Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.mft
File: r9v0VgEKm9FJQcoskcpTPn71F4o.mft (raw, json)
Hash identifier: rxwvv+otb7bNuVli45VcyHKUYt3/lh3AnrZRBbHeR0k=
Subject key identifier: AE:10:25:A1:D4:9E:BE:4B:DB:8B:D1:BB:D3:6D:12:0E:F2:6C:A1:1C
Authority key identifier: AF:DB:F4:56:01:0A:9B:D1:49:41:CA:2C:91:CA:53:3E:7E:F5:17:8A
Certificate issuer: /CN=afdbf456010a9bd14941ca2c91ca533e7ef5178a
Certificate serial: 019643D60B8AADF13650D02F404A0554958B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r9v0VgEKm9FJQcoskcpTPn71F4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.mft
Manifest number: 0DCD
Signing time: Thu 17 Apr 2025 13:00:23 +0000
Manifest this update: Thu 17 Apr 2025 13:00:23 +0000
Manifest next update: Fri 18 Apr 2025 13:00:23 +0000
Files and hashes: 1: ajkzuEH8FnXzD6y9WqgTkvcAyWQ.roa (hash: ezeCzHTBFnMMCDhX8NkCA6ybD9xQfKuL+xUd+x4C3b4=)
2: r9v0VgEKm9FJQcoskcpTPn71F4o.crl (hash: NqyrRZXsq26VjlQUJNoUvSP4DhJN+FohnSDVZvkEJVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/r9v0VgEKm9FJQcoskcpTPn71F4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 13:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:d6:0b:8a:ad:f1:36:50:d0:2f:40:4a:05:54:95:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afdbf456010a9bd14941ca2c91ca533e7ef5178a
Validity
Not Before: Apr 17 13:00:23 2025 GMT
Not After : Apr 18 13:00:23 2025 GMT
Subject: CN=ae1025a1d49ebe4bdb8bd1bbd36d120ef26ca11c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:09:8b:8f:4d:2b:2d:34:0c:7b:44:83:56:09:
a8:1b:22:1f:5c:e7:fa:20:70:0c:6d:44:05:70:3b:
4b:8a:dc:7e:58:12:9f:d2:a8:41:0f:55:c6:69:c3:
f2:45:e7:62:9c:4c:64:fa:6b:8c:c4:a7:09:d0:65:
d1:5b:73:6a:2e:b5:e2:81:3b:d6:9a:73:ea:6c:4e:
7c:a9:2f:31:90:3c:14:04:27:90:33:b3:5d:97:a7:
a4:db:bc:34:c1:60:69:14:b8:06:2b:3b:fb:b8:a8:
44:24:69:94:3b:fe:a4:05:d0:99:98:90:4a:07:5d:
23:56:5a:55:53:5f:71:e6:46:0e:50:56:17:f1:ac:
1b:a6:15:0c:ca:f7:cf:70:f7:0a:5a:c0:e8:be:8f:
01:b6:01:53:3a:a9:49:f6:5d:22:ba:22:1d:c9:f4:
a3:31:c1:46:b6:f5:52:e3:97:01:fd:2c:17:d5:85:
11:a0:59:39:0a:fd:48:b7:1f:bd:64:1d:fb:32:01:
a2:ed:2a:59:db:db:83:3f:7d:77:94:67:05:8a:1d:
15:48:90:b2:26:6a:36:50:03:83:56:29:a2:7b:02:
a1:4d:31:f8:5c:29:85:21:7b:4c:0e:45:e2:27:11:
cc:a5:c7:c5:0d:a0:b6:50:e6:da:e9:f7:84:6e:f9:
5a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:10:25:A1:D4:9E:BE:4B:DB:8B:D1:BB:D3:6D:12:0E:F2:6C:A1:1C
X509v3 Authority Key Identifier:
keyid:AF:DB:F4:56:01:0A:9B:D1:49:41:CA:2C:91:CA:53:3E:7E:F5:17:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r9v0VgEKm9FJQcoskcpTPn71F4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:c1:a6:37:75:7a:64:e5:d6:2d:4c:df:32:1e:ca:61:eb:ae:
6e:00:b2:34:63:04:a9:2c:88:63:57:6f:8b:cc:da:7c:46:32:
42:ea:25:53:b0:8b:3f:9a:10:a9:f1:8b:36:f7:9b:a5:85:2e:
fe:c0:55:b8:68:0e:fb:db:09:59:67:b9:02:19:3b:3f:20:d0:
b4:6b:d5:97:28:c5:5c:99:a6:0c:b1:2d:52:7f:db:19:b0:ca:
be:be:5f:08:fe:5d:c3:41:31:3f:13:97:2f:54:1b:38:98:78:
df:fd:46:33:99:94:b1:16:d6:60:07:b8:5c:2f:9e:a0:04:bc:
82:97:20:cd:7f:80:d2:ac:1a:da:a4:83:04:03:f7:57:8c:46:
52:6c:30:14:e5:2e:bc:1a:47:3a:a0:4e:12:77:31:44:23:05:
60:84:0c:3e:b9:bf:b3:d5:64:e8:6d:f4:ba:1b:8c:9c:b1:6a:
60:43:ba:6f:ed:23:5e:b2:1f:09:3c:39:3d:bd:75:fb:30:3b:
92:b1:af:35:2e:80:fb:66:4f:a0:f5:8a:9e:b5:77:8f:4e:8f:
f3:12:79:bd:27:23:c6:86:9b:d0:8e:30:9b:d5:ab:46:29:96:
8e:ac:3b:cf:33:3e:a8:10:be:9f:a1:f5:d6:7c:7f:9e:0c:7b:
72:8a:f6:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:40:18 2025 by rpki-client