Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/9-VkfNC39yK-1FafN7i_j5JTjPU.mft
File: 9-VkfNC39yK-1FafN7i_j5JTjPU.mft (raw, json)
Hash identifier: 2VeRIOXw70EC1XYy7t6k6zNYfBdE1bSVjUAiURanCg8=
Subject key identifier: 6C:5B:92:0F:DC:AB:80:7C:E7:E9:F8:51:02:12:B9:5C:0C:22:F2:18
Authority key identifier: F7:E5:64:7C:D0:B7:F7:22:BE:D4:56:9F:37:B8:BF:8F:92:53:8C:F5
Certificate issuer: /CN=f7e5647cd0b7f722bed4569f37b8bf8f92538cf5
Certificate serial: 0196488E89A55491015B9A47A32940B01CAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9-VkfNC39yK-1FafN7i_j5JTjPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/9-VkfNC39yK-1FafN7i_j5JTjPU.mft
Manifest number: 1119
Signing time: Fri 18 Apr 2025 11:00:22 +0000
Manifest this update: Fri 18 Apr 2025 11:00:22 +0000
Manifest next update: Sat 19 Apr 2025 11:00:22 +0000
Files and hashes: 1: 9-VkfNC39yK-1FafN7i_j5JTjPU.crl (hash: cDISjxOBKl4bmCXof0BuKOuohdxdhmzcUFUVnODeTis=)
2: DBhdVQnWbQeKdQzgQiCpHErXzhE.roa (hash: ke+PE6qJEQ9z2GmlNhQtn8qkPU8ewvFXiEh0aYxuqOo=)
3: q1OrwBnOgNGg_tS0zZoAzPBHw1c.roa (hash: aaFqVy4+hGHKy39rpTWrEUIWgkLIuK6ZgSAREjkESF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/9-VkfNC39yK-1FafN7i_j5JTjPU.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/9-VkfNC39yK-1FafN7i_j5JTjPU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9-VkfNC39yK-1FafN7i_j5JTjPU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:48:8e:89:a5:54:91:01:5b:9a:47:a3:29:40:b0:1c:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7e5647cd0b7f722bed4569f37b8bf8f92538cf5
Validity
Not Before: Apr 18 11:00:22 2025 GMT
Not After : Apr 19 11:00:22 2025 GMT
Subject: CN=6c5b920fdcab807ce7e9f8510212b95c0c22f218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ea:66:10:9c:d7:dc:22:25:c4:a0:ae:8d:02:
e3:10:a1:d9:a7:54:67:32:4b:6b:0a:f2:53:49:a0:
ef:77:3c:05:77:c0:5d:f1:dd:94:45:53:40:5a:b5:
06:a6:56:56:a5:c4:54:df:d8:97:d5:bf:68:c6:7f:
fc:48:ad:08:0d:49:15:2e:e3:c2:3f:81:ae:33:22:
aa:3f:45:ee:64:fd:33:39:aa:13:be:ae:21:4b:b0:
50:a7:d4:d1:0b:e8:aa:54:a3:b6:d2:aa:a4:1b:5b:
a7:87:a5:d9:6b:60:76:12:91:47:4c:32:81:ac:61:
0b:2c:d7:73:59:06:a5:3d:a2:5a:63:a9:25:14:5c:
78:f3:00:fe:78:69:20:c6:e3:02:e9:1e:e2:62:74:
3a:9a:fb:d8:33:d2:46:55:1c:01:00:46:1f:13:18:
b9:71:69:9e:25:e4:27:d0:3b:e3:e7:a3:4c:e7:cc:
66:53:5d:d6:ce:6a:53:58:57:5c:3f:9d:e9:8d:18:
d2:67:40:ce:1e:96:51:94:79:c4:85:ae:58:2a:4c:
b3:f3:30:de:f4:ce:68:5f:8b:c0:dd:2f:f0:9a:36:
17:f4:5c:d8:e0:e4:62:ea:fd:b6:fe:4d:2e:3c:0e:
de:dc:f8:f3:c9:74:b7:a3:c7:8a:99:0d:44:a7:fc:
e2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:5B:92:0F:DC:AB:80:7C:E7:E9:F8:51:02:12:B9:5C:0C:22:F2:18
X509v3 Authority Key Identifier:
keyid:F7:E5:64:7C:D0:B7:F7:22:BE:D4:56:9F:37:B8:BF:8F:92:53:8C:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-VkfNC39yK-1FafN7i_j5JTjPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/9-VkfNC39yK-1FafN7i_j5JTjPU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/9-VkfNC39yK-1FafN7i_j5JTjPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:1f:86:45:77:e9:5d:78:85:86:8b:da:89:59:f1:b1:06:7c:
b1:6d:29:6a:16:33:b1:2b:4d:3c:e0:4d:b2:37:95:d9:7a:2f:
4b:c0:da:6e:86:bc:78:dd:64:de:88:1d:6d:cd:eb:82:a5:69:
8d:0f:25:ca:59:eb:5b:dd:ae:5d:da:e2:8d:bd:52:a3:64:32:
6e:a5:3c:15:bb:4b:a7:70:ff:78:37:6d:42:39:db:f5:c8:0b:
32:62:8f:6d:46:7b:37:49:ee:b1:93:13:d3:22:ab:db:51:b4:
ff:b6:57:56:3d:e6:2f:ea:d0:1d:f8:b4:22:41:87:10:2f:2e:
5a:73:d0:50:39:d6:32:86:4b:dd:20:43:47:32:c2:4d:4d:99:
a8:2f:55:33:57:71:f5:dc:55:bc:a0:0c:c6:8f:3e:07:a7:1e:
3c:d6:a4:b6:bf:d3:98:ca:34:b8:b3:b6:45:12:ce:f8:2c:54:
79:ce:78:51:91:0b:ee:4f:6e:54:24:d1:97:0e:9e:b9:c2:0c:
72:bd:e3:68:fa:b2:54:1e:db:f5:31:b3:da:39:14:68:14:32:
b7:d2:5b:c9:da:22:ec:78:43:55:9e:2e:83:b8:4d:9b:2e:0e:
dc:1f:27:ba:b8:47:7f:eb:46:5c:a9:99:ed:22:af:58:5f:92:
32:5e:71:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 20:12:22 2025 by rpki-client