Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.mft
File: 9Y-A0jqdiu1P4xH3IiCcldqarUY.mft (raw, json)
Hash identifier: v3Aw2qELem6a1Tm2XwTLFfeC2lxY/bTx4S2x3rE4hQY=
Subject key identifier: 17:39:FE:C4:D1:E9:16:BE:4F:60:38:DA:2D:19:CA:65:5F:A5:AD:9C
Authority key identifier: F5:8F:80:D2:3A:9D:8A:ED:4F:E3:11:F7:22:20:9C:95:DA:9A:AD:46
Certificate issuer: /CN=f58f80d23a9d8aed4fe311f722209c95da9aad46
Certificate serial: 019660292C00932FF9EB34C355EC649447F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Y-A0jqdiu1P4xH3IiCcldqarUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.mft
Manifest number: 0BE1
Signing time: Wed 23 Apr 2025 01:00:32 +0000
Manifest this update: Wed 23 Apr 2025 01:00:32 +0000
Manifest next update: Thu 24 Apr 2025 01:00:32 +0000
Files and hashes: 1: 9Y-A0jqdiu1P4xH3IiCcldqarUY.crl (hash: uumXlBKPr8TZ5pdbBAWR7npqGc6CvuRvZZs3TmGqm3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Y-A0jqdiu1P4xH3IiCcldqarUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:60:29:2c:00:93:2f:f9:eb:34:c3:55:ec:64:94:47:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f58f80d23a9d8aed4fe311f722209c95da9aad46
Validity
Not Before: Apr 23 01:00:32 2025 GMT
Not After : Apr 24 01:00:32 2025 GMT
Subject: CN=1739fec4d1e916be4f6038da2d19ca655fa5ad9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:1d:5a:09:ed:d4:d0:d5:37:27:61:64:be:de:
8f:d2:73:75:65:00:d8:88:a4:c0:b5:af:1e:e7:65:
99:73:18:38:f3:1a:c5:97:0f:6c:f0:32:73:ad:e0:
07:e1:d8:41:6f:39:bd:cd:c0:75:b8:df:51:08:58:
ac:41:2c:43:89:ff:a6:af:b0:3b:74:f8:cb:74:89:
df:21:35:13:ed:17:42:95:e7:5b:94:34:97:09:e6:
81:41:ff:fa:47:f8:e1:65:ab:ef:81:4c:ba:0b:07:
fc:4c:8d:ca:d6:6c:44:01:02:ac:2a:cf:e9:f0:ce:
c7:be:19:f4:48:79:d0:e0:d1:6e:1f:8b:ec:26:d6:
b7:c5:77:db:25:ac:40:f5:6a:a0:dd:6e:6b:c8:7c:
c4:ef:dd:6c:72:6b:61:64:b3:43:56:93:9d:15:64:
69:8b:aa:0c:69:90:67:18:a1:35:67:e0:ee:6c:30:
70:02:cb:9f:2c:d8:ef:70:a5:0d:5b:de:56:06:e9:
cc:35:66:46:28:1c:cd:5e:b2:68:70:41:11:91:62:
35:98:9e:ea:74:f5:dc:96:8d:86:b0:49:07:6b:cd:
6a:84:0e:5a:ed:21:3d:49:6e:a6:e0:9d:ee:d7:3f:
54:63:3b:2e:97:24:af:e5:d9:92:39:81:fc:75:f7:
05:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:39:FE:C4:D1:E9:16:BE:4F:60:38:DA:2D:19:CA:65:5F:A5:AD:9C
X509v3 Authority Key Identifier:
keyid:F5:8F:80:D2:3A:9D:8A:ED:4F:E3:11:F7:22:20:9C:95:DA:9A:AD:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Y-A0jqdiu1P4xH3IiCcldqarUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:27:18:2b:36:63:21:8d:99:56:bc:0a:82:96:00:0a:9b:30:
cc:49:7a:6c:90:ca:14:3c:99:c1:b1:15:23:96:bc:e1:08:04:
42:20:cb:0f:dd:96:94:57:91:c8:5a:f4:33:55:1f:ee:c5:56:
20:6a:e6:6a:2a:ce:ac:63:57:c7:5c:c1:c5:76:6d:c5:b7:7a:
15:ff:f5:c2:01:7f:a5:f0:ad:03:ac:31:c6:42:86:6d:ae:8f:
4c:cd:b7:57:87:7f:3e:80:e7:a5:c4:30:d2:5f:a4:5e:4b:d3:
20:b8:2c:10:ae:0f:2f:9c:28:7a:7c:ff:2c:88:48:16:fb:ef:
65:c6:4f:c4:51:70:f1:f2:2a:7c:83:1b:57:a5:b1:8d:95:be:
29:3a:3b:57:cf:e7:8f:a2:5f:4a:d2:77:2e:43:92:03:bb:85:
75:c5:31:11:70:78:a6:ca:03:9a:f1:e1:57:fe:ee:68:5c:f2:
17:a3:d0:01:18:9f:7f:ec:87:20:95:b2:fe:04:a6:e8:ec:fc:
99:e4:93:dd:c3:e2:06:73:01:a4:d3:c3:ac:ba:3f:29:3c:bd:
87:72:04:cd:d3:b3:ca:e1:f5:62:22:b3:55:d8:fd:de:9a:a0:
26:58:30:a6:9d:2a:1e:10:ed:7b:14:38:6b:02:8b:4a:f7:54:
67:09:f6:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 05:25:01 2025 by rpki-client