Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft
File: 9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft (raw, json)
Hash identifier: LJudQzT9ah5xOya2CKtqkm+M32Sr3dMB7/eVxEGXG0Y=
Subject key identifier: 1C:0B:CD:1F:14:39:56:89:47:35:48:7B:EA:5D:BC:EE:0A:E2:A8:18
Authority key identifier: F7:E6:79:E5:8E:4B:8B:F6:3E:95:00:2B:54:BE:47:1D:63:4B:95:06
Certificate issuer: /CN=f7e679e58e4b8bf63e95002b54be471d634b9506
Certificate serial: 01963FF920928934F7AE15D5998ABC4D2386
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft
Manifest number: 14DC
Signing time: Wed 16 Apr 2025 19:00:13 +0000
Manifest this update: Wed 16 Apr 2025 19:00:13 +0000
Manifest next update: Thu 17 Apr 2025 19:00:13 +0000
Files and hashes: 1: 9-Z55Y5Li_Y-lQArVL5HHWNLlQY.crl (hash: NL6G2SNqy0ZcrHGTNpzVV9JpMCm4D1eI+mrWUwdIvUA=)
2: SJe0yiKrFFgre-LwlA373na16-M.roa (hash: W+lZ86QtGfH27JSeGBvOgaus0tZU6nh0IODmn6TYevo=)
3: rXYQihXZcHzDYDPfOCw2uf0QxOs.roa (hash: mgxpGPq3j8kcIVwK/lsmtpT+En8AA3E9GG8LueVY7g4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:f9:20:92:89:34:f7:ae:15:d5:99:8a:bc:4d:23:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7e679e58e4b8bf63e95002b54be471d634b9506
Validity
Not Before: Apr 16 19:00:13 2025 GMT
Not After : Apr 17 19:00:13 2025 GMT
Subject: CN=1c0bcd1f143956894735487bea5dbcee0ae2a818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:9c:ca:f7:30:e6:29:ce:16:2c:fc:98:d5:9d:
f1:3c:97:c9:ca:66:bd:94:d5:8e:b3:31:db:1c:90:
04:91:ac:9e:73:23:e3:70:36:46:33:42:a8:18:b8:
ac:a1:92:c2:8a:56:4d:b2:b1:97:19:00:4d:a0:17:
cd:46:bb:48:7d:94:1b:04:08:85:38:c2:aa:7c:56:
0e:e8:6f:ea:f6:2d:9a:d7:3f:8f:75:2e:aa:38:dd:
69:f8:3a:d6:f2:59:e4:96:4a:d3:b4:85:d7:e4:9c:
8e:67:80:c5:ff:45:ed:f8:88:dd:f0:95:b7:1f:e6:
5e:c8:51:41:35:34:46:84:81:52:21:96:3c:55:70:
16:3f:e4:8c:4b:f5:b8:f1:2d:c2:a2:a9:a4:54:44:
a6:e2:7c:29:c3:4e:98:3f:d5:d2:90:04:27:ee:20:
61:06:e4:d8:35:b9:9c:6b:e2:fd:3f:12:7b:a0:51:
a7:ae:15:f6:4c:26:35:98:f6:26:16:b4:d8:20:3f:
ce:b9:c5:9d:8a:a0:0e:42:e3:68:a5:2e:7d:ac:cc:
b4:f1:57:30:dc:74:62:33:c3:06:eb:d2:cb:56:b3:
19:28:6e:df:51:2e:a2:d7:fc:63:ae:cb:18:4a:50:
dc:b6:7c:c7:57:16:78:98:72:5b:bb:f8:62:6b:0f:
5d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:0B:CD:1F:14:39:56:89:47:35:48:7B:EA:5D:BC:EE:0A:E2:A8:18
X509v3 Authority Key Identifier:
keyid:F7:E6:79:E5:8E:4B:8B:F6:3E:95:00:2B:54:BE:47:1D:63:4B:95:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:1d:98:bb:cb:ab:3d:0a:bb:82:f8:12:64:d6:c0:a9:9b:31:
79:92:ed:38:dc:d9:b6:56:00:c6:c6:c4:95:42:c3:6a:e7:04:
a8:f9:72:dc:0c:71:14:94:db:ea:70:f6:54:06:ea:f6:05:aa:
a6:70:bb:67:44:2a:73:9d:ce:5c:78:21:9d:f2:c2:9f:67:fd:
77:88:ee:89:a8:ac:f2:40:b1:9d:b8:0e:be:cc:5e:0f:f9:38:
1b:e4:c8:b6:03:b8:f2:f0:d9:ca:f1:14:1f:c8:01:a3:4b:7f:
07:c8:60:83:73:44:28:ee:20:e2:65:1e:eb:53:77:f9:88:45:
d3:e7:55:a0:87:4e:a4:36:02:13:a3:35:c1:10:f7:12:d9:77:
3a:b8:c5:c0:97:c7:0e:31:02:68:84:54:67:ab:70:17:1d:0a:
29:22:d7:1e:93:47:dc:eb:57:1e:1c:a9:bc:33:27:fc:2c:90:
86:ca:4f:ed:c5:ab:57:d1:02:8f:5d:20:d0:b5:99:bc:a3:e8:
39:a9:88:92:86:14:95:62:ce:c6:56:df:e4:c8:fb:c9:56:e7:
63:36:6c:e5:c1:b2:53:0a:fb:e3:bd:06:aa:3d:92:6e:8e:49:
6f:a2:82:eb:94:90:dc:4a:9c:58:f4:4a:29:8b:43:19:5e:10:
37:0b:61:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:05:03 2025 by rpki-client