Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/a84dba-d7a1-4209-a20d-94ad487f2e01/1/9qiFSCQ7bikKBtKaKzcQS3et5vw.mft
File: 9qiFSCQ7bikKBtKaKzcQS3et5vw.mft (raw, json)
Hash identifier: wKYdxS7od6dgZyU8VlKMb1S6vDKa4EVFDbOZHyhrKrY=
Subject key identifier: 86:50:9C:46:B1:71:AF:33:FF:F4:1D:95:E1:15:4D:44:FE:DF:F7:78
Authority key identifier: F6:A8:85:48:24:3B:6E:29:0A:06:D2:9A:2B:37:10:4B:77:AD:E6:FC
Certificate issuer: /CN=f6a88548243b6e290a06d29a2b37104b77ade6fc
Certificate serial: 019656EEC5B5E8B91277C1935249C4C39D83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9qiFSCQ7bikKBtKaKzcQS3et5vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/a84dba-d7a1-4209-a20d-94ad487f2e01/1/9qiFSCQ7bikKBtKaKzcQS3et5vw.mft
Manifest number: 22
Signing time: Mon 21 Apr 2025 06:00:10 +0000
Manifest this update: Mon 21 Apr 2025 06:00:10 +0000
Manifest next update: Tue 22 Apr 2025 06:00:10 +0000
Files and hashes: 1: 9qiFSCQ7bikKBtKaKzcQS3et5vw.crl (hash: tGm+RbjnvovVP0dF4UDBkLsiY0R+Tisqj5btXYilqFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/a84dba-d7a1-4209-a20d-94ad487f2e01/1/9qiFSCQ7bikKBtKaKzcQS3et5vw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/a84dba-d7a1-4209-a20d-94ad487f2e01/1/9qiFSCQ7bikKBtKaKzcQS3et5vw.mft
rsync://rpki.ripe.net/repository/DEFAULT/9qiFSCQ7bikKBtKaKzcQS3et5vw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:ee:c5:b5:e8:b9:12:77:c1:93:52:49:c4:c3:9d:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6a88548243b6e290a06d29a2b37104b77ade6fc
Validity
Not Before: Apr 21 06:00:10 2025 GMT
Not After : Apr 22 06:00:10 2025 GMT
Subject: CN=86509c46b171af33fff41d95e1154d44fedff778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1c:8d:80:7c:cc:55:40:ed:5d:16:06:47:21:
e5:04:52:48:1d:7c:13:b0:16:a9:c8:d1:bc:48:91:
99:99:00:d2:1e:be:b8:31:b9:3c:c2:7f:40:c2:ff:
b7:c3:01:38:26:3b:af:54:1a:42:c8:28:0c:b8:b4:
32:a7:f8:49:1b:34:3d:57:2b:06:54:b8:fd:50:fe:
ac:26:53:03:c8:31:26:07:cb:34:28:59:c4:84:2d:
d8:44:96:48:c6:69:de:e0:27:ed:60:20:20:c0:82:
8b:23:ec:5e:27:75:5d:56:8c:38:07:99:35:22:fe:
1e:75:82:5c:d1:7d:cf:a9:4d:ac:69:27:09:3d:85:
48:89:93:49:43:e2:df:1a:44:f8:a5:57:1a:68:c1:
9c:24:be:0d:5e:ff:d9:65:25:fc:92:3c:ff:af:b3:
ec:64:74:64:19:16:3e:f7:48:ce:f2:e9:d0:9a:dc:
47:d5:12:b7:ad:17:3a:e5:1b:5a:1c:74:61:9d:c2:
c6:b1:6a:d3:67:b4:fd:2d:b6:b4:8d:2c:a7:c4:a1:
09:1c:0c:ff:b1:a3:df:4d:ca:40:85:33:a3:92:5c:
d9:a9:ab:e7:4d:c4:40:95:89:4b:b1:61:ce:87:97:
cd:9c:8d:ca:32:31:34:e2:6d:40:e0:47:e1:30:2e:
78:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:50:9C:46:B1:71:AF:33:FF:F4:1D:95:E1:15:4D:44:FE:DF:F7:78
X509v3 Authority Key Identifier:
keyid:F6:A8:85:48:24:3B:6E:29:0A:06:D2:9A:2B:37:10:4B:77:AD:E6:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9qiFSCQ7bikKBtKaKzcQS3et5vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a84dba-d7a1-4209-a20d-94ad487f2e01/1/9qiFSCQ7bikKBtKaKzcQS3et5vw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a84dba-d7a1-4209-a20d-94ad487f2e01/1/9qiFSCQ7bikKBtKaKzcQS3et5vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:8c:cf:cf:e0:1d:20:71:b5:50:d8:d6:30:86:6f:d5:9d:8f:
af:39:8d:7f:51:f5:82:8f:cb:99:38:d5:86:24:ba:87:5d:84:
28:94:9c:1d:c6:62:d4:ea:08:13:9a:62:4f:9a:8c:66:c3:de:
dc:8f:0d:1f:fb:7a:7d:0d:96:e7:90:96:94:c2:37:50:54:cb:
70:74:17:5b:51:3b:80:00:e4:c3:9c:fb:13:72:1d:f3:ca:12:
6c:87:b2:37:c9:f2:f3:ad:74:de:ba:cb:e7:6f:67:a1:2f:b0:
d8:dd:02:ff:bb:0b:b4:32:d5:7e:05:84:49:f7:51:64:55:1e:
0e:5b:76:44:25:b9:dd:3e:c3:10:f9:8e:e8:8c:db:ac:ac:51:
d0:9d:31:83:c5:7a:41:38:18:7c:97:59:5c:cf:39:1d:4f:48:
e4:59:4c:2d:f5:b3:84:18:be:ff:78:89:bb:01:77:4f:f7:00:
87:d6:aa:f4:8f:b4:37:4f:b1:b4:bf:00:8d:27:03:af:76:6e:
ae:96:fb:c1:ac:a2:ff:a8:9c:52:f8:a4:c6:68:1e:e2:5e:9f:
1d:90:c7:9b:8c:b3:24:45:71:8a:03:e0:42:a2:59:9a:45:d6:
6c:97:64:2c:a9:63:91:90:5f:e2:7c:ef:bd:7a:93:c0:d1:ec:
06:84:0b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:37:43 2025 by rpki-client