Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/ccfa17-30f5-451a-8e29-6cca66fd3c99/1/_96Be-rkwKLVf3_D8IxifVZUDn4.mft
File: _96Be-rkwKLVf3_D8IxifVZUDn4.mft (raw, json)
Hash identifier: 3m3Y6857OWehB49quNjlf5/n6FqpFpLEI7vFChq8Hos=
Subject key identifier: 1A:DC:58:CD:77:F4:9B:E6:87:DB:36:9A:95:4F:8C:72:F7:12:AB:12
Authority key identifier: FF:DE:81:7B:EA:E4:C0:A2:D5:7F:7F:C3:F0:8C:62:7D:56:54:0E:7E
Certificate issuer: /CN=ffde817beae4c0a2d57f7fc3f08c627d56540e7e
Certificate serial: 0196507F0EDF7D530A9EAF23006DD9BB7CE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_96Be-rkwKLVf3_D8IxifVZUDn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/ccfa17-30f5-451a-8e29-6cca66fd3c99/1/_96Be-rkwKLVf3_D8IxifVZUDn4.mft
Manifest number: 04C9
Signing time: Sun 20 Apr 2025 00:00:26 +0000
Manifest this update: Sun 20 Apr 2025 00:00:26 +0000
Manifest next update: Mon 21 Apr 2025 00:00:26 +0000
Files and hashes: 1: 9iTVcABMKXRZ-jDsWu-61gCPaTM.roa (hash: np3kCerAysjg7QMTKvS1rZseKRBoSzKlF7Gczsl6PKA=)
2: _96Be-rkwKLVf3_D8IxifVZUDn4.crl (hash: Oqles6nULWIEY/kTjOUXYT4dGP89hb87Ysaig84K2+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/ccfa17-30f5-451a-8e29-6cca66fd3c99/1/_96Be-rkwKLVf3_D8IxifVZUDn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/ccfa17-30f5-451a-8e29-6cca66fd3c99/1/_96Be-rkwKLVf3_D8IxifVZUDn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_96Be-rkwKLVf3_D8IxifVZUDn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:7f:0e:df:7d:53:0a:9e:af:23:00:6d:d9:bb:7c:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffde817beae4c0a2d57f7fc3f08c627d56540e7e
Validity
Not Before: Apr 20 00:00:26 2025 GMT
Not After : Apr 21 00:00:26 2025 GMT
Subject: CN=1adc58cd77f49be687db369a954f8c72f712ab12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ec:d2:13:28:25:fb:9b:e9:f8:2a:7d:00:d5:
f2:19:b9:57:ec:f6:de:1f:b0:6e:b9:f0:09:2f:e0:
0c:c9:9f:3d:ed:a3:e9:bf:2a:b2:97:66:0f:c1:62:
57:8c:9d:86:32:d6:00:77:28:a1:a0:e5:4e:57:0f:
1b:62:81:fc:f7:ec:dc:a6:80:11:c7:4e:86:27:ee:
16:c6:df:b5:20:42:8e:71:ee:ae:74:2b:e0:99:f4:
53:97:bf:cb:54:f7:8d:86:c5:04:e7:1d:cc:09:88:
6e:88:7f:e7:19:ac:bd:27:65:fa:88:09:5e:65:12:
ce:50:76:40:5c:5b:e9:97:bc:04:cd:23:23:50:ee:
78:c4:30:ba:62:54:8a:69:cb:08:1f:ea:c1:4e:e8:
30:99:6b:c6:c4:51:8b:1f:ec:64:d0:0e:34:a3:6d:
f0:95:2b:e6:b6:84:25:62:44:d3:72:ea:e2:df:2e:
54:69:b9:8b:a4:d6:21:cd:80:95:a2:35:84:05:46:
dc:77:08:14:35:ad:9c:41:10:da:67:b3:d0:f4:54:
27:f6:88:4e:56:23:fc:c5:65:6a:8a:ca:75:b9:80:
17:04:92:df:d3:a0:12:34:bc:d6:da:2e:ad:77:6a:
76:2c:b9:ee:67:15:8c:1a:0f:8e:70:84:8f:69:95:
0c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:DC:58:CD:77:F4:9B:E6:87:DB:36:9A:95:4F:8C:72:F7:12:AB:12
X509v3 Authority Key Identifier:
keyid:FF:DE:81:7B:EA:E4:C0:A2:D5:7F:7F:C3:F0:8C:62:7D:56:54:0E:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_96Be-rkwKLVf3_D8IxifVZUDn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ccfa17-30f5-451a-8e29-6cca66fd3c99/1/_96Be-rkwKLVf3_D8IxifVZUDn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ccfa17-30f5-451a-8e29-6cca66fd3c99/1/_96Be-rkwKLVf3_D8IxifVZUDn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:af:fb:62:eb:80:3f:92:50:00:39:e2:69:4f:b9:fa:99:a6:
91:6e:9d:45:1a:2d:71:e4:ba:6b:c1:06:34:c0:0b:ba:d3:d2:
1c:57:85:cb:40:4a:f8:3d:bb:47:80:a8:cd:c5:53:32:97:3b:
f6:de:35:02:61:1e:8a:94:30:6f:bf:62:fd:42:a0:f0:5b:f8:
2a:99:ea:fa:8f:64:d6:35:65:e3:cc:43:62:a0:3a:2f:ab:7a:
a6:87:7d:e9:0f:1c:bc:42:1e:be:c3:61:7e:8e:96:89:f0:30:
4d:53:3b:66:86:30:8d:cc:b8:81:28:df:53:b4:8c:33:06:e9:
1f:df:51:53:1a:d8:9e:51:6a:78:fa:be:8e:ad:9c:cf:c0:1f:
92:d7:09:5c:79:b4:99:a0:14:d3:3e:d9:61:84:a9:7f:dc:52:
2c:8b:0d:fd:42:07:f1:e8:dd:30:bb:ef:6a:e4:3d:21:4e:46:
92:8d:52:3d:56:dc:09:cf:73:ff:f0:31:93:45:52:ca:fc:c8:
ad:fb:fa:a5:bd:90:07:d2:c9:90:9d:ac:39:85:8c:e4:98:03:
9f:27:72:bf:30:da:e2:2d:e4:74:33:9a:e2:e2:5c:6c:b3:85:
2a:84:a9:9b:ea:c8:84:75:78:9a:dd:66:22:41:5b:6c:e3:76:
ed:9a:d5:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 01:59:18 2025 by rpki-client