Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.mft
File: 9XpIEqFZ72qekpcudXKtZi1yIVo.mft (raw, json)
Hash identifier: 6cpuok5Ysv54DqnEJ/vTjay48hwSVMa8F/VyHlozOug=
Subject key identifier: 6B:A7:E8:12:53:E7:D9:32:0B:00:71:5F:C2:4D:CC:35:BB:AF:B9:F4
Authority key identifier: F5:7A:48:12:A1:59:EF:6A:9E:92:97:2E:75:72:AD:66:2D:72:21:5A
Certificate issuer: /CN=f57a4812a159ef6a9e92972e7572ad662d72215a
Certificate serial: 01965B0330B3CC35518F8A17EF5440B4A4DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XpIEqFZ72qekpcudXKtZi1yIVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.mft
Manifest number: 0DE9
Signing time: Tue 22 Apr 2025 01:00:57 +0000
Manifest this update: Tue 22 Apr 2025 01:00:57 +0000
Manifest next update: Wed 23 Apr 2025 01:00:57 +0000
Files and hashes: 1: 9XpIEqFZ72qekpcudXKtZi1yIVo.crl (hash: 8CNprj81Z2YnVrSfDPxB2DhSEKzw04kvIf0T+WMlvbw=)
2: rsfWL4ne_IO-bw3hiD_1W0HWkNY.roa (hash: zqnrJ6HitRbslJtaa/MioT9cGJCTTWr6OsfLiIDmwLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XpIEqFZ72qekpcudXKtZi1yIVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 20:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:03:30:b3:cc:35:51:8f:8a:17:ef:54:40:b4:a4:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57a4812a159ef6a9e92972e7572ad662d72215a
Validity
Not Before: Apr 22 01:00:57 2025 GMT
Not After : Apr 23 01:00:57 2025 GMT
Subject: CN=6ba7e81253e7d9320b00715fc24dcc35bbafb9f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:07:da:c6:f9:fe:29:bd:4f:56:ca:59:a9:04:
63:9d:ad:4c:b8:53:5a:6d:03:6f:ef:a6:4f:9f:21:
3b:78:e8:c4:ae:9e:e2:36:6a:1b:63:52:61:cc:f9:
aa:e1:1a:e4:49:8c:9d:5e:64:68:a5:34:6a:1c:3a:
19:9a:e8:ad:08:ba:21:ee:4f:b8:2e:35:9d:bd:ca:
3a:e0:34:2a:61:b4:b6:a9:e5:3b:cc:ef:e3:53:63:
7d:26:9d:8b:4f:a5:4d:d7:6f:a0:1b:58:72:2d:e1:
be:f1:e7:c6:0f:d1:81:39:64:b9:32:9a:6b:fc:29:
81:c7:36:bc:15:5d:28:48:b5:fe:d0:1e:0f:dd:52:
d5:41:28:f2:56:c2:00:99:7f:d7:44:b5:d7:87:c4:
5a:c2:e3:30:bc:fd:8f:77:2c:95:00:58:9a:99:35:
ad:b5:79:59:d7:fb:9d:4a:be:5b:bd:b7:75:19:2a:
30:8b:d1:12:33:67:42:be:36:fe:11:7a:a6:bb:82:
30:27:a9:bc:f6:a9:63:0e:b1:ab:ad:96:08:4e:81:
02:fd:6b:70:6b:c6:c5:41:25:09:da:a4:a7:23:a9:
8e:5f:14:f2:8d:ed:8a:fc:3f:de:10:c5:e5:de:d6:
c5:d4:70:a6:dc:74:a4:1a:e9:da:c7:5f:7b:3a:ae:
57:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:A7:E8:12:53:E7:D9:32:0B:00:71:5F:C2:4D:CC:35:BB:AF:B9:F4
X509v3 Authority Key Identifier:
keyid:F5:7A:48:12:A1:59:EF:6A:9E:92:97:2E:75:72:AD:66:2D:72:21:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XpIEqFZ72qekpcudXKtZi1yIVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:4d:ce:d3:69:1c:62:d2:86:df:f4:59:bf:56:e9:25:7e:50:
07:e8:d2:f6:09:04:16:10:14:bb:2a:2b:01:a2:88:b3:54:8d:
1c:b0:3c:c7:1a:bf:42:35:2a:70:58:e4:26:88:25:7d:fd:03:
b0:14:9a:91:80:0f:7a:d5:18:24:1f:a3:65:55:83:8d:48:2a:
fc:ae:e8:65:9e:59:00:5c:cd:66:0a:47:30:3c:e1:d0:b8:e9:
de:42:91:7f:8f:74:a1:9f:9e:e3:a5:43:b8:d3:07:fa:04:15:
c1:6f:77:64:3a:a0:01:34:75:47:f5:2f:7e:3b:74:1c:c6:35:
3e:11:90:30:e2:cb:11:a4:be:1b:24:1c:9a:eb:cf:e7:39:80:
10:ad:6b:17:63:f5:37:4d:70:3f:87:f9:29:cb:2f:27:db:b1:
c5:b5:c6:84:40:67:53:fb:45:72:f0:6a:30:d2:a4:2f:72:36:
ff:f1:70:54:5a:96:60:fd:36:ff:40:f0:1b:dd:ce:54:f5:b8:
04:c8:98:72:ec:66:0b:ce:61:de:7a:8f:86:9e:aa:6e:7e:35:
77:4a:d8:45:7b:aa:09:24:83:d5:73:69:24:3b:95:1b:65:d1:
e5:c7:c1:52:62:b1:9f:41:c1:38:c8:39:64:3e:e7:a8:20:22:
e8:93:83:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 06:21:05 2025 by rpki-client