Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.mft
File: 9naIfyLs2o0HSBWgvPkfr4GUKr0.mft (raw, json)
Hash identifier: 3HpfEfX1Iu7naq6iYagcPvCoL65KZJCYFiyXFvdSSHA=
Subject key identifier: 84:C3:D8:11:E4:25:1A:F2:10:69:DE:B1:F6:FC:EF:DE:F3:E9:18:35
Authority key identifier: F6:76:88:7F:22:EC:DA:8D:07:48:15:A0:BC:F9:1F:AF:81:94:2A:BD
Certificate issuer: /CN=f676887f22ecda8d074815a0bcf91faf81942abd
Certificate serial: 01963F1D7E32B62D68D5F864273C58E9856B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9naIfyLs2o0HSBWgvPkfr4GUKr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.mft
Manifest number: 07BD
Signing time: Wed 16 Apr 2025 15:00:19 +0000
Manifest this update: Wed 16 Apr 2025 15:00:19 +0000
Manifest next update: Thu 17 Apr 2025 15:00:19 +0000
Files and hashes: 1: 1--aJOHbG2HarYQRIFHME9kGdrI8.roa (hash: e0PFqEIF1I8KQrFh+AG+JLWzJuU3cKKiEgrK5TdCBkw=)
2: 9naIfyLs2o0HSBWgvPkfr4GUKr0.crl (hash: TR/PVNqooDV9UFSD9RMyyd7e6/YRop8TlmsScVagi8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9naIfyLs2o0HSBWgvPkfr4GUKr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:1d:7e:32:b6:2d:68:d5:f8:64:27:3c:58:e9:85:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f676887f22ecda8d074815a0bcf91faf81942abd
Validity
Not Before: Apr 16 15:00:19 2025 GMT
Not After : Apr 17 15:00:19 2025 GMT
Subject: CN=84c3d811e4251af21069deb1f6fcefdef3e91835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:9e:1b:d8:55:c5:39:d0:f2:7b:ea:a1:41:0c:
d4:16:b3:8d:bc:98:3f:7a:d3:59:63:53:b7:af:02:
2f:31:77:62:33:17:fb:43:c9:46:41:ab:a7:5c:c0:
32:01:56:26:81:7c:58:7c:52:cb:20:7d:a4:76:02:
fe:a9:72:bf:33:7e:e9:20:d6:34:c7:92:4d:a2:27:
65:d2:a4:1a:2e:0f:98:40:07:89:9e:3f:fe:ec:6f:
97:11:1f:42:ab:dd:d4:2d:5a:17:11:42:23:2b:de:
10:ab:5f:8c:55:ba:43:ff:5d:12:3c:29:7b:48:4c:
c0:0f:22:93:8b:0b:40:a9:65:15:96:b7:be:90:3c:
0c:e8:43:b0:7e:7d:3f:57:5e:f7:3f:54:47:6d:4d:
72:7d:69:95:ff:5b:cc:3a:54:68:02:dc:e0:55:66:
01:8e:b0:82:84:80:55:23:62:40:33:55:95:4e:80:
5d:ec:47:db:7a:89:ab:17:0b:4f:bd:3d:73:95:aa:
42:72:ef:08:6b:e6:7b:9c:7d:59:34:1f:aa:83:0f:
b5:a3:e6:8e:00:ef:56:19:00:88:d9:e3:c0:ff:be:
f6:48:b5:7b:72:17:ec:d1:85:19:14:d4:b5:13:e9:
89:36:92:52:6c:4a:a8:0d:72:06:d4:f7:3c:25:42:
50:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:C3:D8:11:E4:25:1A:F2:10:69:DE:B1:F6:FC:EF:DE:F3:E9:18:35
X509v3 Authority Key Identifier:
keyid:F6:76:88:7F:22:EC:DA:8D:07:48:15:A0:BC:F9:1F:AF:81:94:2A:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9naIfyLs2o0HSBWgvPkfr4GUKr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:65:42:03:6d:c0:5f:ea:b1:da:d9:10:aa:cc:c2:bf:bb:ea:
86:cf:1f:e6:9e:98:ff:d4:4b:7d:ac:41:ae:9c:ec:ee:ef:29:
3e:7e:ee:f4:11:22:93:2b:b4:01:9a:94:d6:88:26:d8:05:57:
d4:a3:e3:60:dc:3a:56:ea:c2:7a:90:fb:51:79:40:42:9a:c2:
70:a6:34:03:bd:e5:5e:27:02:7b:52:b2:e7:39:08:b7:4a:ee:
23:b9:87:32:c1:b4:1c:87:41:a3:7f:d9:8d:b4:37:13:8b:48:
0e:b4:9b:99:3c:59:1b:a1:a7:dc:e5:c7:b9:67:94:b5:74:1c:
bd:97:cc:fc:58:be:40:aa:5a:3c:2b:34:98:07:1a:17:38:e0:
6b:71:ef:ab:32:b9:e9:04:55:e4:3e:fd:8c:58:df:fc:f0:c8:
10:05:33:ca:c8:21:31:67:c8:e1:fe:6a:d2:22:29:79:aa:b9:
30:88:c2:34:e6:aa:1f:44:47:c8:fd:c9:ab:8f:b3:84:91:fc:
89:e4:60:3c:45:5a:fc:b0:75:13:d9:9b:f0:59:2d:fb:63:97:
11:85:90:bc:5f:85:73:62:37:a5:93:b3:2f:a5:5b:af:fe:62:
50:1d:c8:d0:5d:4b:be:ee:d0:43:b1:e7:bb:26:ae:8c:84:a8:
d1:82:06:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:29:24 2025 by rpki-client