Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft
File: 9QtrQlYAolptwTLeUUeX4qpLAkc.mft (raw, json)
Hash identifier: xRnuknEcO27uGPeppmaFkxGDK/OD5lIuY3KPn4S+dJw=
Subject key identifier: AF:F7:6B:AA:13:23:6D:A0:B4:86:E4:9D:7A:34:FA:FB:30:6F:6C:8F
Authority key identifier: F5:0B:6B:42:56:00:A2:5A:6D:C1:32:DE:51:47:97:E2:AA:4B:02:47
Certificate issuer: /CN=f50b6b425600a25a6dc132de514797e2aa4b0247
Certificate serial: 01965838D49049CBF10CB13719CAF3DD8EE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9QtrQlYAolptwTLeUUeX4qpLAkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft
Manifest number: 1501
Signing time: Mon 21 Apr 2025 12:00:41 +0000
Manifest this update: Mon 21 Apr 2025 12:00:41 +0000
Manifest next update: Tue 22 Apr 2025 12:00:41 +0000
Files and hashes: 1: 9QtrQlYAolptwTLeUUeX4qpLAkc.crl (hash: hLBYi8eIVdD1YkF1bg3FwqTI6q6re3T91/jTbssdwSA=)
2: LF_3HwZmRrCki2d-FP5TfnY-Yfo.roa (hash: OqUUHUSkyKdGpgaBU1hHW7IYtyTJfajGz9ID3t644ac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9QtrQlYAolptwTLeUUeX4qpLAkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:38:d4:90:49:cb:f1:0c:b1:37:19:ca:f3:dd:8e:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f50b6b425600a25a6dc132de514797e2aa4b0247
Validity
Not Before: Apr 21 12:00:41 2025 GMT
Not After : Apr 22 12:00:41 2025 GMT
Subject: CN=aff76baa13236da0b486e49d7a34fafb306f6c8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3c:a3:9f:83:fb:81:8e:e6:ce:45:37:b3:1a:
4c:b8:b0:2a:67:4f:83:b0:e7:f0:be:ad:28:d3:dd:
68:2c:48:d9:3a:e5:c4:84:20:3e:1e:47:64:f2:9f:
20:66:84:43:42:f9:fc:a6:80:71:b0:85:01:e7:29:
07:73:2d:f2:e3:20:b7:ba:8b:50:c3:a7:d8:f2:bd:
eb:67:88:a1:85:3a:19:78:1d:f0:30:f9:50:5f:01:
95:96:c7:76:e9:54:4c:a3:02:3d:f6:4b:ef:dd:4e:
a0:4a:12:ae:c3:e2:87:4c:48:13:94:b3:f8:21:45:
58:71:e8:a3:0f:54:8e:76:48:37:a3:22:13:46:fd:
6e:1b:26:f4:14:85:6e:59:b4:4c:29:78:3c:dc:70:
51:08:d9:96:3e:3b:76:e8:93:7d:92:9d:0c:42:1f:
76:70:2e:95:c7:dc:29:71:2c:1a:74:be:fc:3c:a5:
b1:d7:b7:07:fa:ef:ed:99:80:a6:30:cf:a8:6a:6b:
06:41:7a:f1:d6:3f:9f:66:d7:5f:14:e7:a8:e4:e2:
c7:c5:f0:ba:f4:8c:f4:87:cc:a7:00:56:13:aa:44:
7a:2f:a0:19:36:67:80:75:71:ac:14:0a:ff:9b:89:
cc:1a:78:be:db:ca:81:2e:18:5a:14:0f:d4:f2:15:
d2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:F7:6B:AA:13:23:6D:A0:B4:86:E4:9D:7A:34:FA:FB:30:6F:6C:8F
X509v3 Authority Key Identifier:
keyid:F5:0B:6B:42:56:00:A2:5A:6D:C1:32:DE:51:47:97:E2:AA:4B:02:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QtrQlYAolptwTLeUUeX4qpLAkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:7e:4c:95:7a:94:2c:44:46:96:a3:7e:51:91:b5:f8:cd:77:
b5:21:64:22:a7:ba:f7:ca:3f:bc:1b:3a:8b:17:fe:38:f3:82:
29:51:ee:7b:dc:0a:f5:43:76:9a:09:87:bb:cc:d1:e8:c7:07:
ab:bd:f4:29:77:10:31:41:3f:50:de:ea:a9:2e:e2:1a:06:6e:
37:02:a0:ca:44:08:45:22:f9:4d:60:bc:0b:28:25:88:f0:47:
fd:60:3f:dd:f1:da:dc:31:fd:2e:33:35:c5:d4:9d:8b:ac:77:
d2:c2:08:a2:99:fe:7d:49:58:a7:ed:8b:bd:62:ef:bf:cf:83:
1e:b4:11:f2:97:fa:92:79:26:ad:28:db:01:06:58:88:e3:be:
e7:e4:37:f5:14:d9:18:b2:88:aa:ac:df:2a:48:c8:83:e8:20:
61:57:d5:da:fb:7e:f8:42:6c:6e:e6:70:a2:61:ed:81:4f:50:
c1:8f:19:d1:6a:9c:73:2f:23:9c:cd:33:2a:86:36:b0:fe:a6:
3c:e4:af:10:5a:29:fc:c4:5c:b2:f0:58:bd:dd:31:e4:2a:2e:
9d:c6:38:62:f0:e5:8b:32:af:e2:4e:f9:88:a7:d2:20:d6:0d:
99:e9:51:e5:ed:d0:8f:bc:b0:41:47:b7:7e:6e:26:75:0e:c5:
1f:39:8f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:02:24 2025 by rpki-client