Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5b28e1-f70c-42d4-838c-e08d53f09612/1/9-5cHIBMM_3jPZsIuRn3PTHQttk.mft
File: 9-5cHIBMM_3jPZsIuRn3PTHQttk.mft (raw, json)
Hash identifier: zy7mgCZE6nbmO4dc7U6SzfAEmsgCKMgxOq9use08k3c=
Subject key identifier: 71:04:EB:FC:F6:1D:33:54:72:B4:C7:D6:78:C2:73:26:D3:60:25:B6
Authority key identifier: F7:EE:5C:1C:80:4C:33:FD:E3:3D:9B:08:B9:19:F7:3D:31:D0:B6:D9
Certificate issuer: /CN=f7ee5c1c804c33fde33d9b08b919f73d31d0b6d9
Certificate serial: 019659EFDEDF9928463540417F68F6F5651B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9-5cHIBMM_3jPZsIuRn3PTHQttk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5b28e1-f70c-42d4-838c-e08d53f09612/1/9-5cHIBMM_3jPZsIuRn3PTHQttk.mft
Manifest number: 0977
Signing time: Mon 21 Apr 2025 20:00:14 +0000
Manifest this update: Mon 21 Apr 2025 20:00:14 +0000
Manifest next update: Tue 22 Apr 2025 20:00:14 +0000
Files and hashes: 1: 9-5cHIBMM_3jPZsIuRn3PTHQttk.crl (hash: eRWO1/zDlGDWq9qpJ1Wu2zjNuDJ21JDs7BEOQqggvxU=)
2: VIIA5VZpizTIGxWzHyr_ZNDV3cA.roa (hash: cehPDwufBxU4/kiVLRiGeuXvq0MlYpc57MWfPb+PZlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/5b28e1-f70c-42d4-838c-e08d53f09612/1/9-5cHIBMM_3jPZsIuRn3PTHQttk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/5b28e1-f70c-42d4-838c-e08d53f09612/1/9-5cHIBMM_3jPZsIuRn3PTHQttk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9-5cHIBMM_3jPZsIuRn3PTHQttk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:ef:de:df:99:28:46:35:40:41:7f:68:f6:f5:65:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7ee5c1c804c33fde33d9b08b919f73d31d0b6d9
Validity
Not Before: Apr 21 20:00:14 2025 GMT
Not After : Apr 22 20:00:14 2025 GMT
Subject: CN=7104ebfcf61d335472b4c7d678c27326d36025b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:39:39:5f:e6:ee:eb:47:15:2f:11:03:ac:58:
b7:51:f7:8f:20:9c:c8:e4:b8:73:42:a4:7d:46:5d:
53:a8:a9:e5:09:29:29:fd:1c:2f:3e:de:9f:85:19:
f5:13:ad:d3:ce:b2:2b:44:17:91:72:10:c5:b8:62:
25:9e:60:7a:af:2a:96:a6:45:17:26:7a:de:36:92:
c8:ac:3b:43:d1:3f:b7:9c:1e:f7:c5:d5:cd:0a:32:
2c:b4:b1:7c:63:b3:8a:46:6a:2d:99:cc:6b:cb:e0:
0e:b6:70:3c:69:4c:59:d4:b6:e9:5b:f1:74:a5:5d:
d6:4b:bc:1f:9d:b3:e3:39:16:38:e9:af:d0:80:18:
1e:30:c2:46:76:f3:e8:1c:2c:65:ac:1b:4d:a8:1d:
58:03:03:ab:e7:80:8f:9d:d3:81:b5:32:8a:a5:ee:
12:5f:57:f9:e0:51:37:bc:9f:c3:7e:5c:38:f2:3d:
58:d4:93:96:36:c0:85:24:dc:db:45:db:c8:ac:b5:
ab:a1:c1:ef:4a:f6:9d:24:04:c2:bd:65:ef:f6:29:
69:2c:00:d1:bc:43:14:ef:e4:9a:f1:97:c5:47:56:
d9:b1:aa:be:23:06:6c:0e:65:69:63:b2:5c:08:d7:
e9:15:50:40:28:34:29:a3:a1:ec:4d:02:9b:cd:b7:
60:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:04:EB:FC:F6:1D:33:54:72:B4:C7:D6:78:C2:73:26:D3:60:25:B6
X509v3 Authority Key Identifier:
keyid:F7:EE:5C:1C:80:4C:33:FD:E3:3D:9B:08:B9:19:F7:3D:31:D0:B6:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-5cHIBMM_3jPZsIuRn3PTHQttk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5b28e1-f70c-42d4-838c-e08d53f09612/1/9-5cHIBMM_3jPZsIuRn3PTHQttk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5b28e1-f70c-42d4-838c-e08d53f09612/1/9-5cHIBMM_3jPZsIuRn3PTHQttk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:1d:a1:b9:1e:8c:e4:7a:8c:b1:35:90:7e:6d:98:c1:34:a2:
c7:fc:56:69:8b:09:0d:71:e0:55:a3:df:93:c7:4f:ef:a1:b5:
0c:33:44:31:a0:bc:98:d3:99:d4:8f:c0:88:0d:09:94:61:bd:
35:d1:7e:50:5c:f1:9a:82:ac:e3:b9:85:c8:54:ed:ee:ec:30:
32:ce:2a:ae:92:67:b3:b7:cb:e1:90:a9:95:cf:0f:c1:58:aa:
de:68:0c:ee:6e:20:14:b8:df:c7:2f:d7:a3:4b:34:b3:c5:73:
bf:b0:43:5b:39:40:d5:ef:ff:d3:ff:6d:e3:81:fc:55:c8:ac:
e5:4e:c5:0a:10:00:01:54:3d:81:4c:bd:4c:3d:b0:87:cb:6d:
89:19:66:b4:fa:bc:e0:c2:ca:c0:5e:a6:0b:dd:9b:02:dc:e5:
7d:af:8b:44:68:81:a7:87:b0:66:6f:21:3d:31:b9:a6:36:74:
f1:44:92:48:f8:36:7d:cd:05:9d:a1:98:b6:57:42:b0:e1:98:
62:05:cb:86:bb:43:74:25:65:f7:c0:9a:06:c0:d5:42:0b:04:
31:52:6a:d1:ca:60:b3:8c:fc:66:db:93:a8:9c:9a:12:3d:e6:
82:a0:4a:42:e9:41:e2:57:4e:7e:2a:34:ea:8e:2c:f1:c4:05:
25:f0:77:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:32:37 2025 by rpki-client