Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
File: 9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft (raw, json)
Hash identifier: qoAFcn0xKAJEhzm9b/MQNCG2j1Qe2erztfDM4fxf0j0=
Subject key identifier: 6D:31:9D:C4:7C:4A:EE:90:76:C6:14:40:56:51:9A:91:EF:9A:7D:CF
Authority key identifier: F4:E9:D5:33:10:24:31:87:08:3F:DC:96:09:73:54:65:B1:08:90:43
Certificate issuer: /CN=f4e9d53310243187083fdc9609735465b1089043
Certificate serial: 01964BC6A65FB84AF6CED50FF5283A5DBF20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
Manifest number: 14F7
Signing time: Sat 19 Apr 2025 02:00:31 +0000
Manifest this update: Sat 19 Apr 2025 02:00:31 +0000
Manifest next update: Sun 20 Apr 2025 02:00:31 +0000
Files and hashes: 1: 1-q7Os-ag3LFo7MgF8ZfJghgVfgc.roa (hash: AkqR6A52qHHQpKh+paJEwg0UF7zLNR6BUjxPJEPXBuc=)
2: 9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl (hash: hCS7lBfbPAK4nq8ToPAEKD6cTcvSXhAd2QBY6gxfk0Q=)
3: X2IXuMlNGoAcrvL_ko43_QrEupI.roa (hash: tb+ePbzsjMAZQXem+oOzrudhMucziUuIqtpyErKmVRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 02:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:c6:a6:5f:b8:4a:f6:ce:d5:0f:f5:28:3a:5d:bf:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e9d53310243187083fdc9609735465b1089043
Validity
Not Before: Apr 19 02:00:31 2025 GMT
Not After : Apr 20 02:00:31 2025 GMT
Subject: CN=6d319dc47c4aee9076c6144056519a91ef9a7dcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:19:33:2d:d9:8c:5f:33:0e:bb:69:5a:06:f2:
72:32:54:e8:75:11:ee:d1:31:1b:bb:10:55:5d:52:
64:e1:02:ad:63:59:93:21:00:ba:fa:61:2d:34:8a:
d4:a9:e6:44:21:fd:f6:f5:76:c0:2e:be:87:57:fb:
f4:68:8d:9d:c1:e9:3a:1d:3e:3f:9f:09:38:5e:bb:
12:d1:80:6c:a0:92:f1:93:0c:ed:d8:25:c4:41:38:
ab:f2:c0:24:40:9d:c1:e9:28:6a:45:96:c3:d8:0f:
f4:e6:45:c3:0e:25:36:3f:a3:b4:3b:b2:0a:d8:55:
9c:c6:50:8d:56:88:e6:17:05:a2:07:b3:52:66:1c:
a8:b1:62:eb:fe:ab:fc:e1:a5:6b:b9:43:3d:26:72:
0e:2a:ba:f5:2d:ba:02:a4:02:dd:c5:0d:bf:48:aa:
da:8e:6b:54:fb:3b:52:9e:91:9f:c3:82:fe:75:4b:
16:88:ba:ac:c9:25:55:2c:a7:73:d9:86:4e:f9:5f:
2a:a1:2f:54:87:30:0c:2b:3d:61:fa:98:17:e7:23:
f9:9c:18:06:aa:b6:e2:0a:77:68:07:1e:8a:85:69:
eb:ab:1c:49:07:46:7d:df:a3:47:d4:09:02:e8:5f:
33:23:61:f4:a8:c4:d9:9c:a4:9c:3a:57:95:e6:42:
2d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:31:9D:C4:7C:4A:EE:90:76:C6:14:40:56:51:9A:91:EF:9A:7D:CF
X509v3 Authority Key Identifier:
keyid:F4:E9:D5:33:10:24:31:87:08:3F:DC:96:09:73:54:65:B1:08:90:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:3e:44:08:85:8a:f2:3b:ba:2d:c5:08:d4:c4:95:0b:6e:31:
0f:91:5f:af:2b:e2:c1:e9:ba:c6:ec:21:2d:7c:34:1a:7d:68:
12:27:93:5d:30:ab:d7:f3:ce:cc:d1:5c:6e:d3:db:6c:ec:04:
f1:0a:29:48:a1:f7:be:04:e5:14:f7:d4:0b:94:66:ad:02:83:
b6:fe:41:55:5a:f3:5c:87:71:9b:b8:ad:32:1e:fe:cb:a6:2c:
fc:d3:af:62:b2:c2:62:70:5c:fa:5c:87:14:3a:5f:09:36:ca:
d0:08:89:5b:db:e6:33:16:56:2e:7f:95:39:ee:67:0a:63:90:
a1:ef:20:6a:9c:ec:03:aa:bc:3f:df:57:7c:7d:99:37:ec:a8:
0c:55:09:64:9c:13:21:4f:88:4c:cf:78:9e:89:1e:67:39:74:
28:de:e0:8a:06:43:ed:ed:ba:26:ca:bc:78:55:ad:56:ff:0b:
51:21:ab:64:8f:77:13:bf:63:f2:be:e8:32:bc:07:33:3e:cd:
ce:35:eb:0d:53:ae:01:e0:ab:3b:51:68:ee:99:c8:36:75:0c:
f6:e4:c0:f9:23:40:d6:ee:9e:e9:13:d4:ad:37:05:bb:af:91:
df:49:00:d3:c2:a9:01:77:d2:01:87:c2:73:da:ce:18:c6:b5:
02:8f:ff:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:12:08 2025 by rpki-client