Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.mft
File: 9KWwQv5I7rEjvlbb-ejdogweoR0.mft (raw, json)
Hash identifier: mmCUiO99t4xuoUCq+9rc5mTm2H0rW4xPb0xVTuf+1R8=
Subject key identifier: 9A:78:DA:F4:3F:6C:57:05:37:F4:64:41:F5:BA:DC:A0:C3:19:F1:FF
Authority key identifier: F4:A5:B0:42:FE:48:EE:B1:23:BE:56:DB:F9:E8:DD:A2:0C:1E:A1:1D
Certificate issuer: /CN=f4a5b042fe48eeb123be56dbf9e8dda20c1ea11d
Certificate serial: 019654929C744882B0DAD5129673CB614AEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9KWwQv5I7rEjvlbb-ejdogweoR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.mft
Manifest number: 14FB
Signing time: Sun 20 Apr 2025 19:00:16 +0000
Manifest this update: Sun 20 Apr 2025 19:00:16 +0000
Manifest next update: Mon 21 Apr 2025 19:00:16 +0000
Files and hashes: 1: 9KWwQv5I7rEjvlbb-ejdogweoR0.crl (hash: bgbip73wQt3Z0QGplSNVRDAV9+qp4iaOcuAZbz/ZHBc=)
2: BKaKCrIWJLW3Q862BmZ-Z-FQI78.roa (hash: zGv7kfCx9AyBiy/Vt4g16r88DKiDMl7S2RsrkRbPYxA=)
3: U6yxYsRAOLx1rVOUMfl1bHjQTqE.roa (hash: p5afCkYVQi7asNinB13X4z3pkTkHpo8/a9b5lnTy5To=)
4: hlFLNTPKu_nVGF692xwIYmZW2GU.roa (hash: c5Q2Sew+Iis+NOcJWfVvfa4Ocr0QgEd2RYjfl4HhWNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9KWwQv5I7rEjvlbb-ejdogweoR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:92:9c:74:48:82:b0:da:d5:12:96:73:cb:61:4a:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4a5b042fe48eeb123be56dbf9e8dda20c1ea11d
Validity
Not Before: Apr 20 19:00:16 2025 GMT
Not After : Apr 21 19:00:16 2025 GMT
Subject: CN=9a78daf43f6c570537f46441f5badca0c319f1ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:30:58:0f:6c:ae:85:df:f6:ff:13:f7:5e:18:
d5:3e:1f:48:e8:d3:6a:71:dc:5d:9b:a4:ea:68:0d:
30:cd:c5:6f:24:57:93:eb:49:7f:0c:55:d7:4b:3d:
a2:be:cd:5f:25:e9:7c:9c:88:cf:e1:79:29:05:7f:
0d:a8:90:7a:6a:0f:6b:85:ba:c2:89:a1:c8:29:a7:
48:57:fe:9a:66:45:b2:df:f0:ec:34:84:5b:cc:16:
c1:9a:95:f0:6c:25:32:4f:c0:6d:a5:ea:cd:1b:46:
bf:70:5d:71:d3:8f:a1:75:83:5b:09:b6:09:7d:50:
89:c2:af:61:24:23:5e:16:f9:31:8c:f6:ed:ae:a0:
9b:75:a1:1e:09:d3:00:61:17:6d:a2:b4:4e:12:72:
9c:ac:18:31:b9:ba:80:87:03:90:fc:69:61:ea:c1:
1d:24:e4:63:ac:e3:d1:d2:71:9a:97:cd:2b:8a:44:
d5:bc:8b:3b:78:19:8b:81:76:30:d3:69:98:37:01:
4b:35:b9:a3:1e:45:9a:7e:f1:b7:7b:84:33:12:57:
b3:6c:28:cc:af:9a:9f:a0:b5:3d:d7:72:02:ac:17:
af:da:75:59:ca:32:c7:86:69:1e:09:d9:09:13:1b:
ab:5a:cf:de:7e:81:f6:b1:c5:c9:30:69:32:1c:ea:
4d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:78:DA:F4:3F:6C:57:05:37:F4:64:41:F5:BA:DC:A0:C3:19:F1:FF
X509v3 Authority Key Identifier:
keyid:F4:A5:B0:42:FE:48:EE:B1:23:BE:56:DB:F9:E8:DD:A2:0C:1E:A1:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9KWwQv5I7rEjvlbb-ejdogweoR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:09:a4:f1:2b:ed:4a:06:2f:10:c2:f4:c1:e9:95:b8:24:cf:
ab:fc:fa:d4:32:fa:93:15:e2:9d:5e:83:67:21:de:b6:b1:87:
12:9d:e5:0a:1b:1a:34:b5:3d:cd:c9:41:aa:cf:6b:82:d8:2e:
44:0f:79:69:34:40:fa:ad:0a:11:25:b5:83:fb:ce:1b:e4:f8:
ee:58:95:f9:7a:c9:52:72:aa:36:3f:b9:21:87:35:36:77:63:
41:a6:47:30:df:85:4f:79:59:c0:ba:fd:e3:4a:57:61:ba:ca:
85:ed:8a:92:dc:0c:86:05:97:cc:d0:01:57:fa:61:a1:16:10:
d6:9e:e8:c6:8f:26:c5:4c:bc:99:db:61:86:e4:58:a1:a4:64:
35:53:56:8f:8a:7b:20:4d:1b:32:e4:f7:db:db:3e:aa:44:6f:
82:5f:87:f7:6a:27:64:72:58:ca:fc:85:80:b4:e8:b8:d9:e6:
50:cf:4f:96:65:fd:04:65:15:cf:8c:0f:d5:75:0d:e7:ad:e2:
43:aa:20:7f:9a:0d:4f:4d:5e:25:e6:93:a5:36:65:51:de:76:
16:cd:7c:56:76:ee:87:7e:15:bf:cd:c1:80:60:e3:6f:8f:e6:
1a:f5:e1:fd:b9:3b:89:64:4a:db:48:33:04:48:49:51:20:a1:
b1:b0:24:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:11:19 2025 by rpki-client