Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.mft
File: n9aPGyQUI9qXZHuZIkUwOG0laYw.mft (raw, json)
Hash identifier: dH62njEZVU5KifzkpDerBLmqB8gXvKJhlO2I7oLaT5M=
Subject key identifier: DE:A0:2E:E5:CC:B9:A6:B6:BD:E5:F2:A5:33:EF:53:88:18:75:39:A9
Authority key identifier: 9F:D6:8F:1B:24:14:23:DA:97:64:7B:99:22:45:30:38:6D:25:69:8C
Certificate issuer: /CN=9fd68f1b241423da97647b99224530386d25698c
Certificate serial: 01965C15AA932A3EE3823BE8843F5D09AF3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n9aPGyQUI9qXZHuZIkUwOG0laYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.mft
Manifest number: 1502
Signing time: Tue 22 Apr 2025 06:00:45 +0000
Manifest this update: Tue 22 Apr 2025 06:00:45 +0000
Manifest next update: Wed 23 Apr 2025 06:00:45 +0000
Files and hashes: 1: 6zp8k7ws-z1aCcsmWGLYmfVsv4E.roa (hash: bUIQEUVAIaujbjPg7okGrEKCeQdfL4efouwX9EGneXc=)
2: n9aPGyQUI9qXZHuZIkUwOG0laYw.crl (hash: WHqfB2bOslhxqbCdhLa64WYVdaEz6ecDFbhRTn9gyS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/n9aPGyQUI9qXZHuZIkUwOG0laYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:15:aa:93:2a:3e:e3:82:3b:e8:84:3f:5d:09:af:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fd68f1b241423da97647b99224530386d25698c
Validity
Not Before: Apr 22 06:00:45 2025 GMT
Not After : Apr 23 06:00:45 2025 GMT
Subject: CN=dea02ee5ccb9a6b6bde5f2a533ef5388187539a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2d:d8:b7:b6:52:a0:05:c8:52:69:c2:5d:61:
64:89:f5:ac:04:20:14:c7:e1:38:cd:74:b5:4c:23:
f1:ed:d5:c0:36:24:3b:01:4a:27:8a:91:ff:82:13:
83:1e:a5:3b:3c:75:fc:f1:57:98:11:53:e9:fa:9a:
36:1f:62:05:d5:0e:ae:e8:90:d2:d2:b3:75:0f:d3:
bd:a1:f0:07:23:4f:25:a0:1a:24:24:45:e2:cb:ba:
0a:a7:d6:80:9a:78:2b:a0:28:e8:26:31:db:2e:2a:
fd:df:77:c6:69:16:cf:2a:8e:42:7d:e8:0a:05:07:
08:92:21:63:50:54:65:02:ff:30:b3:01:66:a2:27:
e7:63:51:45:dd:29:ec:e0:8a:f8:bd:5c:d4:c0:80:
bc:fe:30:b1:54:20:1d:10:7f:b4:db:4f:63:18:4f:
14:34:3e:fa:e9:fe:f7:90:05:b5:5e:1d:42:b2:fe:
2e:f0:f5:14:95:8b:b7:5a:e4:b0:7d:e9:67:d8:c5:
4d:2d:14:bc:ca:a7:dc:30:ad:11:08:9b:1f:57:e0:
70:04:c2:d2:c5:f5:57:62:22:db:98:58:8c:d1:71:
80:bf:78:ec:e2:8e:16:57:f0:eb:72:1d:eb:8a:49:
f9:7a:19:7b:7f:e9:19:db:ca:3b:d0:35:38:ba:d0:
1f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A0:2E:E5:CC:B9:A6:B6:BD:E5:F2:A5:33:EF:53:88:18:75:39:A9
X509v3 Authority Key Identifier:
keyid:9F:D6:8F:1B:24:14:23:DA:97:64:7B:99:22:45:30:38:6D:25:69:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n9aPGyQUI9qXZHuZIkUwOG0laYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:2f:e7:6c:3e:9c:28:0b:04:a0:ce:58:59:c5:ec:3c:7e:2c:
af:3e:10:55:1a:ef:9c:4e:b9:1f:f0:c1:c5:3a:7d:6d:17:20:
e0:27:67:9b:e8:29:3b:f5:88:1a:b1:70:75:8d:96:ec:6a:87:
74:2a:f1:36:3b:f2:ba:86:23:c8:8d:61:e1:84:4b:5f:0c:3f:
b2:8c:57:94:72:bb:4d:d1:b7:c1:27:ea:4a:3b:19:59:ed:de:
7b:bd:1f:c7:30:70:6e:e7:27:44:2d:3a:81:97:84:36:f9:ff:
01:5f:5d:8e:09:66:b4:2b:1b:d0:d4:1b:de:0b:97:13:d0:35:
3f:3f:0a:71:bb:52:bd:78:79:93:5a:61:d8:b5:cf:09:26:b7:
e8:3e:32:bb:45:e2:22:1c:78:41:a5:1a:85:07:94:d3:bb:31:
04:fd:3b:73:02:d3:0b:d2:bc:4d:7a:a4:78:72:f1:0c:fe:a2:
62:a7:ab:5e:61:48:40:45:de:50:10:d5:f6:4d:55:3e:f4:75:
2d:db:94:cb:84:91:c2:69:c3:6e:ae:6f:87:69:a8:36:32:63:
e0:50:39:03:a1:b2:a5:6c:62:af:f3:e9:e8:a4:77:36:a0:5a:
1d:9a:f4:f0:9b:95:7e:89:12:b1:10:e4:f1:9d:b8:52:1a:62:
ab:6c:dd:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:27:09 2025 by rpki-client