Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft
File: 9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft (raw, json)
Hash identifier: mC886gZQv250m+gVzovZjp049sUSc97CS4bIGpYMG1I=
Subject key identifier: 22:F7:BA:D2:7E:E3:9C:2B:17:41:F7:D4:BB:2B:46:E8:F9:58:04:FC
Authority key identifier: F4:DB:83:AD:C7:6B:AF:F6:05:70:0C:CA:48:CC:4F:6F:8C:52:9F:66
Certificate issuer: /CN=f4db83adc76baff605700cca48cc4f6f8c529f66
Certificate serial: 0196108E67E3AE8855093141177A3C1BCFB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft
Manifest number: 0E3E
Signing time: Mon 07 Apr 2025 14:01:30 +0000
Manifest this update: Mon 07 Apr 2025 14:01:30 +0000
Manifest next update: Tue 08 Apr 2025 14:01:30 +0000
Files and hashes: 1: 9NuDrcdrr_YFcAzKSMxPb4xSn2Y.crl (hash: 7bJItdJBX93WVsqOtYLGWIIQxEyiDjr5r8aypDMmw4E=)
2: JKDoGMCZzjSndX7Ct7p3CxyKJR4.roa (hash: bo2ZyeRjzsKv0IsXJYurWXlAoWDOMikTk02MIFIPMnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:10:8e:67:e3:ae:88:55:09:31:41:17:7a:3c:1b:cf:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4db83adc76baff605700cca48cc4f6f8c529f66
Validity
Not Before: Apr 7 14:01:30 2025 GMT
Not After : Apr 8 14:01:30 2025 GMT
Subject: CN=22f7bad27ee39c2b1741f7d4bb2b46e8f95804fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:71:4a:4f:70:b2:2e:eb:98:be:83:54:bc:aa:
d7:7b:f9:30:45:98:04:e7:34:fc:66:ae:87:b8:1c:
ad:49:88:e2:1a:22:1d:3c:28:99:8f:f7:2c:2a:ed:
dc:09:16:f3:b3:42:3e:61:a1:4e:f2:34:a7:7d:95:
df:7b:b7:fb:81:97:71:a6:3b:b1:c5:d2:27:20:35:
cb:27:09:9d:6e:f7:36:55:a8:52:bb:13:b8:bd:4b:
71:97:d8:f2:d8:c9:f1:fd:72:4a:a7:44:bd:b5:48:
59:7c:51:a4:77:05:e0:94:30:de:ce:80:49:50:29:
cf:30:73:b0:38:89:85:ea:d1:8d:90:40:cb:da:47:
27:44:e1:df:cf:1d:9e:a4:dd:77:53:d7:4f:21:3c:
a2:a5:18:d6:7b:26:6f:e0:a2:c1:5e:70:2a:12:2d:
6b:50:1a:be:0e:4a:be:27:ac:d8:26:0c:88:52:f5:
d9:34:04:f8:3e:a6:51:e6:c8:84:75:ac:35:1a:bd:
97:9f:47:ac:65:00:5f:84:e4:16:7b:b5:14:bb:ad:
8d:f8:2b:f9:1d:f3:11:97:23:3a:0c:ab:3e:64:10:
d0:d9:db:1f:27:29:3f:73:cc:c9:57:91:13:76:b6:
82:de:a0:25:e5:61:77:88:07:ff:e2:17:be:09:0d:
e4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:F7:BA:D2:7E:E3:9C:2B:17:41:F7:D4:BB:2B:46:E8:F9:58:04:FC
X509v3 Authority Key Identifier:
keyid:F4:DB:83:AD:C7:6B:AF:F6:05:70:0C:CA:48:CC:4F:6F:8C:52:9F:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:54:d7:d2:8f:77:7c:a1:de:77:7c:4d:58:5a:b2:b7:67:cd:
36:c7:d3:b1:42:6c:b8:00:25:d0:f3:74:43:5c:7d:2b:6b:61:
6e:9b:dc:61:b3:be:8b:f6:0f:ad:f8:24:d7:90:10:de:0e:75:
cf:b6:fb:8e:ce:a1:7d:0b:bd:04:5e:d4:45:2d:5c:55:fa:f8:
48:14:d5:e2:db:2a:28:2e:c1:69:b1:cf:bb:64:c2:4c:0e:8b:
be:33:ba:8d:8b:7c:25:ed:d9:22:d1:8b:33:fe:a2:6f:b6:19:
df:7f:b3:c3:ab:a8:0e:d8:8a:a5:1e:9a:fd:20:1e:16:ca:6b:
c3:74:a5:cb:4f:0a:65:bf:05:40:f5:4c:35:9f:a8:76:83:21:
72:f8:e4:2f:ea:1a:a8:e5:f8:f2:8d:cf:1e:77:dc:ac:82:9a:
e4:ec:50:be:af:db:b7:47:6a:0f:61:33:8a:b0:88:9b:7d:6b:
71:9b:d2:9b:ad:21:17:43:ec:d1:68:d8:ec:d5:42:11:c0:6a:
20:06:33:a5:21:4f:5f:27:00:b9:55:6d:b3:0f:17:7b:03:f8:
8a:da:47:33:96:5e:bb:84:f2:6e:80:59:f2:48:c6:8e:2b:e5:
05:d0:ed:5f:0d:a2:81:51:ba:b0:7d:25:fc:af:7a:ab:1e:a0:
68:ad:12:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:56:02 2025 by rpki-client