Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
File: 9kUa8REg2PqJjLYhLOqMph3Fm5I.mft (raw, json)
Hash identifier: DD9Jt/gAmgYbnLAGQhYdY0mMl6gBaCYfcaQEuk2U81o=
Subject key identifier: CB:25:FA:6B:E5:6E:D4:54:B8:C1:E4:8C:33:05:D4:77:F3:83:2C:9B
Authority key identifier: F6:45:1A:F1:11:20:D8:FA:89:8C:B6:21:2C:EA:8C:A6:1D:C5:9B:92
Certificate issuer: /CN=f6451af11120d8fa898cb6212cea8ca61dc59b92
Certificate serial: 0196526D572B55AD5580CDCA970D92744FB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
Manifest number: 0926
Signing time: Sun 20 Apr 2025 09:00:19 +0000
Manifest this update: Sun 20 Apr 2025 09:00:19 +0000
Manifest next update: Mon 21 Apr 2025 09:00:19 +0000
Files and hashes: 1: 9jRjdTO7fBkjcFHt1fnUnaX_T3k.roa (hash: 3WY7AgxSwDZyrJrZX0H0mFMYrwb18tzFjzAuAbCSY+Q=)
2: 9kUa8REg2PqJjLYhLOqMph3Fm5I.crl (hash: YbYM/ntNrbSrlUeKtACTMFFPE3IiY2nvHbtRLKD9G90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:6d:57:2b:55:ad:55:80:cd:ca:97:0d:92:74:4f:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6451af11120d8fa898cb6212cea8ca61dc59b92
Validity
Not Before: Apr 20 09:00:19 2025 GMT
Not After : Apr 21 09:00:19 2025 GMT
Subject: CN=cb25fa6be56ed454b8c1e48c3305d477f3832c9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c7:1e:f6:ae:14:bb:27:9e:0b:78:e8:8b:c5:
e7:f4:3b:a1:29:08:c1:9e:78:c6:61:f8:72:1d:d0:
37:a7:98:d2:dc:48:8c:12:1d:e7:b8:54:df:75:3d:
39:07:69:49:13:35:af:bc:76:fb:19:99:58:c5:09:
9a:6c:43:51:73:eb:a8:99:55:19:04:a1:50:88:6e:
2b:c5:91:d2:91:a4:3c:47:a3:0d:d5:6e:b7:45:b4:
19:1f:fc:2a:bb:90:17:04:c9:31:f7:2e:63:a1:d6:
35:63:e4:91:74:76:7f:e6:e6:67:2b:bb:9c:9d:24:
b2:10:0f:18:1f:b4:d3:4c:27:41:fe:0b:0f:06:7c:
27:93:e1:62:d9:38:c1:e9:14:3e:79:41:58:f1:e1:
dd:f5:4f:0e:25:72:bf:75:1b:1b:df:3a:75:16:e6:
0e:88:7f:b4:0c:f5:44:44:ab:2d:25:32:6f:34:11:
48:ce:2a:4c:13:5a:a6:d3:91:23:71:21:5a:44:5f:
a5:ba:e3:b7:c7:64:6a:f8:75:48:86:a3:7e:6b:9f:
54:a8:e8:48:10:0c:b9:d1:d0:75:13:ac:22:e6:c2:
68:9d:82:66:85:ba:36:31:58:f0:bc:0c:45:e1:86:
24:07:b7:24:1a:7e:11:2e:8f:42:b6:48:b4:57:10:
a3:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:25:FA:6B:E5:6E:D4:54:B8:C1:E4:8C:33:05:D4:77:F3:83:2C:9B
X509v3 Authority Key Identifier:
keyid:F6:45:1A:F1:11:20:D8:FA:89:8C:B6:21:2C:EA:8C:A6:1D:C5:9B:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:4f:bf:63:b3:f3:4a:9d:ab:f0:a7:e6:79:f8:fb:b6:3f:8d:
dc:87:c0:10:6f:c8:1a:22:26:0a:69:64:7b:df:c1:a4:35:35:
a0:8b:17:d3:98:43:00:ac:48:db:93:0d:99:18:4a:b2:df:8a:
7b:aa:b0:30:a9:b4:7b:80:8d:45:b5:52:9a:71:85:a3:4b:c6:
18:64:47:fe:20:13:50:c1:c8:58:6c:3c:04:79:81:fb:0f:2a:
af:a8:b8:4f:38:58:d4:25:3e:1f:3a:fa:a7:f8:b6:d5:81:fc:
ba:75:8a:f4:66:2e:5f:e3:a9:de:f5:80:b8:35:67:fd:e6:84:
b3:02:69:a4:59:79:09:17:8f:58:4f:05:25:73:12:b5:be:65:
fc:b6:e2:04:ea:85:ad:3b:0b:89:82:28:a1:cb:0a:70:63:bb:
7e:27:de:bc:c2:aa:79:96:1f:85:30:91:a6:9e:d9:6c:1b:53:
0e:90:76:80:f5:06:67:b5:15:a7:5f:c5:75:a9:82:93:10:2f:
6d:1f:b5:fa:86:b5:9d:24:47:d3:25:16:ff:f7:06:ba:ef:eb:
8d:cc:94:51:8e:39:22:36:c8:8b:4d:c0:98:33:51:28:51:64:
29:ee:7f:06:e3:20:f4:45:ef:73:0c:03:e6:b3:ed:cc:a2:52:
d2:84:2f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:19:08 2025 by rpki-client