Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.mft
File: 9LndnjT-ZtdROJA3CPjOH700LWQ.mft (raw, json)
Hash identifier: UB6wmQHp3R8N2FbmVVBx+45MugSBZnU9ZOhwhrrejj8=
Subject key identifier: D5:26:FC:2C:BD:14:E0:2E:69:D1:AD:7C:A7:CA:CF:A6:A8:90:B6:F2
Authority key identifier: F4:B9:DD:9E:34:FE:66:D7:51:38:90:37:08:F8:CE:1F:BD:34:2D:64
Certificate issuer: /CN=f4b9dd9e34fe66d75138903708f8ce1fbd342d64
Certificate serial: 01965CF12095C743835C55FAC343A673C5EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LndnjT-ZtdROJA3CPjOH700LWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.mft
Manifest number: 1505
Signing time: Tue 22 Apr 2025 10:00:28 +0000
Manifest this update: Tue 22 Apr 2025 10:00:28 +0000
Manifest next update: Wed 23 Apr 2025 10:00:28 +0000
Files and hashes: 1: 9KjqbMoowr4zIwC0vIDCLJx3OPk.roa (hash: P/sEcAl8BwOGFXxtB8+HWMsFUjWpgx7ANde/4kLha4c=)
2: 9LndnjT-ZtdROJA3CPjOH700LWQ.crl (hash: cJzg4R1JfLikr/8h4MDSJ4Wj/z7EalG6IegBf2nd+cc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9LndnjT-ZtdROJA3CPjOH700LWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:f1:20:95:c7:43:83:5c:55:fa:c3:43:a6:73:c5:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b9dd9e34fe66d75138903708f8ce1fbd342d64
Validity
Not Before: Apr 22 10:00:28 2025 GMT
Not After : Apr 23 10:00:28 2025 GMT
Subject: CN=d526fc2cbd14e02e69d1ad7ca7cacfa6a890b6f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:11:f9:1a:60:2f:d6:1b:7c:35:a1:a8:a1:a9:
60:b1:99:94:fb:81:fb:7e:af:cb:24:7b:95:82:e0:
af:63:0a:a7:8e:26:dd:71:83:f0:ca:7f:0b:81:76:
d4:74:ae:62:fb:6f:e6:23:09:8e:1e:00:29:f8:cf:
5a:4c:c9:25:b3:2a:e9:66:b4:56:a9:0f:fc:dd:fc:
d4:1d:15:51:e0:14:94:b0:69:d1:28:8c:5f:56:bc:
6c:14:68:87:f5:a8:f1:07:9f:26:b7:74:ab:3b:32:
53:65:b6:bd:bf:62:06:70:a4:4f:be:65:2b:bf:36:
3f:35:54:f3:3a:7e:14:02:6f:16:b0:27:6d:4b:2c:
5e:cc:68:0f:7a:08:36:d5:86:97:02:f0:48:aa:0d:
de:74:d6:0b:6a:39:1e:0f:c7:ea:68:4a:5e:66:4e:
33:cf:38:28:bd:a2:78:72:be:9e:82:ce:3a:38:27:
dc:5f:6a:50:13:71:f3:ff:5c:80:18:fa:eb:42:c3:
79:eb:1c:5b:91:e5:d4:c3:18:39:11:05:58:93:ec:
a4:71:80:63:a3:8b:09:a3:06:b8:10:37:9f:d7:91:
7b:0d:50:53:2b:01:ce:89:43:a1:9d:24:86:21:00:
dd:b3:76:cc:f4:7f:e6:b1:a6:03:57:6b:84:60:1f:
3f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:26:FC:2C:BD:14:E0:2E:69:D1:AD:7C:A7:CA:CF:A6:A8:90:B6:F2
X509v3 Authority Key Identifier:
keyid:F4:B9:DD:9E:34:FE:66:D7:51:38:90:37:08:F8:CE:1F:BD:34:2D:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LndnjT-ZtdROJA3CPjOH700LWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:24:7f:82:23:55:c0:8c:41:cd:14:59:4e:72:e3:fa:f0:fe:
db:20:eb:a0:38:5f:b6:3c:9b:a5:f9:2f:dc:b5:b9:3e:08:38:
ea:fb:94:76:3d:e6:24:6e:d7:2c:34:f9:75:a3:17:a3:71:0d:
14:da:93:5c:4e:5e:f7:6c:63:3d:c0:4e:cf:4f:61:26:a4:23:
7f:4f:5c:a1:32:78:02:a2:ff:79:1d:03:73:91:71:ec:87:18:
89:0a:aa:d1:a6:0f:21:15:a9:bb:2c:77:ef:12:75:af:82:ea:
57:a2:c1:1c:5c:1a:c8:4f:2f:60:cc:52:74:36:a7:61:2e:d9:
c5:12:dc:a5:9b:f0:b8:b0:e1:8a:9b:5e:ad:4e:3b:54:f0:51:
a5:dd:08:4e:5e:57:ec:33:39:cd:05:b8:b5:47:5f:29:78:8b:
ca:2a:76:b2:32:34:0f:c0:e9:5b:ae:41:de:5f:30:6d:4b:80:
d3:2f:ca:e0:d9:34:1b:08:f5:ec:64:14:cc:e0:b1:29:ca:68:
72:78:55:ca:9f:3d:d4:c4:fa:3f:7f:9c:32:56:d4:6e:c3:38:
53:ac:a4:e6:45:5d:17:f1:07:3b:be:82:17:76:3f:1f:e4:17:
97:16:9b:88:00:d5:96:16:4f:bf:2c:46:0f:ec:31:5f:c2:ab:
e5:89:78:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:13:33 2025 by rpki-client