Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.mft
File: 9XvH8urwyvppvuX6vmcSK0Nj_nI.mft (raw, json)
Hash identifier: O+vZokR78SGq/07sMN3gZOu7bj9/u8Jvx+Ji3M/jIgw=
Subject key identifier: 57:63:E8:2D:89:D3:C3:B0:2A:BD:01:48:21:D8:D6:2B:43:37:CC:79
Authority key identifier: F5:7B:C7:F2:EA:F0:CA:FA:69:BE:E5:FA:BE:67:12:2B:43:63:FE:72
Certificate issuer: /CN=f57bc7f2eaf0cafa69bee5fabe67122b4363fe72
Certificate serial: 0196575CC51C03B2074D8F3B30B29DE2C0DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XvH8urwyvppvuX6vmcSK0Nj_nI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.mft
Manifest number: 1500
Signing time: Mon 21 Apr 2025 08:00:19 +0000
Manifest this update: Mon 21 Apr 2025 08:00:19 +0000
Manifest next update: Tue 22 Apr 2025 08:00:19 +0000
Files and hashes: 1: 9XvH8urwyvppvuX6vmcSK0Nj_nI.crl (hash: n1qtDe4MeEdFPhYLRlt1GzMiVptegwy+YY0ZZyEjcGU=)
2: KNQf97WzItrOYioPwLu-Tdh4fNc.roa (hash: RIjtWc8dl547OecCvbWgp63AohvHeAGZkMZVo9/tFEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XvH8urwyvppvuX6vmcSK0Nj_nI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:5c:c5:1c:03:b2:07:4d:8f:3b:30:b2:9d:e2:c0:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57bc7f2eaf0cafa69bee5fabe67122b4363fe72
Validity
Not Before: Apr 21 08:00:19 2025 GMT
Not After : Apr 22 08:00:19 2025 GMT
Subject: CN=5763e82d89d3c3b02abd014821d8d62b4337cc79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:58:27:df:2a:8e:64:b4:0f:bd:c3:6b:7d:55:
79:23:61:f5:51:d0:b6:cc:03:f6:e9:96:07:f2:2c:
f1:92:00:cb:3a:0c:b3:8e:fa:e3:65:9a:5a:79:8c:
eb:88:8b:3f:a2:99:bf:ef:dd:87:b6:32:f8:20:5b:
ea:de:78:09:ff:7c:f2:3d:b1:6d:5f:f2:c0:af:bb:
38:09:b0:de:a1:8e:59:c1:e1:94:9f:d4:08:c1:ac:
d4:3a:1a:d5:dd:8d:96:0c:2a:8d:7f:0c:86:e5:5b:
b4:37:fd:6a:dc:49:a1:ce:2d:b6:de:57:15:5f:aa:
ed:34:b5:7e:2d:34:f2:3b:c1:f8:f0:75:d6:0e:be:
c5:fe:56:9d:55:d5:c1:f8:c2:b6:10:ea:88:0d:8a:
c8:73:4d:2d:22:dd:18:78:e6:53:fd:a3:a7:6f:e8:
75:9e:28:e4:e9:7d:74:9e:d0:e1:d3:ed:99:a6:2a:
03:8d:0e:72:3d:36:0a:73:06:a9:0e:42:40:fd:17:
d0:44:84:d3:81:aa:44:e9:9f:0b:e5:42:dc:64:2a:
ee:b3:ac:7b:22:ad:20:5c:d8:9e:8b:b1:63:a7:01:
8c:11:3f:07:29:62:01:cc:bb:04:6f:97:0f:a5:e1:
df:56:e8:de:75:61:98:bd:7a:d0:63:c3:01:ac:4b:
24:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:63:E8:2D:89:D3:C3:B0:2A:BD:01:48:21:D8:D6:2B:43:37:CC:79
X509v3 Authority Key Identifier:
keyid:F5:7B:C7:F2:EA:F0:CA:FA:69:BE:E5:FA:BE:67:12:2B:43:63:FE:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XvH8urwyvppvuX6vmcSK0Nj_nI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:0c:3a:dc:96:69:89:24:d1:8c:4d:3e:20:83:b8:03:c1:64:
a9:53:f7:a4:8c:27:0f:47:9c:8b:63:aa:12:e5:08:99:ea:91:
ce:e4:00:b3:5b:b4:82:38:d6:6a:ae:56:fa:16:ca:1e:99:f4:
4b:5c:eb:d2:25:27:40:84:0a:de:32:43:af:78:b3:48:48:85:
ec:3c:33:c3:c3:e4:e2:03:12:e5:57:13:5a:75:63:f6:2f:bb:
70:15:07:5d:9a:e3:87:fc:71:c2:68:ec:b3:11:c5:a2:40:42:
c7:12:a6:0f:8e:6f:87:d7:84:4e:19:bd:b0:a2:24:7e:7d:a7:
49:d5:94:69:36:70:fc:de:c5:22:44:9f:5a:ea:24:a3:fc:f2:
f2:0b:05:cf:a4:1e:6e:1b:18:19:4b:fb:71:50:7b:8b:a6:2c:
3c:4d:7c:4b:f7:97:ec:00:08:b9:0b:de:2e:6b:86:bf:b7:3a:
a2:07:9a:59:83:e6:97:83:f6:12:19:9e:bb:db:e1:43:1e:82:
3a:2f:be:bb:99:2f:ba:d3:f2:dd:d8:56:c1:8e:62:23:52:12:
8e:af:7e:c2:f4:f0:f4:4b:d8:b6:8d:d0:10:7a:97:9f:a2:d4:
07:51:b4:4d:34:09:ba:84:43:75:2b:58:5b:06:cf:30:50:fa:
d9:63:ed:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:37:30 2025 by rpki-client