Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.mft
File: 9aEH8WvGsAt2TDms_WMzY2RtWZY.mft (raw, json)
Hash identifier: jP20bzX8m4661VXxhKj1I4ebTdq5UQfhAOfR0K3YS/0=
Subject key identifier: 99:B5:1C:26:51:CA:05:2D:83:80:9A:D1:D5:D7:7D:7E:7C:B7:57:B9
Authority key identifier: F5:A1:07:F1:6B:C6:B0:0B:76:4C:39:AC:FD:63:33:63:64:6D:59:96
Certificate issuer: /CN=f5a107f16bc6b00b764c39acfd633363646d5996
Certificate serial: 01963F547787B3AF57F38CD88789D53F40A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9aEH8WvGsAt2TDms_WMzY2RtWZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.mft
Manifest number: 0214
Signing time: Wed 16 Apr 2025 16:00:22 +0000
Manifest this update: Wed 16 Apr 2025 16:00:22 +0000
Manifest next update: Thu 17 Apr 2025 16:00:22 +0000
Files and hashes: 1: 9aEH8WvGsAt2TDms_WMzY2RtWZY.crl (hash: ltrcJvEfSl5PlwUPX36YS/3QCGYEpeaOqZAfgefhCUU=)
2: i8fQ4SDQp7cMewdMesiICFs9ZAg.roa (hash: bCMQ7OQEomrpckp+sy5Q02dQCcDmXIN8SQy3NDUMNVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9aEH8WvGsAt2TDms_WMzY2RtWZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 16:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:54:77:87:b3:af:57:f3:8c:d8:87:89:d5:3f:40:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a107f16bc6b00b764c39acfd633363646d5996
Validity
Not Before: Apr 16 16:00:22 2025 GMT
Not After : Apr 17 16:00:22 2025 GMT
Subject: CN=99b51c2651ca052d83809ad1d5d77d7e7cb757b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ed:ea:e3:33:27:44:63:31:15:b1:98:79:b8:
c3:71:11:a6:ab:b4:0e:3e:61:fe:b2:04:b1:39:ce:
2f:71:b3:4c:df:a7:49:05:95:f5:0d:2b:16:fd:4f:
82:21:53:b1:38:73:62:44:7d:b1:fd:08:e6:51:ea:
35:44:ea:7a:03:7a:c2:08:57:57:17:04:de:bc:df:
18:9d:87:cd:60:68:78:42:9c:d9:57:46:77:8e:1c:
d0:0e:f0:37:7e:06:c9:30:a6:e1:7a:53:f6:f8:58:
ee:82:ac:0c:5a:e2:13:e7:60:19:31:d4:a5:d7:5b:
89:46:ec:7d:7e:af:93:c5:9a:bb:f8:8d:be:fb:e7:
02:25:20:b1:f2:6f:45:04:e7:85:03:c3:03:91:b3:
8d:af:7d:af:d0:0f:c8:61:32:0c:40:42:4f:d1:22:
90:8e:0a:41:93:7a:6c:a3:05:04:97:47:7d:ea:2c:
dc:a2:4e:f9:b7:70:19:3a:5a:14:1a:43:cc:3c:47:
7a:f7:f9:fa:41:18:eb:14:22:63:b8:5a:ef:40:e2:
2b:6e:f9:f8:53:87:10:25:59:a8:ae:3d:f7:1f:78:
ee:72:ab:c1:39:86:90:60:b6:ab:94:56:26:87:67:
6e:ca:52:f4:a3:ce:d5:0e:d4:71:29:3c:43:3e:f7:
d8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:B5:1C:26:51:CA:05:2D:83:80:9A:D1:D5:D7:7D:7E:7C:B7:57:B9
X509v3 Authority Key Identifier:
keyid:F5:A1:07:F1:6B:C6:B0:0B:76:4C:39:AC:FD:63:33:63:64:6D:59:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9aEH8WvGsAt2TDms_WMzY2RtWZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:c0:f7:43:70:aa:6b:96:48:84:bd:15:d5:a2:b1:22:fc:61:
db:77:81:39:12:09:14:3e:d0:e3:be:d3:50:e6:3e:14:b5:61:
a8:bb:29:f3:d9:af:fa:0d:81:75:bb:b4:98:1c:88:8c:fe:f8:
ff:7a:4d:f3:c0:3b:af:e3:cb:92:f3:71:63:ff:ad:2e:52:02:
69:54:bf:d6:cc:ee:d0:4d:0f:85:45:da:86:98:d5:0c:01:a0:
82:b8:a2:f9:1f:dd:f6:40:c5:34:d2:37:0e:ef:cf:1a:80:b9:
26:d8:8b:2f:bd:0e:84:4c:45:01:d4:ab:5e:f2:c6:2b:9f:2f:
ca:18:1e:f1:71:e9:87:2e:ad:28:0e:74:5d:e0:17:db:63:df:
a9:25:22:83:f0:32:a7:1e:54:f3:8d:e7:64:6d:bd:db:6b:2f:
d0:10:64:c5:df:0c:64:82:38:60:6b:6c:14:a7:71:72:8c:46:
8b:99:87:da:62:08:f4:df:6b:58:fe:94:f4:97:c0:ec:3f:77:
91:c7:9c:90:c0:62:0b:be:e5:2c:30:34:db:65:50:f1:64:0b:
c2:bc:b7:95:22:ec:3a:b4:dd:97:ed:5f:8a:68:44:5b:b6:e2:
4c:20:11:e4:3f:9c:55:fa:0a:6d:d4:db:3d:1e:e8:47:58:3f:
bf:85:70:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 23:59:12 2025 by rpki-client