Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/a8c318-338d-4932-8acb-e97ae5c60568/1/9lFtfyjNvos_VddTcqrU07EL4J8.mft
File: 9lFtfyjNvos_VddTcqrU07EL4J8.mft (raw, json)
Hash identifier: n4j3/0NRUhpLX+U0DTMvwqoVJqx4L7hJ7llsbz2LmwI=
Subject key identifier: 03:3F:8D:FD:28:84:29:1E:EE:C8:22:BC:FC:10:90:E8:32:A1:F1:BD
Authority key identifier: F6:51:6D:7F:28:CD:BE:8B:3F:55:D7:53:72:AA:D4:D3:B1:0B:E0:9F
Certificate issuer: /CN=f6516d7f28cdbe8b3f55d75372aad4d3b10be09f
Certificate serial: 01965CF1A154AAF5B5B21A15C0CB2DFFA8BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lFtfyjNvos_VddTcqrU07EL4J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/a8c318-338d-4932-8acb-e97ae5c60568/1/9lFtfyjNvos_VddTcqrU07EL4J8.mft
Manifest number: 07FC
Signing time: Tue 22 Apr 2025 10:01:01 +0000
Manifest this update: Tue 22 Apr 2025 10:01:01 +0000
Manifest next update: Wed 23 Apr 2025 10:01:01 +0000
Files and hashes: 1: 9lFtfyjNvos_VddTcqrU07EL4J8.crl (hash: MBL3bF0DGK/XX6wb7cu5tLZtYm/BsyDCXtArqabikw8=)
2: RFRyemMh5cFgw6G_Hs8rXpd2Ve4.roa (hash: Q/GgNiv43TfFu8lH2/Qowfw2+WyW8sNGbwKNhf/jdeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/a8c318-338d-4932-8acb-e97ae5c60568/1/9lFtfyjNvos_VddTcqrU07EL4J8.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/a8c318-338d-4932-8acb-e97ae5c60568/1/9lFtfyjNvos_VddTcqrU07EL4J8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9lFtfyjNvos_VddTcqrU07EL4J8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:f1:a1:54:aa:f5:b5:b2:1a:15:c0:cb:2d:ff:a8:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6516d7f28cdbe8b3f55d75372aad4d3b10be09f
Validity
Not Before: Apr 22 10:01:01 2025 GMT
Not After : Apr 23 10:01:01 2025 GMT
Subject: CN=033f8dfd2884291eeec822bcfc1090e832a1f1bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e7:77:50:48:5b:ea:7d:a9:47:78:17:e6:84:
2a:e1:3b:66:3f:29:65:75:c8:73:6a:93:8d:7f:87:
db:72:34:6f:22:fa:64:1d:67:62:c3:37:75:8a:42:
19:cb:d3:7a:85:0f:4f:eb:0e:07:cb:dc:82:96:9f:
4f:f1:dd:bf:0a:bf:91:c7:be:c5:05:bd:49:fc:b9:
79:c5:ea:01:b1:25:9a:31:5f:0c:e4:ae:6b:3e:3a:
cc:e3:c8:90:2c:f9:74:96:dd:c9:82:dd:13:14:0c:
2a:73:4e:93:bc:d6:8c:43:d2:2c:8c:ee:69:ad:2b:
3d:98:39:9c:fd:ff:ad:59:51:3d:62:3a:a6:d0:9b:
a1:ce:de:ee:aa:8a:cd:ce:55:10:70:83:cb:79:72:
ba:bf:2f:e0:fa:9f:af:1f:cd:09:50:7d:ba:07:2f:
7e:15:d1:5f:a7:ed:8e:b1:db:ce:32:c6:d4:f5:ca:
4b:93:7f:fb:8d:65:c6:77:5b:fc:26:d2:c9:d5:47:
2d:11:66:75:f1:19:a7:e7:2f:ce:32:f7:46:9e:f2:
ce:5c:2e:6c:10:41:2d:5e:e5:65:c5:e1:4d:b3:39:
bd:64:84:86:9e:13:f0:ce:e2:da:90:e0:eb:3e:51:
f1:94:cc:7a:b9:48:b2:c0:2d:1b:50:93:b5:66:b5:
ed:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:3F:8D:FD:28:84:29:1E:EE:C8:22:BC:FC:10:90:E8:32:A1:F1:BD
X509v3 Authority Key Identifier:
keyid:F6:51:6D:7F:28:CD:BE:8B:3F:55:D7:53:72:AA:D4:D3:B1:0B:E0:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lFtfyjNvos_VddTcqrU07EL4J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a8c318-338d-4932-8acb-e97ae5c60568/1/9lFtfyjNvos_VddTcqrU07EL4J8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a8c318-338d-4932-8acb-e97ae5c60568/1/9lFtfyjNvos_VddTcqrU07EL4J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:69:e9:85:f0:ff:1e:43:28:74:bb:a2:15:d4:99:a3:29:62:
e2:26:ff:03:33:36:2f:64:fd:30:52:45:c2:97:98:21:19:05:
a0:4f:96:cf:f2:93:a7:a6:69:5e:06:19:7d:c6:91:3d:6d:8f:
08:9d:b3:4b:c7:46:12:45:d3:e1:e4:5c:2e:7a:bb:d1:86:ea:
e6:bf:59:cd:2f:1b:ae:84:73:dc:25:9a:da:4f:c6:87:4c:2b:
48:77:61:1d:fd:55:36:56:1c:1c:c1:1d:07:44:e0:57:e8:7b:
fb:54:d5:9f:29:da:fc:39:8e:94:bc:43:74:5c:dc:37:c6:17:
8f:a4:70:38:0e:69:be:6e:f4:69:46:07:61:b6:cb:b9:1f:d5:
58:45:74:a0:d8:94:12:fc:1c:4e:85:52:70:c5:18:30:6f:70:
9b:6c:8f:54:61:49:b9:4f:57:11:37:da:2b:61:ce:51:85:cc:
11:f0:e6:4d:4d:96:3f:d4:a9:45:ec:65:18:09:29:71:8e:a4:
5d:a1:ba:da:5a:be:df:03:50:60:53:c4:42:94:a4:83:e2:b4:
87:4d:7f:36:1d:2c:7d:5e:93:ef:ca:b8:36:4f:fc:ac:4a:4f:
b8:bf:b4:de:d9:b4:16:be:94:8e:61:e5:a8:fe:40:05:1a:e5:
b8:11:ec:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 14:05:54 2025 by rpki-client