Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft
File: 9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft (raw, json)
Hash identifier: UockMLdkZaCp6oVCEEpRt1WYyPRmbUB6G6Uk4VWQVJ4=
Subject key identifier: 58:78:32:EF:30:37:10:F8:77:F8:8E:D3:F2:90:8A:D1:17:0C:B8:86
Authority key identifier: F4:57:C0:20:CD:C2:2B:68:DA:26:A4:69:F6:FF:A6:B4:48:37:0D:1D
Certificate issuer: /CN=f457c020cdc22b68da26a469f6ffa6b448370d1d
Certificate serial: 0196545C6073AEC32A9048412C5F1FDB04EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9FfAIM3CK2jaJqRp9v-mtEg3DR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft
Manifest number: 08DD
Signing time: Sun 20 Apr 2025 18:01:02 +0000
Manifest this update: Sun 20 Apr 2025 18:01:02 +0000
Manifest next update: Mon 21 Apr 2025 18:01:02 +0000
Files and hashes: 1: 9FfAIM3CK2jaJqRp9v-mtEg3DR0.crl (hash: 6Jad84hCyJKu0dDsPOXD561Ir4eLGQoqs6gzNSg1HpY=)
2: oArMezXxnppYeQKqa4Fni7TfbMc.roa (hash: qlkimcr4G31oui8MrYfktlDJ5C4NmKprfu244lU2XRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9FfAIM3CK2jaJqRp9v-mtEg3DR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:5c:60:73:ae:c3:2a:90:48:41:2c:5f:1f:db:04:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f457c020cdc22b68da26a469f6ffa6b448370d1d
Validity
Not Before: Apr 20 18:01:02 2025 GMT
Not After : Apr 21 18:01:02 2025 GMT
Subject: CN=587832ef303710f877f88ed3f2908ad1170cb886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:bd:05:a2:16:78:3e:da:4e:2e:6d:5f:92:d8:
70:eb:f9:f8:93:01:01:e5:0b:49:10:08:f6:92:39:
34:ac:ee:55:ca:78:cf:59:a4:66:11:15:2e:8d:74:
bc:26:1b:9b:a8:a5:ac:cd:7d:32:2e:30:80:3c:72:
e4:d9:1f:1a:f0:3f:cf:3d:58:9e:82:b3:bf:24:6e:
f3:a4:1f:a7:74:d7:b6:c6:1f:f0:e8:8c:26:fb:6c:
3a:bd:82:6b:38:fc:27:d5:60:e4:40:ea:2c:52:11:
d3:b0:3f:53:6f:bb:29:ad:d9:7c:cd:d2:c6:77:d7:
2f:b7:74:3f:dc:a5:34:61:e8:65:61:dd:a1:5d:6e:
bc:29:cc:47:b3:32:0b:67:61:db:03:c3:ff:b5:50:
6a:fb:f5:06:f9:55:93:6a:40:a7:cc:82:c6:48:2f:
68:3d:0b:7a:61:e1:6b:aa:14:50:4d:e3:b4:d3:77:
89:51:59:50:ed:c9:ea:76:ec:21:98:57:e7:69:df:
06:d4:63:a4:c5:21:b7:1e:7c:73:a1:5c:4a:c4:82:
c8:8c:e0:10:d1:a4:59:7f:17:54:67:69:0e:a8:df:
03:81:e1:3e:21:82:41:82:47:56:78:9b:04:c6:d4:
96:cf:88:1c:c3:42:f4:93:ed:ee:1e:fd:64:2f:e3:
ba:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:78:32:EF:30:37:10:F8:77:F8:8E:D3:F2:90:8A:D1:17:0C:B8:86
X509v3 Authority Key Identifier:
keyid:F4:57:C0:20:CD:C2:2B:68:DA:26:A4:69:F6:FF:A6:B4:48:37:0D:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9FfAIM3CK2jaJqRp9v-mtEg3DR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:01:63:34:74:ca:3b:fc:e7:e6:52:03:38:d3:6b:a7:bb:b4:
ea:3e:e4:d9:12:77:26:00:88:fe:ae:cd:01:db:a9:7c:5e:f4:
e7:6f:51:10:cc:5c:34:bb:5c:49:2e:bb:ad:63:80:5f:dd:21:
a3:2c:d0:c7:42:fc:91:6c:39:ec:59:df:35:e9:68:56:3d:5c:
1f:f9:2a:c0:7a:ea:1e:c7:4e:69:ce:77:23:a7:ca:e2:8c:a7:
6c:f8:74:80:d4:d1:8b:7e:ad:53:1d:d5:4f:9d:5f:f3:cf:d5:
8a:f6:28:58:11:2c:73:b2:26:a7:03:09:94:58:e9:d2:b5:5c:
3d:10:34:83:02:4b:34:3b:6e:fd:49:87:54:27:20:1b:d7:38:
2f:8a:3f:4c:4b:7b:e1:08:83:a4:14:da:52:5e:aa:c7:b0:6c:
fb:78:6e:a4:8c:81:54:e5:5a:73:c7:ba:f3:09:b4:3f:fb:bc:
00:fd:88:92:22:fc:00:e2:97:f5:03:47:13:2b:90:c7:b4:21:
54:75:74:46:1e:cc:89:80:61:aa:66:fa:d8:e8:6e:ca:b5:db:
41:fd:2f:06:05:d1:13:df:f5:ea:71:b7:27:e1:e3:90:18:07:
a6:cd:9e:e2:fb:95:de:69:28:68:22:53:fd:4b:b0:1d:e4:60:
9d:a3:76:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:27:54 2025 by rpki-client