Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.mft
File: 1-c9m7XQoo55j8NJzYDf0McQao08.mft (raw, json)
Hash identifier: +lXBdf5X3zD+OuDj1PnDdoIf331v7CobAG3qBrfkhN8=
Subject key identifier: C8:8C:4D:82:9C:1B:FC:51:DB:24:92:55:27:F4:FE:71:5C:74:5E:72
Authority key identifier: F9:CF:66:ED:74:28:A3:9E:63:F0:D2:73:60:37:F4:31:C4:1A:A3:4F
Certificate issuer: /CN=f9cf66ed7428a39e63f0d2736037f431c41aa34f
Certificate serial: 01963F8B504CB2B0361086F86A23AFB45B41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-c9m7XQoo55j8NJzYDf0McQao08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.mft
Manifest number: 14F3
Signing time: Wed 16 Apr 2025 17:00:16 +0000
Manifest this update: Wed 16 Apr 2025 17:00:16 +0000
Manifest next update: Thu 17 Apr 2025 17:00:16 +0000
Files and hashes: 1: 1-c9m7XQoo55j8NJzYDf0McQao08.crl (hash: TholsFKlPWENhwYkc8NENRGj0CYGDL4JnyG8kKcC3QE=)
2: rbOZFLBJLeiBgSg-ywSTHEPc89w.roa (hash: Wz1ZKiJOk56RIdFfsa2AALc0JqTjfQEXp/iXAbjA7+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-c9m7XQoo55j8NJzYDf0McQao08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 17:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:8b:50:4c:b2:b0:36:10:86:f8:6a:23:af:b4:5b:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9cf66ed7428a39e63f0d2736037f431c41aa34f
Validity
Not Before: Apr 16 17:00:16 2025 GMT
Not After : Apr 17 17:00:16 2025 GMT
Subject: CN=c88c4d829c1bfc51db24925527f4fe715c745e72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:39:58:15:62:99:5d:f4:63:80:12:89:c1:ac:
ec:da:1d:46:cb:6c:0c:94:fc:66:cd:bc:a6:e4:72:
01:b0:30:9a:34:91:32:d3:75:a2:da:cd:5c:a7:33:
e6:ba:84:80:96:80:1b:e2:ca:dc:a7:a8:83:9a:30:
b4:14:ba:3a:8d:02:5b:8a:88:ae:86:52:98:b0:12:
9f:f5:5c:78:2c:0d:0a:cc:f3:8b:49:5c:3d:f5:97:
ad:89:9e:01:69:85:ad:64:11:36:50:87:93:6b:08:
9b:00:9b:19:fa:57:ff:e7:69:ed:d5:7a:3d:4f:a3:
3f:2d:f4:50:e5:8c:47:94:bd:08:64:40:e6:5b:63:
1d:c1:82:b7:12:91:2c:de:88:d1:40:aa:2d:fe:4b:
22:ce:99:38:a4:7e:b6:cd:2e:bd:7a:c0:7d:c6:d8:
b3:fb:7c:7b:2c:5f:64:bf:af:7a:87:7f:8b:1b:cc:
a2:17:ec:21:77:89:ae:41:5a:d6:46:6e:09:da:04:
1e:d9:a1:1c:b7:c8:3a:a7:db:df:22:36:6c:de:39:
2d:03:2c:fe:c5:07:a3:70:0c:16:97:67:da:86:4d:
e1:ac:ae:e1:a1:91:5c:9c:79:59:61:29:56:50:ae:
19:fc:d1:05:13:2c:83:46:2d:69:57:fc:59:9d:ec:
b9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:8C:4D:82:9C:1B:FC:51:DB:24:92:55:27:F4:FE:71:5C:74:5E:72
X509v3 Authority Key Identifier:
keyid:F9:CF:66:ED:74:28:A3:9E:63:F0:D2:73:60:37:F4:31:C4:1A:A3:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-c9m7XQoo55j8NJzYDf0McQao08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:e8:22:a3:35:fd:fe:c3:22:e8:98:0f:64:70:c1:70:ac:14:
d0:58:20:14:df:09:2f:70:6d:ad:06:bb:44:0c:df:d3:24:ff:
4f:01:9b:6f:9b:16:62:fe:32:f5:27:1d:fc:23:3b:58:39:f2:
46:e8:a4:10:4c:38:14:0b:55:58:d4:72:14:b9:fb:59:bb:0c:
e9:33:70:f0:6e:52:67:5f:15:d6:91:ea:c8:bc:1b:99:0d:3d:
67:fe:ba:f4:9e:08:8b:a1:e4:78:08:e0:71:27:0d:92:fe:00:
aa:e3:ca:32:43:7c:e9:89:7c:32:00:83:0d:fb:39:7d:14:56:
19:f0:6a:fc:61:40:a7:6b:48:ef:25:7e:ba:fa:fc:c7:4a:ad:
47:ca:22:5e:b1:ea:50:81:75:dd:a5:cf:85:d9:6e:8f:8d:24:
46:37:ca:50:5a:02:88:d3:9e:cc:ae:82:18:78:a1:4a:f0:8d:
ee:8d:44:43:c2:63:42:ce:df:b1:66:57:e5:6e:5c:cd:14:46:
2b:6b:0a:1b:b7:45:9e:3b:86:3e:ec:9f:26:fb:de:0d:61:63:
c4:58:ff:af:a9:2e:ad:0c:a8:11:81:05:52:4a:47:0c:7c:ca:
05:20:29:86:d0:02:ce:63:49:ed:3d:b3:61:1c:a2:9e:e8:d4:
0f:ea:89:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:38:45 2025 by rpki-client