:23 2025 GMT
Subject: CN=97594869a59a5834d2544906a49092e014caed72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b4:a4:2a:23:32:66:ae:47:86:64:cf:53:72:
f8:9a:09:55:3b:82:85:d9:3a:57:4e:c9:61:2d:49:
a5:50:4d:d1:ae:42:d1:bd:8b:b5:71:72:b3:aa:67:
8a:72:96:db:11:c0:c2:b4:74:79:9b:d3:b6:cb:03:
26:c9:80:a5:ad:79:3d:d1:c3:e6:2a:cf:16:b8:51:
1a:09:1e:1e:83:ff:ba:56:d1:be:84:4c:0c:bf:fc:
73:ff:61:a4:4a:57:5f:73:99:71:98:d8:41:57:53:
23:de:75:46:68:bd:7a:d2:3f:f1:56:fc:ac:63:78:
5a:0f:83:6d:3d:71:48:ed:6e:a8:23:c4:da:4c:ce:
25:43:84:85:06:02:85:49:14:b1:7e:a1:7d:0e:14:
9d:cd:ec:dc:22:d5:4a:58:01:17:cc:f6:3c:56:e1:
de:a2:0d:2f:8f:3a:32:60:e7:6a:a6:0a:55:58:ea:
95:7d:e6:bd:b3:c9:89:76:ee:e2:f3:6c:f1:a8:e1:
09:8d:01:6d:e4:05:0b:91:67:db:7b:7a:aa:3a:7f:
c4:30:92:c2:54:98:84:96:80:60:99:41:ab:ff:8f:
13:9b:98:ab:ae:d2:ea:7e:6b:3b:00:d9:0b:55:c3:
9a:6d:14:df:8b:08:fd:79:7f:5e:9a:9f:30:d9:e6:
38:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:59:48:69:A5:9A:58:34:D2:54:49:06:A4:90:92:E0:14:CA:ED:72
X509v3 Authority Key Identifier:
keyid:7F:D6:2E:42:C0:8E:16:01:C4:57:1E:0D:88:A3:49:A0:50:9D:EA:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9YuQsCOFgHEVx4NiKNJoFCd6l4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:0f:a5:d4:f9:0a:96:ee:f3:77:a9:13:19:3b:4b:f6:39:73:
bc:1b:3b:0e:96:90:1d:8e:22:82:5d:33:0a:a3:ff:fb:5e:f1:
ba:a4:2c:ac:c6:7e:7c:b3:21:e3:db:a9:aa:04:1d:48:34:81:
b2:c6:4a:eb:b6:1c:ae:7b:e7:84:84:ff:0d:bf:ec:7a:7f:57:
41:ca:21:58:68:7f:df:e1:0d:b6:dd:9e:63:b3:9f:67:12:1a:
11:68:7c:24:27:2e:f8:45:5e:cd:7f:94:15:51:2b:37:11:51:
21:b3:aa:c6:23:5a:ac:d5:0c:58:df:2b:68:72:2d:39:63:aa:
7f:db:67:71:49:a4:fd:a0:93:97:dc:3f:b5:33:d1:e9:ae:58:
e0:9e:0c:07:fe:36:27:ea:5d:75:60:b6:b3:6b:b4:c3:35:63:
b4:4d:bc:c4:37:e7:d7:e5:9b:ff:17:2d:87:b4:a6:ba:10:c0:
66:af:93:ff:8a:7c:d4:86:ad:ed:2c:43:bd:a6:16:16:64:04:
be:64:9b:78:18:02:77:ca:db:39:f5:74:00:cb:fd:f6:0d:68:
cc:d0:ab:65:0c:b7:f0:1f:dc:fb:fe:02:07:80:06:c9:da:a5:
40:77:2d:87:32:83:32:2d:be:ee:c0:2d:ba:eb:ce:14:34:7c:
58:c9:54:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:26:44 2025 by rpki-client