Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.mft
File: 9JUCyXSCsoUChSyX75vToKKl6fA.mft (raw, json)
Hash identifier: xkytBaTdzvyzXo7vX37pwIZdgS6OfMxjFsLExi6lu2s=
Subject key identifier: 5A:D9:25:A0:73:E8:53:0C:55:69:45:2B:19:72:75:FA:BB:9B:C8:5F
Authority key identifier: F4:95:02:C9:74:82:B2:85:02:85:2C:97:EF:9B:D3:A0:A2:A5:E9:F0
Certificate issuer: /CN=f49502c97482b28502852c97ef9bd3a0a2a5e9f0
Certificate serial: 0195895F03E8883CCAAF02F4F6FA3B78931C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9JUCyXSCsoUChSyX75vToKKl6fA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.mft
Manifest number: 1264
Signing time: Wed 12 Mar 2025 08:01:00 +0000
Manifest this update: Wed 12 Mar 2025 08:01:00 +0000
Manifest next update: Thu 13 Mar 2025 08:01:00 +0000
Files and hashes: 1: 9JUCyXSCsoUChSyX75vToKKl6fA.crl (hash: 5jHtOvcWG5t/AbZUmAwh+jxUt/QusoA0+MLOoLz5KIg=)
2: NbJCCt6mZbGhQhsVck9Ye84ql_A.roa (hash: 1GHJ4CqSoQFt3IGPoRuzPcM9vgZHBXB7ib41DM1rbg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9JUCyXSCsoUChSyX75vToKKl6fA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 07:43:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:89:5f:03:e8:88:3c:ca:af:02:f4:f6:fa:3b:78:93:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f49502c97482b28502852c97ef9bd3a0a2a5e9f0
Validity
Not Before: Mar 12 08:01:00 2025 GMT
Not After : Mar 13 08:01:00 2025 GMT
Subject: CN=5ad925a073e8530c5569452b197275fabb9bc85f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:88:7d:f1:6c:4c:0b:15:68:ce:cf:00:b4:0b:
18:e9:36:8c:28:be:e1:24:41:b1:5e:09:a0:9f:39:
e1:0c:35:0e:76:3a:b7:f1:9b:ee:53:01:0d:bb:1f:
dc:a1:02:a5:1a:c7:30:55:e2:65:c5:f9:9b:fb:aa:
06:40:75:2e:c9:3d:a8:4c:9d:52:3f:ab:af:4a:14:
25:d3:58:ac:c7:a4:2e:27:c0:5e:0e:a8:00:82:d4:
f9:92:98:0d:a5:f9:87:c9:a6:17:73:ba:09:c8:30:
13:36:93:5f:0f:f9:4f:02:29:81:d8:0d:d1:31:ac:
0b:24:da:7f:ac:ef:ec:e7:36:68:42:a4:e4:48:b4:
e2:cd:4c:71:0c:60:32:98:95:7e:d9:1d:62:d0:28:
40:c1:4a:89:d6:ab:41:77:01:0a:2e:d0:f3:4d:25:
f7:46:04:7e:c5:b6:a6:f0:59:5f:33:1f:a6:54:ba:
ac:45:ad:94:5e:2a:a7:37:38:20:50:ca:59:47:91:
d2:52:bd:e5:a0:95:f5:41:93:15:23:b3:7d:0e:5c:
f2:fd:da:a1:0f:b4:8c:74:9d:f9:82:74:fe:b3:71:
0b:29:5a:3d:70:0a:84:3a:6d:dc:9c:be:6a:2e:ee:
64:aa:64:e6:a9:16:e9:0e:d6:6f:63:e8:19:28:e8:
c1:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:D9:25:A0:73:E8:53:0C:55:69:45:2B:19:72:75:FA:BB:9B:C8:5F
X509v3 Authority Key Identifier:
keyid:F4:95:02:C9:74:82:B2:85:02:85:2C:97:EF:9B:D3:A0:A2:A5:E9:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9JUCyXSCsoUChSyX75vToKKl6fA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:ec:71:f6:4e:41:81:bc:46:c1:2f:ad:bd:1c:f3:1f:dc:f9:
99:da:1b:e1:1d:90:5d:1b:22:be:07:99:b1:02:19:b1:11:74:
17:c3:c1:e8:cc:d9:a0:5d:48:3e:a7:1c:4c:11:71:8e:ef:c0:
de:27:b5:1a:5e:2a:5a:22:ff:dc:84:d7:5f:9f:f3:b6:1f:9f:
47:b8:b5:9d:bc:2b:7e:92:fd:bb:d8:36:6a:0d:eb:0b:f2:fd:
38:be:48:ae:6d:93:38:a0:5f:41:a6:b3:70:dd:c8:83:fd:24:
15:6d:d3:de:98:b3:df:34:e2:8d:d5:a7:a2:17:06:20:f6:d1:
b0:68:35:03:a2:e3:8f:47:cf:df:40:35:8e:30:e3:cb:09:cb:
22:a7:13:27:63:45:b6:60:84:e9:7e:71:6f:4c:75:b4:eb:b5:
5c:d8:f8:51:63:cc:01:eb:5e:be:70:93:71:72:f2:3f:19:da:
50:f6:2f:da:cd:54:4e:b5:51:17:52:55:2d:c8:00:fd:32:a7:
87:ee:24:18:51:d8:8a:5c:40:05:8c:ec:c1:27:91:31:c7:da:
55:f1:e7:08:fd:6e:15:80:94:30:82:fe:81:f6:dc:17:de:09:
1b:66:4d:ce:f8:50:15:e5:29:12:b8:5c:ff:86:69:dd:5d:2b:
96:0a:4e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 12:36:21 2025 by rpki-client