Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.mft
File: 9yTLpSHAgNtypuVKG4z0SVy7x9Y.mft (raw, json)
Hash identifier: RBYwXE3PTbifm4DY/t4AhYuDdlLZGhPqWOIeK8Vzk1E=
Subject key identifier: FC:BA:BE:D3:00:B7:15:3F:8A:D9:01:39:BE:24:36:CD:50:E2:23:69
Authority key identifier: F7:24:CB:A5:21:C0:80:DB:72:A6:E5:4A:1B:8C:F4:49:5C:BB:C7:D6
Certificate issuer: /CN=f724cba521c080db72a6e54a1b8cf4495cbbc7d6
Certificate serial: 01964FA33D8BE23C799315676D673D02EAE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9yTLpSHAgNtypuVKG4z0SVy7x9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.mft
Manifest number: 0A17
Signing time: Sat 19 Apr 2025 20:00:20 +0000
Manifest this update: Sat 19 Apr 2025 20:00:20 +0000
Manifest next update: Sun 20 Apr 2025 20:00:20 +0000
Files and hashes: 1: 9yTLpSHAgNtypuVKG4z0SVy7x9Y.crl (hash: 8nFXEsY7cfEkzs0xTCgJEmwVs5FlVUbxKIjJST3egE4=)
2: cQb4a56386hwKkX2XTV23EzTpVI.roa (hash: T6mT7SHm8VLGp8LXtDhfbm2F1razovLuYTeTLKEqGFE=)
3: gQRYgjDqN747YcFSZ_0L7G8Y0Qw.roa (hash: knELgWCfA/Sf8Z/AQKl4MF48MxHULiqnBptb464jAhc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/9yTLpSHAgNtypuVKG4z0SVy7x9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 20:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:a3:3d:8b:e2:3c:79:93:15:67:6d:67:3d:02:ea:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f724cba521c080db72a6e54a1b8cf4495cbbc7d6
Validity
Not Before: Apr 19 20:00:20 2025 GMT
Not After : Apr 20 20:00:20 2025 GMT
Subject: CN=fcbabed300b7153f8ad90139be2436cd50e22369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:75:64:76:6d:d0:35:ba:8b:3f:16:27:2e:26:
2f:bc:95:73:51:49:a8:e3:96:c2:97:72:68:c0:77:
a2:fa:71:5a:bf:f2:d5:07:d2:a0:1b:8c:3d:30:7b:
ef:ab:25:87:e9:d3:c8:8f:e7:7d:50:84:46:d3:74:
92:db:a9:ff:ea:49:da:62:b7:a7:1f:c5:73:29:e3:
db:81:0c:f6:80:03:9d:73:08:6f:6a:8b:6c:2e:8d:
a7:54:c4:bd:a4:e0:25:c4:e4:87:d7:22:95:3c:89:
1f:1f:63:66:99:f5:73:ab:63:71:87:56:af:9e:c3:
60:c9:90:20:74:05:03:71:04:02:3a:57:e8:af:df:
d6:73:e6:d9:88:94:21:bd:63:08:a9:2c:05:eb:3b:
eb:7d:d9:a9:4c:52:bb:d4:d3:3b:3a:6d:e2:5a:ab:
42:41:5e:8f:c9:89:84:22:1e:cd:57:6e:b1:4c:dd:
08:cc:f7:05:fb:5b:7a:cf:ef:30:43:06:b6:9c:e0:
ea:fc:87:76:4f:ea:04:1d:52:f9:5d:e8:bb:e8:78:
0f:77:a5:63:da:f9:7e:24:7d:8d:60:f8:64:22:9e:
2e:87:c8:09:ef:30:1d:c0:ee:2d:7c:8e:1b:0c:38:
fc:71:38:b5:c5:a8:22:77:9d:25:10:8a:03:2b:e8:
03:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:BA:BE:D3:00:B7:15:3F:8A:D9:01:39:BE:24:36:CD:50:E2:23:69
X509v3 Authority Key Identifier:
keyid:F7:24:CB:A5:21:C0:80:DB:72:A6:E5:4A:1B:8C:F4:49:5C:BB:C7:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9yTLpSHAgNtypuVKG4z0SVy7x9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:67:e7:ab:90:92:32:90:d2:bc:b9:5c:d4:0e:9f:29:f3:65:
87:ce:0b:d2:15:bc:e9:05:0c:19:9d:c8:ec:35:60:61:e4:39:
85:fb:58:8f:59:80:04:53:b3:5b:18:87:30:ed:ac:f9:73:07:
18:0a:00:eb:e0:46:c6:ac:db:98:6c:cc:a9:15:1e:2d:16:f4:
8e:1a:50:3b:50:3b:bb:cb:bc:c2:9a:5a:34:7e:7b:59:4f:cf:
f7:76:ec:01:1f:00:dc:75:cb:94:0f:c2:26:e3:5b:4d:d6:34:
08:61:c4:2d:20:bc:84:22:e8:8a:7e:02:f4:1b:3b:b3:b8:11:
1a:b0:53:48:8a:a4:e9:7a:1c:e7:a7:5c:0e:8f:e8:0f:77:a9:
50:31:0b:1a:4c:49:96:76:03:88:28:31:88:7a:70:c3:d6:c2:
dc:0f:59:e5:c5:58:7a:2e:fb:d3:a2:1d:cd:bd:3e:97:f0:09:
02:58:ae:04:17:63:48:51:32:f5:24:b5:28:0e:e8:b3:c1:cf:
40:93:7e:ab:9e:d4:3c:83:62:f7:9e:c9:9c:01:40:4b:b5:0d:
f9:4a:ab:36:da:b5:7d:49:76:ea:9a:f0:f9:73:0e:e9:83:24:
c6:3a:bb:f7:31:31:0b:b9:2f:82:3c:63:6b:88:bd:e9:43:a3:
00:bb:ed:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:14:07 2025 by rpki-client