Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/9Ma33VF1vo23oFIvfU5BxcQsayk.mft
File: 9Ma33VF1vo23oFIvfU5BxcQsayk.mft (raw, json)
Hash identifier: 6waS57itwnUZ3MWgFXaSMHubksJ+GMldte1AbZlUKv4=
Subject key identifier: 16:B7:0B:21:DF:FE:5D:00:FD:E7:DC:2D:75:E0:A6:AA:0C:BB:93:FA
Authority key identifier: F4:C6:B7:DD:51:75:BE:8D:B7:A0:52:2F:7D:4E:41:C5:C4:2C:6B:29
Certificate issuer: /CN=f4c6b7dd5175be8db7a0522f7d4e41c5c42c6b29
Certificate serial: 01959073E8D2D00EBFF06049255F0C76C29E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Ma33VF1vo23oFIvfU5BxcQsayk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/9Ma33VF1vo23oFIvfU5BxcQsayk.mft
Manifest number: 1122
Signing time: Thu 13 Mar 2025 17:01:10 +0000
Manifest this update: Thu 13 Mar 2025 17:01:10 +0000
Manifest next update: Fri 14 Mar 2025 17:01:10 +0000
Files and hashes: 1: 8AIFGKciFanVAzz2ffCjgurgKok.roa (hash: ENHuCpEeFyA8Ue2RXX/1jBC56W6LtF659OqDyGOAcn0=)
2: 9Ma33VF1vo23oFIvfU5BxcQsayk.crl (hash: sTXYied2KH4lBxwKURAFwq8C++bE7a8Ug4f9KRpl/Wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/9Ma33VF1vo23oFIvfU5BxcQsayk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/9Ma33VF1vo23oFIvfU5BxcQsayk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Ma33VF1vo23oFIvfU5BxcQsayk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 15:28:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:73:e8:d2:d0:0e:bf:f0:60:49:25:5f:0c:76:c2:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4c6b7dd5175be8db7a0522f7d4e41c5c42c6b29
Validity
Not Before: Mar 13 17:01:10 2025 GMT
Not After : Mar 14 17:01:10 2025 GMT
Subject: CN=16b70b21dffe5d00fde7dc2d75e0a6aa0cbb93fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:20:00:ce:4f:24:4d:63:e6:20:56:12:c7:47:
be:c3:3c:f2:77:3e:23:90:5c:08:68:49:01:ef:23:
c3:23:d0:50:bd:30:8b:3d:25:39:e2:c4:d7:66:fb:
14:88:01:e7:b5:b6:88:37:b3:da:8d:b0:d8:f1:33:
dc:0d:31:d4:29:a6:7c:bd:e6:b2:3a:8e:e0:e7:9f:
1b:2a:3c:29:df:24:3c:0e:d7:f5:56:06:93:c6:70:
8b:ca:8d:a2:4f:74:8e:d6:ac:4f:3a:34:6f:35:03:
ab:c7:3d:09:5f:77:0b:85:26:fc:87:6a:bd:22:16:
4d:e7:24:b6:13:eb:a2:09:75:cd:f5:b8:b5:67:e4:
59:84:ac:12:5c:25:c6:d8:18:1a:2b:5e:92:82:ed:
b3:6f:b0:8f:2c:d9:a3:ce:ed:71:e2:38:dc:30:f9:
ac:48:b1:c6:f4:6e:b2:d3:f0:a5:70:9b:ae:f7:90:
32:e7:bd:d4:f9:eb:1c:97:e6:12:c5:e7:b8:d5:36:
25:97:ff:29:5f:61:fb:18:fe:75:e4:b9:5f:f9:5a:
2e:4c:e3:9f:0b:be:c4:9f:38:dc:ac:85:f2:25:79:
22:80:06:8a:48:f0:fb:dc:32:ae:47:7d:50:3a:0c:
85:b3:3f:9d:5b:0a:5e:98:4c:4b:fd:13:32:c6:8c:
6c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:B7:0B:21:DF:FE:5D:00:FD:E7:DC:2D:75:E0:A6:AA:0C:BB:93:FA
X509v3 Authority Key Identifier:
keyid:F4:C6:B7:DD:51:75:BE:8D:B7:A0:52:2F:7D:4E:41:C5:C4:2C:6B:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Ma33VF1vo23oFIvfU5BxcQsayk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/9Ma33VF1vo23oFIvfU5BxcQsayk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/9Ma33VF1vo23oFIvfU5BxcQsayk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:92:9d:1d:6c:d1:e7:43:9e:8c:d0:d3:13:eb:95:f8:59:1e:
15:ee:03:68:f7:ad:f3:d7:4b:74:b0:bf:8d:d6:7e:02:c0:32:
fc:36:d7:2f:21:38:91:93:38:8c:ff:83:52:e3:eb:62:31:b5:
25:48:cb:d6:39:c2:21:8d:21:f3:61:38:11:d1:e7:39:51:2d:
27:24:03:80:be:9b:be:3c:7f:52:f8:5f:1a:f2:da:fc:12:fe:
c1:6c:93:f3:1a:d1:cd:82:64:3b:19:70:0b:46:df:4a:40:d0:
00:80:16:35:8f:88:3c:8b:22:99:0b:4b:5e:ae:78:38:5d:0d:
73:ce:3a:09:ad:ad:15:57:3f:cc:79:66:1b:95:22:0e:0c:2d:
60:76:7d:38:3a:71:e8:e2:42:58:79:c4:96:2c:aa:31:cc:e0:
00:b8:54:a9:f6:ef:21:f9:52:d4:39:77:a8:be:c1:50:d5:68:
3c:3a:cd:b8:b1:69:97:f5:8d:fc:72:00:4b:cd:dc:c9:81:07:
d5:4b:19:9d:19:1f:de:c6:be:90:74:07:8e:43:17:2e:59:9c:
40:a3:f7:9e:92:6f:1d:72:aa:86:da:e3:86:a1:99:82:a9:87:
68:7e:b4:9f:b1:90:2b:1c:d6:ab:2a:81:48:7a:8e:5c:bb:a5:
ec:93:4c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:42:01 2025 by rpki-client