Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft
File: 9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft (raw, json)
Hash identifier: LE3KIbqZlIJbvBdGMhgUhOw85tXzDl1XHMqow3fCEMo=
Subject key identifier: DB:DE:27:47:BC:EB:A2:60:F7:27:D2:5C:D3:3E:84:FB:5C:3C:BF:F2
Authority key identifier: F4:E1:55:54:8E:C9:AB:E1:1E:F3:BE:70:60:6A:4B:98:7E:AE:38:25
Certificate issuer: /CN=f4e155548ec9abe11ef3be70606a4b987eae3825
Certificate serial: 01963A9BFB9B45E18C2EFB6CA4184EBA71A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OFVVI7Jq-Ee875wYGpLmH6uOCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft
Manifest number: 0743
Signing time: Tue 15 Apr 2025 18:00:22 +0000
Manifest this update: Tue 15 Apr 2025 18:00:22 +0000
Manifest next update: Wed 16 Apr 2025 18:00:22 +0000
Files and hashes: 1: 9-Ze941yMvb9PBtIsJ7Ycnpenh0.roa (hash: mLUd+UrxmldwwslKwjDeIf5bagEinj/YnRBNdn1A2Vk=)
2: 9OFVVI7Jq-Ee875wYGpLmH6uOCU.crl (hash: lfP4bkzL3swnsat9BjVPIg71OjT8BlapF4D57treFB0=)
3: dBTi9V6Lj09iolupOZhzala-GHE.roa (hash: XgE5C6MotJsfB/9tY52qQR/CvntbYT/9aocAmt0KwNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OFVVI7Jq-Ee875wYGpLmH6uOCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 15:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3a:9b:fb:9b:45:e1:8c:2e:fb:6c:a4:18:4e:ba:71:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e155548ec9abe11ef3be70606a4b987eae3825
Validity
Not Before: Apr 15 18:00:22 2025 GMT
Not After : Apr 16 18:00:22 2025 GMT
Subject: CN=dbde2747bceba260f727d25cd33e84fb5c3cbff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2a:63:8d:5a:ca:49:46:5f:16:17:95:04:52:
e4:e3:20:69:6a:32:d2:fc:8f:7e:34:4a:94:09:db:
41:4c:b6:fe:f7:db:34:cc:1f:b1:dc:4d:4e:0d:fe:
74:a0:37:65:dd:2c:7a:3e:c2:42:94:71:33:c3:66:
42:48:4d:2e:91:1b:61:dd:c8:94:94:51:0d:27:c9:
d0:d8:d1:18:88:c1:a8:05:f5:18:f8:f5:b4:b5:2f:
71:14:c2:3a:7f:5b:c8:f7:39:64:53:01:42:84:d8:
61:cc:a4:e9:c9:60:9f:d9:bb:58:05:22:e0:f8:6e:
43:bc:fd:e9:c5:8e:a2:8d:f9:c0:c8:2d:c0:22:05:
a5:d6:af:90:bb:ab:99:2e:94:8e:8b:aa:55:a5:97:
ba:a8:0c:b2:6a:86:24:c8:17:f5:c6:83:be:9d:0d:
14:0c:85:4d:01:77:2e:3e:8c:6b:eb:88:76:8f:ee:
63:c7:ec:7e:9a:37:05:1e:1c:56:47:de:26:62:14:
b7:5f:d9:b7:33:4b:5a:a4:de:57:15:0d:24:34:c9:
83:c1:f4:30:98:f9:a2:ed:cc:0c:2a:45:f8:f2:32:
27:1a:8b:2f:72:e3:ad:6b:1e:dd:b4:c5:0e:13:fa:
2e:82:04:4e:b2:d4:b2:9a:91:c6:65:8d:85:39:be:
b8:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:DE:27:47:BC:EB:A2:60:F7:27:D2:5C:D3:3E:84:FB:5C:3C:BF:F2
X509v3 Authority Key Identifier:
keyid:F4:E1:55:54:8E:C9:AB:E1:1E:F3:BE:70:60:6A:4B:98:7E:AE:38:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OFVVI7Jq-Ee875wYGpLmH6uOCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:07:9e:c3:51:ad:7f:75:cb:5a:9c:0d:10:50:11:90:9d:f4:
98:5a:02:b6:d7:e8:16:a1:cc:28:ac:85:14:00:65:32:ea:56:
7e:b2:41:ef:90:16:c7:ef:89:95:3d:53:75:5d:4c:5e:93:16:
09:bf:08:7e:e5:d0:47:59:9e:bf:ad:20:e6:bd:62:f1:60:cc:
eb:3b:e9:5b:7b:25:75:36:94:ce:20:73:af:bf:23:5c:14:de:
eb:37:5c:70:8c:cb:6e:a5:f2:e9:42:2c:91:c1:95:35:78:d7:
3c:39:ea:83:d2:d6:37:ab:1c:d0:f5:22:40:10:bc:33:96:24:
ee:5e:50:c4:68:ee:74:cf:66:f1:b9:4a:df:d1:a4:67:ea:be:
53:f2:ad:70:f5:cd:b1:82:37:3b:6c:4a:cd:1e:43:5a:20:97:
c8:c0:91:75:de:82:05:03:73:c4:af:15:98:10:78:40:c1:9a:
fa:24:ee:37:20:65:e6:03:52:88:9e:64:29:8f:e7:a6:24:b0:
a9:ff:aa:43:95:e4:06:e6:2c:ab:ec:f1:4f:ae:e2:d3:cd:2f:
fa:1e:5c:c5:58:62:b9:23:dd:8b:5c:e9:f4:c9:b5:78:ba:d3:
77:97:83:fd:ab:5e:91:c7:d7:e2:a1:53:b6:b2:84:be:1a:55:
2c:56:63:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:19:21 2025 by rpki-client