Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/f997c8-df70-4d7f-b86d-192cb369423f/1/9i4OVeXFow7AS9bcRtFUs-S3tfU.mft
File: 9i4OVeXFow7AS9bcRtFUs-S3tfU.mft (raw, json)
Hash identifier: HU25BSGdogIQfU6Es8XdHC996bWcRc8iioPRqNlW9r4=
Subject key identifier: 53:8F:18:5A:14:9A:7B:03:2A:CF:54:C2:E3:54:33:26:A1:60:E0:19
Authority key identifier: F6:2E:0E:55:E5:C5:A3:0E:C0:4B:D6:DC:46:D1:54:B3:E4:B7:B5:F5
Certificate issuer: /CN=f62e0e55e5c5a30ec04bd6dc46d154b3e4b7b5f5
Certificate serial: 0196545BE33E12077FD2C74B6F1F9F8243EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9i4OVeXFow7AS9bcRtFUs-S3tfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/f997c8-df70-4d7f-b86d-192cb369423f/1/9i4OVeXFow7AS9bcRtFUs-S3tfU.mft
Manifest number: 093A
Signing time: Sun 20 Apr 2025 18:00:30 +0000
Manifest this update: Sun 20 Apr 2025 18:00:30 +0000
Manifest next update: Mon 21 Apr 2025 18:00:30 +0000
Files and hashes: 1: 9i4OVeXFow7AS9bcRtFUs-S3tfU.crl (hash: P+IhyqmdX93q4T6az45tbkg5z65SNLqd0YEMqaVVA84=)
2: t-NTnv2Ro8nWywZwXpvfbvg95_c.roa (hash: nKK6UB3Rz/fAFcSsBek32u+mXGAo3Dx3MPDp3oR/j+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/f997c8-df70-4d7f-b86d-192cb369423f/1/9i4OVeXFow7AS9bcRtFUs-S3tfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/f997c8-df70-4d7f-b86d-192cb369423f/1/9i4OVeXFow7AS9bcRtFUs-S3tfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9i4OVeXFow7AS9bcRtFUs-S3tfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:5b:e3:3e:12:07:7f:d2:c7:4b:6f:1f:9f:82:43:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f62e0e55e5c5a30ec04bd6dc46d154b3e4b7b5f5
Validity
Not Before: Apr 20 18:00:30 2025 GMT
Not After : Apr 21 18:00:30 2025 GMT
Subject: CN=538f185a149a7b032acf54c2e3543326a160e019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e8:20:d3:92:82:45:68:1b:02:be:67:72:af:
92:d4:f8:58:19:38:d5:30:95:0e:28:22:da:51:2d:
74:c0:fa:db:f4:96:ea:97:9d:11:53:67:2f:c5:1c:
7b:50:51:ef:80:0e:36:68:db:b0:ae:3c:82:78:80:
dd:08:b5:27:4f:e0:6a:11:13:c0:c0:5f:3a:5c:ef:
8e:4e:43:43:70:c4:d0:2c:b4:df:1a:46:89:c7:ba:
3d:b4:b8:9e:f9:50:c3:db:4d:b2:71:85:98:a6:61:
40:ba:c6:44:0f:49:57:74:b4:ff:fe:76:0c:9d:29:
23:2c:e1:2d:9a:e5:a0:a1:a6:fe:15:12:c8:45:72:
93:0e:b9:3f:51:02:c8:75:14:27:b5:af:9f:72:35:
a7:e5:07:9b:de:b0:97:90:45:b7:55:34:3d:a5:9a:
2b:e1:85:15:fb:90:5d:97:41:cd:46:2b:35:37:47:
32:4c:e0:d7:b1:a6:f3:88:76:f8:3f:1c:41:9b:b6:
2e:ef:1c:54:bc:7b:c8:d6:f4:e8:eb:a0:f7:77:7d:
c0:fd:91:ea:ce:d8:e4:af:60:74:8e:78:7c:35:5a:
b2:12:56:f8:c8:a1:bf:8a:bb:3b:a7:41:f3:63:e1:
d3:3b:a2:0e:48:30:7c:e4:0e:fc:9b:2e:da:f3:d0:
10:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:8F:18:5A:14:9A:7B:03:2A:CF:54:C2:E3:54:33:26:A1:60:E0:19
X509v3 Authority Key Identifier:
keyid:F6:2E:0E:55:E5:C5:A3:0E:C0:4B:D6:DC:46:D1:54:B3:E4:B7:B5:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9i4OVeXFow7AS9bcRtFUs-S3tfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f997c8-df70-4d7f-b86d-192cb369423f/1/9i4OVeXFow7AS9bcRtFUs-S3tfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f997c8-df70-4d7f-b86d-192cb369423f/1/9i4OVeXFow7AS9bcRtFUs-S3tfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:a3:ec:f4:08:a1:5f:9b:c0:7b:8a:dc:c4:fc:19:3e:04:cf:
64:08:7f:37:54:81:72:e8:92:92:3b:9e:bf:ef:b4:d4:bd:6a:
96:d5:3b:58:5f:c5:b7:c3:e3:9f:3e:6d:6b:86:c6:df:5a:43:
a4:ac:ec:e5:9e:29:9c:7b:bd:74:e7:99:b4:ad:b9:d6:cd:55:
82:c7:04:5f:53:1c:b9:dd:d7:99:6a:33:15:a2:2a:e3:3d:d0:
02:0d:59:a3:91:56:ff:a3:7e:5f:63:05:12:2e:da:af:5d:d0:
4e:93:41:04:f2:fc:e6:6e:dc:2c:6d:f3:58:2b:0d:70:ee:4b:
2d:ab:74:0c:81:f2:c8:14:b1:89:e4:6b:b0:c7:44:39:ae:e5:
95:57:a0:3d:d0:f2:ff:f8:b5:18:30:4b:47:48:3c:67:b0:2f:
59:41:54:d3:fd:7a:9c:e3:5d:28:34:b6:6b:5f:ef:07:1b:81:
56:db:69:6e:3e:7d:d3:60:2d:e4:bb:e9:79:c1:d9:82:7e:58:
8d:80:1d:32:2f:2e:63:fd:ca:20:e8:ef:e5:3a:22:e7:ba:b4:
49:48:77:d8:40:97:0f:9f:db:00:3f:c6:f3:cc:4a:05:3a:6a:
be:76:5f:65:27:fd:ef:a2:a2:4c:81:3c:1f:74:e1:d5:ba:6b:
8c:d3:25:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:19:24 2025 by rpki-client