Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.mft
File: S9H1DfJj_lCfxd6cWkc6KOOBJjk.mft (raw, json)
Hash identifier: +JBymwzmq3fIY1juDtpmNxw25n1MOoPsVSUW/WpbNPg=
Subject key identifier: E9:24:DD:8B:D4:1D:30:B9:8B:44:CF:25:CA:DB:E3:2E:D0:0B:D9:B3
Authority key identifier: 4B:D1:F5:0D:F2:63:FE:50:9F:C5:DE:9C:5A:47:3A:28:E3:81:26:39
Certificate issuer: /CN=4bd1f50df263fe509fc5de9c5a473a28e3812639
Certificate serial: 01958C608B93DC12D5A1339C81E107289C56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9H1DfJj_lCfxd6cWkc6KOOBJjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.mft
Manifest number: 1005
Signing time: Wed 12 Mar 2025 22:01:32 +0000
Manifest this update: Wed 12 Mar 2025 22:01:32 +0000
Manifest next update: Thu 13 Mar 2025 22:01:32 +0000
Files and hashes: 1: S9H1DfJj_lCfxd6cWkc6KOOBJjk.crl (hash: t0Z+CJKnNKuTcInQ1NmQBJ0/OaqgbDx2esPTtJLpBwk=)
2: ejjlASXkUcRdnr6-VdCF2Mgcm40.roa (hash: vzr2w6+iif68HBa0Udg4Ex8g0igxmMWxnsZRKLXilEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/S9H1DfJj_lCfxd6cWkc6KOOBJjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:60:8b:93:dc:12:d5:a1:33:9c:81:e1:07:28:9c:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bd1f50df263fe509fc5de9c5a473a28e3812639
Validity
Not Before: Mar 12 22:01:32 2025 GMT
Not After : Mar 13 22:01:32 2025 GMT
Subject: CN=e924dd8bd41d30b98b44cf25cadbe32ed00bd9b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0a:ca:7f:5c:71:83:34:b6:6b:97:2b:23:69:
f5:a5:da:22:1e:98:2b:bd:85:41:74:1d:12:cb:e4:
69:ce:43:83:16:de:b9:69:09:c1:ff:69:62:b7:40:
89:cc:ba:07:e4:dc:45:85:c8:4f:b1:8e:26:2f:22:
7a:08:db:95:a0:25:7b:80:e9:e8:dd:e1:bc:83:69:
3c:d5:ee:c2:5c:7a:f9:28:0e:40:a2:12:f3:8b:7c:
78:03:b9:90:f1:cb:b1:07:2d:ef:2f:2d:1a:9f:f7:
84:74:4c:7c:cd:0c:3a:25:8e:3d:c8:64:68:13:93:
fb:05:f6:47:7b:1d:37:0c:53:5e:2e:99:8b:db:dd:
b6:1b:c4:7d:b4:c6:6f:a6:61:70:7c:29:02:fc:5f:
46:65:e2:33:49:84:1f:23:f5:d9:d6:43:0e:9c:86:
04:ee:3d:36:22:75:ad:e3:52:2a:ce:89:b0:29:cb:
07:20:b0:ea:99:59:57:be:c1:9e:77:d3:35:cc:61:
20:45:e5:26:5c:e7:04:c2:5e:59:a5:c9:dd:bb:95:
d8:9c:b9:29:66:5d:2b:d4:8f:26:fa:50:8b:18:e6:
a3:19:54:5e:cf:f6:c2:96:a3:06:0f:86:90:fd:de:
44:84:c9:df:48:e0:a0:d8:40:59:24:28:45:59:26:
9d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:24:DD:8B:D4:1D:30:B9:8B:44:CF:25:CA:DB:E3:2E:D0:0B:D9:B3
X509v3 Authority Key Identifier:
keyid:4B:D1:F5:0D:F2:63:FE:50:9F:C5:DE:9C:5A:47:3A:28:E3:81:26:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9H1DfJj_lCfxd6cWkc6KOOBJjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:8a:1b:4d:4b:ca:10:36:f7:ed:05:48:34:e3:0c:6e:ac:cd:
5b:f1:7a:75:17:9e:0c:b6:94:72:ed:ab:d4:24:82:57:f4:42:
ec:a6:c7:2c:da:a3:b7:ee:44:31:97:fc:a1:1d:40:45:39:a7:
bb:fc:63:e9:1c:ab:08:b4:20:96:8a:61:a6:6d:f6:84:e2:af:
91:1e:3b:1b:99:28:71:c6:ab:2f:27:4f:b8:ab:04:d9:22:b6:
6b:26:9e:15:2e:14:45:fe:a3:91:42:3d:16:ac:5d:0e:ad:9f:
79:da:b4:f3:fd:a7:08:9f:9e:20:b1:51:f5:12:b9:98:67:ee:
08:9e:e6:49:89:dd:d8:84:0e:26:36:06:37:93:06:d1:ad:40:
66:15:bb:a4:68:87:38:f1:89:65:a6:e9:c7:08:25:be:10:aa:
b5:ab:2d:06:fb:6b:a3:da:c1:3f:9a:67:28:4e:53:be:b8:9d:
91:37:34:4a:15:a0:42:b0:40:bb:4f:11:02:62:e6:28:13:91:
58:d6:e1:19:49:45:05:5a:03:10:56:9a:97:db:9e:98:c2:6e:
1f:34:ba:40:47:d0:99:78:94:c1:fd:6b:2f:d4:ed:71:84:9d:
81:92:41:3d:8a:f4:95:69:d8:5e:e2:37:32:50:3a:aa:49:67:
52:86:46:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:41:08 2025 by rpki-client