Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft
File: 9ssMjyCEMwIDT2NlbqKevW0RY6o.mft (raw, json)
Hash identifier: wF8NwCx70h8yqD4fq2MINktsS3z32bTCCr0ADlGvvPc=
Subject key identifier: 5C:28:E5:2E:60:F2:BC:48:79:D4:E2:5C:2D:A4:98:D3:B6:77:78:77
Authority key identifier: F6:CB:0C:8F:20:84:33:02:03:4F:63:65:6E:A2:9E:BD:6D:11:63:AA
Certificate issuer: /CN=f6cb0c8f20843302034f63656ea29ebd6d1163aa
Certificate serial: 01965681419C0CADE09CF38C9670369E8165
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ssMjyCEMwIDT2NlbqKevW0RY6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft
Manifest number: 0DE6
Signing time: Mon 21 Apr 2025 04:00:33 +0000
Manifest this update: Mon 21 Apr 2025 04:00:33 +0000
Manifest next update: Tue 22 Apr 2025 04:00:33 +0000
Files and hashes: 1: 9ssMjyCEMwIDT2NlbqKevW0RY6o.crl (hash: +oQu2o1RJsg9e8pl6KniF6aRS+XcinAlYFTyobGt+o4=)
2: OpJ_uz4hg9WS1uTnKXn75qGvb3w.roa (hash: zJt7hWD6hoBRKS4g5AHeuYKclEqIASb0N8YkICHekl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ssMjyCEMwIDT2NlbqKevW0RY6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:81:41:9c:0c:ad:e0:9c:f3:8c:96:70:36:9e:81:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6cb0c8f20843302034f63656ea29ebd6d1163aa
Validity
Not Before: Apr 21 04:00:33 2025 GMT
Not After : Apr 22 04:00:33 2025 GMT
Subject: CN=5c28e52e60f2bc4879d4e25c2da498d3b6777877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:50:89:e9:59:b7:be:29:d6:f9:47:a4:d9:d6:
ee:02:b5:f4:14:95:f4:0e:dc:d3:93:62:73:c1:a4:
25:61:95:d1:25:d3:83:bd:a6:c1:ad:35:a1:8a:ca:
42:9d:6a:ad:ac:54:19:49:56:db:7c:b8:31:4d:4f:
d0:a7:3f:8f:54:3e:4a:20:d4:ef:ff:93:ad:f8:4d:
5d:92:0b:8c:98:f9:1c:82:ae:01:bc:ef:49:4c:ff:
f7:08:39:76:56:a3:ec:de:90:ec:d2:67:2a:83:7c:
91:d2:02:fd:65:c4:d2:d7:22:79:07:47:06:53:45:
1b:8b:54:4e:05:a4:0f:08:5f:1f:b2:88:27:0a:24:
ab:6d:62:e8:ff:1e:1a:a7:b6:d6:bd:8f:4c:4e:4f:
87:ec:bc:bc:39:61:ee:49:40:16:2c:6c:21:33:49:
f0:f4:4e:85:1f:4e:33:70:e9:26:52:cf:70:7b:53:
7c:45:4a:c9:97:5c:4d:1f:13:4d:66:6c:2f:e3:d5:
b4:21:34:52:44:65:fa:d0:7e:ba:92:4a:6c:b8:da:
89:a4:c9:b7:4e:0f:4a:87:d3:39:10:16:50:47:ab:
ed:d3:43:e8:98:d4:a9:e6:6d:ad:62:4d:b7:06:c8:
01:46:d9:cc:f3:64:57:51:3b:0a:8e:00:c8:33:b1:
b6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:28:E5:2E:60:F2:BC:48:79:D4:E2:5C:2D:A4:98:D3:B6:77:78:77
X509v3 Authority Key Identifier:
keyid:F6:CB:0C:8F:20:84:33:02:03:4F:63:65:6E:A2:9E:BD:6D:11:63:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ssMjyCEMwIDT2NlbqKevW0RY6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:fd:d3:b5:c0:93:8b:61:40:5d:28:d6:29:72:9d:a4:3d:03:
db:d3:41:0f:24:95:a8:d4:3f:4d:f3:78:e6:3f:ff:2d:8e:cc:
bb:3d:57:d3:d0:08:fb:0f:7b:3f:9e:a0:52:68:06:45:7c:a9:
09:5e:22:a0:2b:b3:e3:55:f8:ed:76:6e:8c:ab:46:2a:59:d8:
10:fd:54:e0:12:ae:ec:96:77:9e:32:f5:46:05:b5:0a:55:8d:
c4:f0:a7:3a:f0:dd:5f:de:fb:bf:6b:a4:00:11:64:0c:17:11:
ec:0c:37:ec:fa:32:84:5f:b0:ce:4f:7a:e6:2d:3b:c5:02:97:
ab:46:4d:39:50:03:78:8e:96:b9:b3:ae:ae:79:f2:53:c5:0e:
18:36:ad:65:c0:3a:23:6d:66:fb:2a:a5:07:ac:f0:75:91:52:
b0:51:27:52:a8:6e:9b:d7:c0:b0:87:98:ca:b2:d4:52:f9:75:
60:3d:30:21:cd:fc:e6:dd:ad:b0:61:48:97:0d:28:18:06:11:
d0:38:ce:4c:c7:a9:80:41:e9:bc:35:17:ec:50:b3:bb:07:dc:
e8:b1:74:1d:8f:b1:88:a9:ba:9d:eb:af:74:9e:42:83:7e:82:
6b:d3:6a:85:dd:10:d8:88:5b:0b:82:29:b7:26:52:9d:3b:ad:
5d:0c:c5:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:58:51 2025 by rpki-client