Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.mft
File: 9GdLarPVxnQ9AE7AkgoDcc4Bl1g.mft (raw, json)
Hash identifier: 1PugYQISkiQdxUyDULSN7j4b/0y6x2X0/11D4+nsvNI=
Subject key identifier: 7D:61:A4:DF:E8:E7:3D:63:85:1B:79:C4:96:F8:9C:11:2D:B1:EB:9A
Authority key identifier: F4:67:4B:6A:B3:D5:C6:74:3D:00:4E:C0:92:0A:03:71:CE:01:97:58
Certificate issuer: /CN=f4674b6ab3d5c6743d004ec0920a0371ce019758
Certificate serial: 019652DB74E87ACA57930ECCFE41D8A43DEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.mft
Manifest number: 0971
Signing time: Sun 20 Apr 2025 11:00:36 +0000
Manifest this update: Sun 20 Apr 2025 11:00:36 +0000
Manifest next update: Mon 21 Apr 2025 11:00:36 +0000
Files and hashes: 1: 9GdLarPVxnQ9AE7AkgoDcc4Bl1g.crl (hash: qm/FP3viTDThp9pN+PnkHYyWverb4bneaF+8AhJR3Xk=)
2: JFSPkHUXD6uekiRT14OFUV3SRJ8.roa (hash: d66KNl4Y3abt7U8S0mMyC51IECrPTJ0e2/YrGhdvTTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:db:74:e8:7a:ca:57:93:0e:cc:fe:41:d8:a4:3d:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4674b6ab3d5c6743d004ec0920a0371ce019758
Validity
Not Before: Apr 20 11:00:36 2025 GMT
Not After : Apr 21 11:00:36 2025 GMT
Subject: CN=7d61a4dfe8e73d63851b79c496f89c112db1eb9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d4:06:6c:e4:f9:db:89:65:b8:c0:af:c7:4f:
89:cb:b7:9a:6c:df:89:3d:8d:64:b1:40:20:a1:51:
3e:b6:5e:fe:cf:a7:8a:bb:81:b1:79:f4:78:9a:10:
4f:5f:f8:75:b6:04:ed:ab:47:7d:1b:c6:af:d7:d8:
88:c7:60:57:f9:87:32:00:8d:04:09:41:af:6f:62:
95:0d:65:37:c2:e7:7c:b9:65:fb:c6:ed:f8:fc:5e:
38:c4:92:82:cd:ee:7a:6e:9e:d1:b2:43:22:dc:b8:
45:e5:d8:10:bd:73:57:b9:39:3d:a7:df:16:7d:af:
43:df:c1:ac:5d:49:37:6d:34:04:a7:0f:85:85:5a:
80:ed:f0:5b:9b:bf:e2:67:b3:f5:c1:e6:73:43:f7:
50:9d:fd:0a:01:47:6f:f4:27:3c:2e:e2:dd:ab:20:
8b:d9:12:76:0a:c7:85:85:ea:6b:00:f4:6c:b2:dc:
ac:60:b0:c7:32:a5:a5:23:b7:d7:59:a8:06:77:96:
08:9b:ef:9c:61:98:dd:09:75:49:54:60:3f:43:f8:
02:24:71:13:f2:03:18:30:00:11:29:72:a4:9f:78:
c5:ac:11:48:ed:e2:7f:27:86:c7:31:cf:a4:59:5d:
97:9e:50:e9:f9:87:e0:2e:36:52:4d:6c:62:1d:a7:
1d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:61:A4:DF:E8:E7:3D:63:85:1B:79:C4:96:F8:9C:11:2D:B1:EB:9A
X509v3 Authority Key Identifier:
keyid:F4:67:4B:6A:B3:D5:C6:74:3D:00:4E:C0:92:0A:03:71:CE:01:97:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:f9:52:55:7b:9b:f7:5e:07:2a:64:0c:04:cb:cc:85:da:73:
89:ae:52:ed:06:8a:fa:ac:63:98:19:2b:70:40:71:9c:4a:e0:
ec:fb:66:9a:eb:f3:4c:76:66:39:61:18:78:ef:02:08:ce:be:
5d:f7:8e:6b:1c:bb:f9:21:60:66:36:a4:ca:0e:0b:f9:7e:a6:
9e:01:a5:c0:f0:95:e5:d4:72:e7:c6:75:e8:ff:e4:10:8d:63:
26:ff:42:a0:94:b3:b1:c3:3b:92:53:02:05:37:62:3f:b5:6c:
4e:24:0f:6e:dc:e4:ec:ce:48:f7:e3:ab:31:97:0b:e8:5e:03:
d3:fd:48:84:1f:5d:ad:87:90:9a:3a:03:e5:73:16:7e:c0:8b:
07:69:67:72:a9:6b:ff:c1:7b:e8:10:08:3d:57:49:f0:b0:5c:
c2:91:a4:9a:aa:38:c3:42:31:31:0e:dc:41:ff:5c:79:3c:13:
99:aa:af:2d:56:fa:95:72:e0:4e:6e:ff:e9:24:62:0c:ea:4b:
d5:08:8b:17:60:02:1b:08:87:2f:fd:da:32:e8:d1:22:4b:2e:
3a:3c:60:07:20:41:ed:39:68:0b:a9:dc:95:f9:9e:bc:e7:61:
42:88:f2:06:67:55:ce:15:e4:c5:45:bf:14:88:0e:65:86:38:
34:7b:a3:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:23:41 2025 by rpki-client