Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.mft
File: 9tsbaRsw2-SOeIt8ykrTHc3IXHY.mft (raw, json)
Hash identifier: KZEGeXBd8n+ul6E8FbGjqMwRvNcNKB3FUSA2JBuSxt0=
Subject key identifier: F9:1D:09:7D:AE:9A:3A:1C:98:CB:F7:F4:1E:10:CD:72:C2:26:B8:A9
Authority key identifier: F6:DB:1B:69:1B:30:DB:E4:8E:78:8B:7C:CA:4A:D3:1D:CD:C8:5C:76
Certificate issuer: /CN=f6db1b691b30dbe48e788b7cca4ad31dcdc85c76
Certificate serial: 01964444070EF49D480E9003AAFE946F9282
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9tsbaRsw2-SOeIt8ykrTHc3IXHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.mft
Manifest number: 14F1
Signing time: Thu 17 Apr 2025 15:00:30 +0000
Manifest this update: Thu 17 Apr 2025 15:00:30 +0000
Manifest next update: Fri 18 Apr 2025 15:00:30 +0000
Files and hashes: 1: 9tsbaRsw2-SOeIt8ykrTHc3IXHY.crl (hash: 0aMR0Jwng84PXjXE9N3SwJdgspgTS5ggjama8WRJPuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9tsbaRsw2-SOeIt8ykrTHc3IXHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 15:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:44:07:0e:f4:9d:48:0e:90:03:aa:fe:94:6f:92:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6db1b691b30dbe48e788b7cca4ad31dcdc85c76
Validity
Not Before: Apr 17 15:00:30 2025 GMT
Not After : Apr 18 15:00:30 2025 GMT
Subject: CN=f91d097dae9a3a1c98cbf7f41e10cd72c226b8a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:d4:34:b0:3a:a9:2a:ed:d6:31:43:9c:c6:17:
96:c8:a8:8b:83:aa:80:fc:e7:d6:44:2d:50:b1:87:
6a:09:91:74:6a:86:8a:1a:ab:c5:87:d4:45:cb:34:
66:de:f9:1e:b9:ff:b7:80:2d:df:a9:18:b6:7a:0c:
e2:a2:41:33:12:bb:5e:9d:01:a7:5b:15:38:f8:cb:
d0:60:34:06:36:cd:99:5f:ae:9c:0b:ff:51:d1:b7:
0f:4b:c0:30:d5:42:f5:5c:0c:4b:ed:f5:b7:07:b2:
2b:f0:7b:39:c3:0e:65:22:3b:5c:b5:06:0e:87:d8:
48:db:cf:9f:37:d3:90:40:51:da:51:7c:32:0c:71:
f7:d3:db:c8:25:53:23:b3:d8:03:6e:7b:5b:b5:5a:
45:80:98:84:6e:de:16:39:88:62:09:36:13:6e:35:
1c:7e:d1:46:51:ae:bf:1c:5c:4a:c8:70:a5:91:e6:
19:22:ab:34:4c:09:73:1f:68:a4:6b:5e:4b:04:e2:
c4:a6:11:6a:10:78:53:6d:0b:1d:bb:9e:dc:e3:ff:
dc:df:f8:a4:9a:05:5f:4d:4e:b6:ec:40:ab:e2:e7:
ef:e2:fc:9f:b2:17:2a:7c:1a:d7:57:2f:3f:4b:e8:
a6:d6:3c:e4:46:3c:81:97:3d:ac:92:aa:f9:2c:ad:
c7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:1D:09:7D:AE:9A:3A:1C:98:CB:F7:F4:1E:10:CD:72:C2:26:B8:A9
X509v3 Authority Key Identifier:
keyid:F6:DB:1B:69:1B:30:DB:E4:8E:78:8B:7C:CA:4A:D3:1D:CD:C8:5C:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9tsbaRsw2-SOeIt8ykrTHc3IXHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:36:8f:b2:7a:80:74:b9:91:51:68:36:20:89:2e:5d:6f:3c:
2f:fa:ea:8e:e1:39:29:ef:10:b5:de:41:88:9c:01:14:4a:83:
c3:20:89:24:81:91:53:b4:91:2b:08:4f:3d:ce:2e:8c:ba:45:
da:a2:3b:31:35:a6:8c:7e:98:c1:d1:89:1e:12:4b:39:b7:15:
f4:db:d8:b1:23:ec:c1:6a:f9:ce:08:a5:22:60:9b:b8:06:b6:
db:35:19:72:44:8b:9b:0b:30:8e:7d:f5:30:e0:24:84:0a:14:
52:8e:d8:3a:6d:77:21:bf:3b:76:4d:70:f7:57:03:ee:56:08:
b0:cf:58:0f:44:ee:bc:b7:49:69:a8:c1:ff:ed:a4:23:6f:d3:
f7:12:93:6e:65:1c:5f:3f:2d:a6:7d:a5:cd:43:56:ce:b7:2d:
1b:bf:c2:16:7d:dd:fd:37:54:00:91:15:18:dd:e0:ab:d9:53:
71:74:22:2f:44:5e:79:c5:fe:57:84:5b:64:ba:9d:8f:b7:c1:
f8:06:e5:37:64:73:75:4b:62:a9:ef:aa:19:58:39:da:9a:46:
e2:12:ba:a5:1c:92:5b:b1:8a:81:78:dd:e6:13:07:d7:49:f6:
f7:bf:13:e6:bc:93:80:36:8a:75:2e:87:b3:dd:ec:3c:da:e4:
f8:a6:2f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:22:30 2025 by rpki-client