Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.mft
File: S1x9nHRA5ctLCmdhVjwNhQ8IERo.mft (raw, json)
Hash identifier: 4mLf/YZiUy793Kpab5aERfR/DPj1SWeBayRbVyLjVQ0=
Subject key identifier: 74:67:FC:C3:91:4F:D0:EF:46:19:63:F7:95:A4:4A:01:76:3A:76:99
Authority key identifier: 4B:5C:7D:9C:74:40:E5:CB:4B:0A:67:61:56:3C:0D:85:0F:08:11:1A
Certificate issuer: /CN=4b5c7d9c7440e5cb4b0a6761563c0d850f08111a
Certificate serial: 019643D6F0C4ECC7CC20D25A643E42B36A08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S1x9nHRA5ctLCmdhVjwNhQ8IERo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.mft
Manifest number: 11E2
Signing time: Thu 17 Apr 2025 13:01:21 +0000
Manifest this update: Thu 17 Apr 2025 13:01:21 +0000
Manifest next update: Fri 18 Apr 2025 13:01:21 +0000
Files and hashes: 1: S1x9nHRA5ctLCmdhVjwNhQ8IERo.crl (hash: n9aUxl6hOm1nvzuJ0KgvkhAcLHVkOW4BpfYqFXwj/Xk=)
2: v45LP4AF3yoZv3u_cLa6vnH8FvU.roa (hash: wIRAiX/f/YijUEe8NVGZoMtagmreVjKidBvqPjwb7Tc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.mft
rsync://rpki.ripe.net/repository/DEFAULT/S1x9nHRA5ctLCmdhVjwNhQ8IERo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 13:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:d6:f0:c4:ec:c7:cc:20:d2:5a:64:3e:42:b3:6a:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b5c7d9c7440e5cb4b0a6761563c0d850f08111a
Validity
Not Before: Apr 17 13:01:21 2025 GMT
Not After : Apr 18 13:01:21 2025 GMT
Subject: CN=7467fcc3914fd0ef461963f795a44a01763a7699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:55:36:7c:8a:9c:ac:0a:6d:80:f9:3e:ff:07:
44:65:36:d0:44:86:e4:55:2a:95:71:c7:65:f3:44:
08:7d:26:b4:4b:df:9d:b3:25:d1:ae:4c:b2:e6:e5:
95:2b:bf:2c:b8:06:cc:15:1b:7a:59:82:30:fd:b2:
82:7c:87:d1:f7:e6:fd:de:9a:e9:89:bf:32:52:f1:
c2:a2:b2:e5:d9:1d:e6:3d:4e:71:d7:b8:fb:09:15:
7c:74:1e:0c:a8:d3:24:95:d0:64:09:69:f9:75:9f:
c2:cb:1f:64:73:5d:c1:b7:75:ab:e2:16:a8:0e:61:
92:5d:e1:6d:99:b3:d9:3f:a4:41:b1:2b:95:9f:6a:
f3:e7:e9:63:37:aa:7e:a0:66:f9:f8:1e:76:ca:fc:
61:5c:82:6a:f3:3f:ba:81:e6:a6:c3:5f:ca:d4:fc:
f8:1c:6e:93:2c:dc:32:2c:a8:66:dd:27:ea:3b:96:
53:77:86:62:4b:c3:38:00:e1:1a:76:09:2b:cf:e8:
5c:59:33:d8:d1:fb:07:fe:e3:1c:2f:e6:3b:21:62:
cb:93:bd:ff:ac:2b:54:6a:57:45:aa:54:24:8f:cd:
12:db:5b:b4:ca:bb:b3:08:b2:9c:df:52:02:42:49:
bc:1f:1b:2b:29:21:1f:53:dd:9c:ac:77:dd:24:e1:
a4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:67:FC:C3:91:4F:D0:EF:46:19:63:F7:95:A4:4A:01:76:3A:76:99
X509v3 Authority Key Identifier:
keyid:4B:5C:7D:9C:74:40:E5:CB:4B:0A:67:61:56:3C:0D:85:0F:08:11:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1x9nHRA5ctLCmdhVjwNhQ8IERo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:57:de:f8:b1:16:cf:87:44:65:84:32:1c:d1:6e:c7:e9:ba:
9c:c5:bf:52:45:2f:87:41:a8:9c:b7:65:84:05:ac:23:ff:f7:
40:b0:51:2d:31:37:18:67:63:bf:69:3e:b5:05:3c:96:8d:85:
80:3e:7e:2a:ba:7b:1d:a3:5d:d3:b7:5c:1a:a6:c6:ab:cd:e3:
fb:09:4c:9f:0a:c4:5b:db:9e:3c:37:fa:8d:85:2e:fb:ff:5b:
29:64:a4:eb:52:c4:18:f6:90:e3:81:47:69:a6:1f:31:c3:ad:
3a:7f:7c:c4:13:34:37:a5:6f:de:f8:a7:79:a1:6a:f8:73:2a:
97:83:12:5d:5b:11:5e:5c:ba:53:43:3f:42:8e:85:bb:f9:29:
bb:0f:c0:8c:fc:4d:96:14:e1:89:52:16:75:c6:11:2f:09:2b:
90:4c:2e:f1:3a:1c:5a:48:83:74:af:dc:c3:61:40:84:d7:1d:
10:e3:82:a4:69:75:41:52:90:60:2b:10:b4:a4:25:a7:72:91:
36:25:2e:54:4d:e9:0c:4f:6a:c9:56:d5:47:2f:08:98:b5:d7:
47:45:63:a5:25:f8:98:27:b5:1b:e2:68:c7:f5:90:d3:70:dc:
e1:2c:f5:c6:e7:f8:e2:95:1c:02:d6:9c:49:91:7c:ce:34:8d:
98:35:1e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:40:01 2025 by rpki-client