Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9de70d-7425-4c07-a80f-42dc82cca192/1/abZsbpoUxv13P6Md-YILM5aVLi4.mft
File: abZsbpoUxv13P6Md-YILM5aVLi4.mft (raw, json)
Hash identifier: FCdo23PLbMuFPGstTlCEPQSGf700skhPTi+T8JK968U=
Subject key identifier: B9:0B:F6:9F:CD:A1:D8:BB:A2:13:29:93:6E:82:21:F7:3D:92:11:FD
Authority key identifier: 69:B6:6C:6E:9A:14:C6:FD:77:3F:A3:1D:F9:82:0B:33:96:95:2E:2E
Certificate issuer: /CN=69b66c6e9a14c6fd773fa31df9820b3396952e2e
Certificate serial: 019581A4EE9ECB826F508B466FBB02DA647B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/abZsbpoUxv13P6Md-YILM5aVLi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9de70d-7425-4c07-a80f-42dc82cca192/1/abZsbpoUxv13P6Md-YILM5aVLi4.mft
Manifest number: 025C
Signing time: Mon 10 Mar 2025 20:00:24 +0000
Manifest this update: Mon 10 Mar 2025 20:00:24 +0000
Manifest next update: Tue 11 Mar 2025 20:00:24 +0000
Files and hashes: 1: abZsbpoUxv13P6Md-YILM5aVLi4.crl (hash: 9fhzLtPfxZhtVOoHN9+QnVAHbdM8rg2DQB5pkdNUKJQ=)
2: sBZyctgvNvtriFhe8m6CbBJ7dYg.roa (hash: JowCeeluxMSod/7/LxTDdw9H9SvUld/0RlKOgZZipFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9de70d-7425-4c07-a80f-42dc82cca192/1/abZsbpoUxv13P6Md-YILM5aVLi4.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9de70d-7425-4c07-a80f-42dc82cca192/1/abZsbpoUxv13P6Md-YILM5aVLi4.mft
rsync://rpki.ripe.net/repository/DEFAULT/abZsbpoUxv13P6Md-YILM5aVLi4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Mar 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:81:a4:ee:9e:cb:82:6f:50:8b:46:6f:bb:02:da:64:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69b66c6e9a14c6fd773fa31df9820b3396952e2e
Validity
Not Before: Mar 10 20:00:24 2025 GMT
Not After : Mar 11 20:00:24 2025 GMT
Subject: CN=b90bf69fcda1d8bba21329936e8221f73d9211fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:17:79:9c:ec:e9:d5:aa:b5:8e:db:ce:be:3c:
ae:d4:66:2c:7c:3a:51:ac:1d:b9:9d:7b:72:f3:24:
b3:64:16:27:f0:c1:d6:65:5d:b3:ed:67:a1:40:5c:
f2:bc:15:08:21:83:f2:e0:da:93:c5:3d:27:5e:9d:
a3:e2:81:4f:9c:ec:36:9a:24:c1:a0:5e:05:01:f6:
43:f1:8f:9d:72:4f:87:46:11:44:8b:cf:be:1a:6f:
87:cd:af:df:7c:7c:07:15:ef:c3:fb:f1:d5:78:d9:
0f:4f:50:63:e7:79:e0:7f:26:5e:67:12:fd:9a:96:
61:0a:bb:16:73:40:20:ae:8e:3f:63:a6:d2:fd:64:
88:5c:1f:bc:89:a4:5b:bf:e9:4d:c0:d1:eb:a7:26:
dd:ec:2c:bd:9b:f6:c2:30:82:49:37:7b:40:e4:f6:
9d:c0:8c:0a:1d:4c:b8:25:b3:86:ac:1a:dc:92:90:
48:3f:45:d0:bf:0b:23:84:1e:ef:75:52:0e:7e:b9:
45:c3:61:8b:05:4a:8f:7b:4a:f4:25:6f:91:d7:82:
1b:29:77:57:7b:55:28:5e:a6:5e:7b:b8:6b:18:cd:
4b:22:51:ca:0e:0c:9f:8d:a6:bc:1b:d2:f9:e7:6b:
24:f5:f4:e8:f7:4e:d2:6c:85:de:a9:a7:11:de:b7:
76:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:0B:F6:9F:CD:A1:D8:BB:A2:13:29:93:6E:82:21:F7:3D:92:11:FD
X509v3 Authority Key Identifier:
keyid:69:B6:6C:6E:9A:14:C6:FD:77:3F:A3:1D:F9:82:0B:33:96:95:2E:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/abZsbpoUxv13P6Md-YILM5aVLi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9de70d-7425-4c07-a80f-42dc82cca192/1/abZsbpoUxv13P6Md-YILM5aVLi4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9de70d-7425-4c07-a80f-42dc82cca192/1/abZsbpoUxv13P6Md-YILM5aVLi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:63:f9:43:80:1b:88:c3:ff:37:c9:4f:d3:31:be:56:82:77:
36:fe:b1:2a:39:48:b6:db:18:b9:18:ea:1b:46:d1:e5:72:f3:
57:8b:db:b1:68:d1:6b:82:16:7a:90:ec:a2:f9:fd:89:62:49:
e0:82:09:b0:65:fb:25:4b:fd:71:ae:5e:ac:da:2d:67:9d:5f:
09:cd:08:c1:94:fa:52:fa:1b:53:8d:e1:e2:23:a4:42:da:a6:
1c:21:d6:b1:98:43:d4:cc:05:03:12:42:0b:23:f7:b8:a2:cf:
4d:8d:a1:09:e9:bc:c9:95:d0:05:66:14:03:d7:85:17:62:94:
32:bb:4b:8a:aa:69:df:8c:eb:4c:22:28:ac:9c:ec:2d:60:7e:
30:64:57:e1:78:5f:20:89:5e:65:60:dd:5b:14:54:df:9b:17:
6e:42:13:3c:2e:9e:b7:33:75:d8:fe:76:5b:cd:66:b7:bd:1d:
91:f7:c1:2b:ec:01:67:b5:72:1d:6c:d5:75:b1:db:d5:12:10:
ac:88:5f:e7:bf:cc:f3:f0:cb:c8:7b:b2:e0:4e:b7:bb:19:b2:
72:5b:0d:8b:65:36:02:65:59:d1:de:aa:9a:73:e3:12:3f:7e:
ff:5a:7f:d0:af:33:44:bb:9e:33:03:ff:4d:ee:b2:62:45:e5:
aa:74:bd:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 05:02:11 2025 by rpki-client