Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.mft
File: 9EAkreXkgCwKL2Hm-A9NItwVSFM.mft (raw, json)
Hash identifier: ifqp6VIqDuV5/BiV/9sxod1np9UMoMilVxkX7Qu9EYs=
Subject key identifier: C4:C6:F4:C7:FE:35:DE:ED:11:56:7E:08:2A:3E:13:7E:BE:56:13:6F
Authority key identifier: F4:40:24:AD:E5:E4:80:2C:0A:2F:61:E6:F8:0F:4D:22:DC:15:48:53
Certificate issuer: /CN=f44024ade5e4802c0a2f61e6f80f4d22dc154853
Certificate serial: 019656B831E4A8E3A4309D4AF54644E24D3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9EAkreXkgCwKL2Hm-A9NItwVSFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.mft
Manifest number: 1243
Signing time: Mon 21 Apr 2025 05:00:34 +0000
Manifest this update: Mon 21 Apr 2025 05:00:34 +0000
Manifest next update: Tue 22 Apr 2025 05:00:34 +0000
Files and hashes: 1: 4J1X6PCF39tH0Ho4_SbJ7AtxDbg.roa (hash: sDrnXJKsdAbmdaesDlUsR31uPE7GfMdA3txIVC37ks4=)
2: 9EAkreXkgCwKL2Hm-A9NItwVSFM.crl (hash: z+Nu2ZVBVxHhRh/xt0Zq/RhbbCGzO6q4MIynWR+m3Ck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9EAkreXkgCwKL2Hm-A9NItwVSFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:b8:31:e4:a8:e3:a4:30:9d:4a:f5:46:44:e2:4d:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f44024ade5e4802c0a2f61e6f80f4d22dc154853
Validity
Not Before: Apr 21 05:00:34 2025 GMT
Not After : Apr 22 05:00:34 2025 GMT
Subject: CN=c4c6f4c7fe35deed11567e082a3e137ebe56136f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:da:bd:5a:ec:94:6f:3d:b0:6a:8e:84:84:3f:
a9:df:0e:7d:dc:d0:5c:d9:7e:5c:da:ee:b3:9a:55:
4b:03:1c:73:e0:3e:ab:68:6b:63:42:f6:eb:4b:54:
f2:18:06:25:a3:ce:e0:24:0f:60:c7:6e:1f:dc:7d:
24:8e:a3:28:22:4c:cc:b4:8b:7d:d6:b7:fa:1d:7d:
b8:7f:56:51:b9:9f:80:65:cd:67:08:b7:8d:3c:a1:
fa:9e:5e:a1:a7:e3:8d:af:11:07:4b:a7:a8:ed:62:
d8:22:75:96:4d:e3:f5:e6:51:eb:92:02:ee:2f:70:
01:d2:1c:2e:b4:2f:be:1c:36:25:2c:08:61:bc:25:
d5:d5:aa:ee:4f:2e:d7:b8:f4:e2:63:ec:db:b7:5f:
44:cf:f4:f1:54:fc:da:33:6b:1f:61:6c:eb:61:ee:
a4:57:f0:f4:11:ea:ae:4e:cb:8e:b2:35:e9:5c:a2:
32:9b:89:1c:02:d7:45:e3:4a:b1:a3:94:10:ac:dd:
b4:e1:11:4e:51:17:4a:8a:57:b7:66:dc:f9:20:a9:
24:83:73:96:13:45:46:b7:a3:d6:99:ec:45:3a:8a:
0b:1f:1e:31:24:ae:03:f9:dd:ef:e1:f7:29:e2:e2:
a0:43:67:ee:69:a7:6f:1a:d5:e8:0f:ae:9b:c0:3e:
9c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:C6:F4:C7:FE:35:DE:ED:11:56:7E:08:2A:3E:13:7E:BE:56:13:6F
X509v3 Authority Key Identifier:
keyid:F4:40:24:AD:E5:E4:80:2C:0A:2F:61:E6:F8:0F:4D:22:DC:15:48:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EAkreXkgCwKL2Hm-A9NItwVSFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:2f:96:2f:56:58:7d:27:e8:0a:36:3c:d4:cb:0b:61:35:43:
09:64:7c:4a:01:17:fc:0e:59:c4:ae:b9:ed:4d:1f:01:ca:ae:
10:57:fe:65:2c:dd:c0:88:9a:84:da:55:88:60:24:dd:f3:a4:
7c:47:fa:71:87:bb:cf:b0:52:35:ba:7b:82:79:e2:fa:30:18:
67:d5:d5:0c:2f:3a:1a:7c:e2:df:6d:43:c8:05:2a:3a:21:63:
e6:19:c7:86:31:67:1e:18:eb:b4:29:7e:ae:ba:01:53:11:9e:
3c:47:23:ca:4a:11:97:28:14:44:e8:37:ab:39:c1:bb:fa:45:
1d:01:da:26:58:ac:2e:48:5e:cc:1d:7a:96:5b:96:a3:6d:9d:
bd:f5:92:c3:b9:3b:6d:c1:10:50:3f:05:07:fd:92:ba:ee:58:
bb:5e:43:22:8e:79:4a:5f:ed:1c:dc:f3:96:fd:36:dc:3c:58:
a9:4a:9e:d4:16:84:8d:67:f3:ac:4f:16:e9:e4:f2:31:d7:c6:
7e:70:10:11:8d:82:2e:f9:f5:51:7f:61:ed:9e:2f:82:78:89:
7d:54:39:6a:44:3b:a8:7d:d7:ac:3b:80:e3:db:1d:89:fc:28:
99:1f:a6:f9:39:02:72:78:70:8b:d9:af:c6:ca:85:4c:0e:15:
ea:64:05:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:02:59 2025 by rpki-client