Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.mft
File: 9Ny1dB4pNS3dQkaScBeFBgCKQUA.mft (raw, json)
Hash identifier: qzWZxdwYSB6Kz6bfruTf8JT0tc3ZR8yfsYfGD4TBrXg=
Subject key identifier: C7:50:3A:F4:47:B5:7C:01:B7:DB:ED:EE:50:62:AB:02:2D:87:15:D9
Authority key identifier: F4:DC:B5:74:1E:29:35:2D:DD:42:46:92:70:17:85:06:00:8A:41:40
Certificate issuer: /CN=f4dcb5741e29352ddd42469270178506008a4140
Certificate serial: 01974D0E29E94F6B2E8AA62032E50999EFF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Ny1dB4pNS3dQkaScBeFBgCKQUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.mft
Manifest number: 01EA
Signing time: Sun 08 Jun 2025 01:01:03 +0000
Manifest this update: Sun 08 Jun 2025 01:01:03 +0000
Manifest next update: Mon 09 Jun 2025 01:01:03 +0000
Files and hashes: 1: 9Ny1dB4pNS3dQkaScBeFBgCKQUA.crl (hash: mrNRy21Hw9Uf2ZuKgWatZar/fdLeLZTtdm36ZmdgrYM=)
2: T3T0ZkFQFPUc2BEd0op7sYAz8XA.roa (hash: WuXt/ChkvGDFgO8WDo1RKpja79/oAcXrCCkvEETR+EY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Ny1dB4pNS3dQkaScBeFBgCKQUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 01:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:0e:29:e9:4f:6b:2e:8a:a6:20:32:e5:09:99:ef:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4dcb5741e29352ddd42469270178506008a4140
Validity
Not Before: Jun 8 01:01:03 2025 GMT
Not After : Jun 9 01:01:03 2025 GMT
Subject: CN=c7503af447b57c01b7dbedee5062ab022d8715d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5a:48:c0:3d:16:58:c5:02:cc:eb:22:cd:db:
a1:a7:2e:5c:32:7e:37:0a:f5:9a:3c:06:2d:72:2b:
82:13:2a:1a:19:64:2a:ee:56:f4:19:21:dc:02:37:
6d:65:2c:ba:61:00:cc:6d:d3:e6:56:fb:12:7f:f8:
e2:5a:46:21:33:a1:da:2b:94:ff:87:c4:72:ce:35:
91:8c:f2:86:5b:80:30:b7:11:11:9e:19:d6:59:f1:
94:81:a4:42:7a:4f:23:b3:6b:83:2c:df:68:aa:f7:
00:34:c3:59:73:d3:13:16:c3:35:69:78:99:34:7f:
fb:91:ef:4c:77:d6:88:bf:ca:ae:f4:46:05:de:f4:
aa:a0:b5:d9:4b:32:69:c6:b3:dd:6a:33:14:9b:7c:
f9:64:99:e8:da:32:81:ea:55:c4:0e:18:b4:34:ce:
e8:02:8f:9d:90:c4:5e:89:de:61:67:5d:b8:04:44:
e7:b4:49:3a:de:ea:46:2d:67:b1:90:f8:ce:e7:e6:
b5:d3:62:f1:2d:fd:bd:fa:44:e3:85:e8:89:73:17:
19:32:d2:a5:6f:91:83:fb:4a:35:3b:03:78:4c:d0:
8f:52:5e:b9:ca:56:64:66:54:44:1c:54:ea:95:87:
f5:a5:9b:ad:42:7c:d3:28:f0:40:7d:cf:77:3c:ff:
d3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:50:3A:F4:47:B5:7C:01:B7:DB:ED:EE:50:62:AB:02:2D:87:15:D9
X509v3 Authority Key Identifier:
keyid:F4:DC:B5:74:1E:29:35:2D:DD:42:46:92:70:17:85:06:00:8A:41:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Ny1dB4pNS3dQkaScBeFBgCKQUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:c3:e4:aa:b4:e5:51:28:87:fd:40:9e:20:e7:2c:9f:e1:93:
1d:1b:01:1e:32:bc:67:35:df:bc:8c:2d:62:63:11:2c:d4:82:
f5:68:c0:d3:03:18:cc:3e:1b:a1:20:66:00:cb:fa:61:b4:65:
06:9e:e2:dc:cc:33:27:39:83:6c:20:2f:d2:ce:bb:15:b3:6c:
86:58:79:3c:7a:59:8f:1c:79:c9:cb:23:da:dd:5c:a0:0a:31:
36:cf:d9:76:14:67:41:49:42:f0:b0:93:ad:17:a7:7c:16:b3:
b8:06:62:6c:e5:80:9d:70:16:f5:e3:48:e9:21:8d:e5:33:7d:
9e:e7:7a:73:fe:12:d6:fa:5d:ca:26:e9:e2:1f:9d:46:f3:65:
1b:1e:0d:61:63:a3:e8:05:24:8b:75:b7:0b:17:f9:27:63:70:
9b:60:87:fb:f4:b3:20:12:24:d6:5f:c1:49:f0:44:0f:88:05:
9e:10:b1:36:e1:c1:8d:62:c0:64:9e:ae:74:cd:93:56:3c:26:
f4:d2:f1:a2:89:70:3e:85:2d:c2:18:69:1f:98:de:b0:f2:3c:
0d:71:31:a7:f8:0c:4f:a3:52:ee:3e:08:10:19:fc:3d:d7:71:
a2:96:12:39:4a:33:57:21:59:ae:96:43:07:51:13:42:0d:07:
2c:4a:04:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 10:05:37 2025 by rpki-client