Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.mft
File: 9X3FmWyBeMDeLqIEme696t5AI-s.mft (raw, json)
Hash identifier: O5KXAROjlMrvJw3YlMXuRdZcZPX26QBJ+i9bsdIsaqQ=
Subject key identifier: 9F:D7:67:25:C4:9F:44:53:0B:EA:D1:E2:91:37:EF:DE:5C:32:53:B8
Authority key identifier: F5:7D:C5:99:6C:81:78:C0:DE:2E:A2:04:99:EE:BD:EA:DE:40:23:EB
Certificate issuer: /CN=f57dc5996c8178c0de2ea20499eebdeade4023eb
Certificate serial: 019650ED5BF7192E2587E6355FC70BFF89BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9X3FmWyBeMDeLqIEme696t5AI-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.mft
Manifest number: 14FC
Signing time: Sun 20 Apr 2025 02:00:54 +0000
Manifest this update: Sun 20 Apr 2025 02:00:54 +0000
Manifest next update: Mon 21 Apr 2025 02:00:54 +0000
Files and hashes: 1: 9X3FmWyBeMDeLqIEme696t5AI-s.crl (hash: Ur8NNm5eGnRwS2Pz91RlZCTAr6LxKXTVn2+mpYZUryE=)
2: Ja-1OHflBPV5uzkrzsrUkckcSDQ.roa (hash: 5hTfi5zIdy0pksBzayRUkBZiz92X7DgH1Hnbmun+ujM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/9X3FmWyBeMDeLqIEme696t5AI-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:ed:5b:f7:19:2e:25:87:e6:35:5f:c7:0b:ff:89:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57dc5996c8178c0de2ea20499eebdeade4023eb
Validity
Not Before: Apr 20 02:00:54 2025 GMT
Not After : Apr 21 02:00:54 2025 GMT
Subject: CN=9fd76725c49f44530bead1e29137efde5c3253b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6e:41:fc:51:3d:93:bb:51:c4:ac:68:20:1a:
3d:55:3c:e7:bb:3f:77:66:7a:25:72:8c:a3:f4:6a:
3b:3d:26:89:ce:60:8d:e0:3e:c3:3b:c9:e4:f3:cb:
22:b5:5d:dc:da:25:9b:0f:f9:d9:7e:d6:a0:c2:e8:
ac:34:28:16:62:c3:7a:9d:d3:7b:47:34:01:0a:15:
65:22:52:77:12:8c:b7:4d:84:aa:1a:dc:3e:c1:e5:
cd:c3:26:27:36:46:04:b1:af:cf:2f:3c:eb:89:91:
63:ee:f8:c4:0e:06:3e:1c:7e:b3:bc:9a:5e:1b:ac:
64:f5:38:86:77:5f:9e:af:7f:2a:cb:68:99:71:0b:
01:a6:a4:ae:45:1d:bb:9f:6f:51:f5:cf:b7:b6:8f:
bc:7d:eb:55:39:3a:16:74:78:33:f0:ad:ae:fc:8f:
00:0c:34:9d:29:28:83:b1:59:c9:f4:a6:e7:1d:73:
7e:48:29:2d:e2:d4:88:e6:bd:02:1e:cd:7e:ff:e8:
ae:30:ec:99:70:53:95:aa:f5:48:ed:60:8b:74:d7:
61:bf:88:4e:3d:93:b7:c0:eb:ba:3c:0c:ce:cf:0a:
00:92:bc:8b:62:23:be:17:73:27:a8:b6:6d:cd:79:
d7:57:4e:67:0b:53:fe:b4:6e:f2:68:a3:4b:e9:11:
9c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:D7:67:25:C4:9F:44:53:0B:EA:D1:E2:91:37:EF:DE:5C:32:53:B8
X509v3 Authority Key Identifier:
keyid:F5:7D:C5:99:6C:81:78:C0:DE:2E:A2:04:99:EE:BD:EA:DE:40:23:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9X3FmWyBeMDeLqIEme696t5AI-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:cb:81:90:84:95:23:a6:90:c5:bd:83:2d:33:ee:c6:a6:f3:
e4:10:ac:20:50:01:88:1b:c2:3e:d7:8d:71:8f:4d:ed:bd:66:
d2:3e:c6:04:c2:44:b5:ff:e9:13:21:86:a1:87:e1:28:6b:ff:
2c:0f:dc:2c:45:bc:e5:7e:c5:da:1e:c5:9c:71:94:8f:df:13:
b8:ca:a9:a7:e3:df:fc:e3:24:2d:78:38:8f:bb:1a:5f:18:a8:
53:b5:a2:e1:e5:3e:0e:37:78:c0:3f:92:c5:c6:24:13:3c:41:
09:0e:87:68:a0:6b:20:1c:6d:6e:f5:73:f1:6d:ed:fa:f7:b3:
e8:58:71:af:58:47:59:54:ce:a6:66:d8:32:c5:69:50:5f:39:
cc:50:57:52:ed:81:4d:4b:75:f7:a4:62:ef:93:dc:6a:32:a3:
2d:86:5e:60:12:40:67:f5:96:9d:03:46:50:a4:23:02:eb:aa:
2d:10:4f:29:2c:5d:01:96:02:b4:ec:b2:a6:8e:85:6d:b7:3d:
fa:8e:1a:1e:3a:97:9d:73:d4:3e:71:3f:91:78:63:12:0c:1e:
16:80:5c:92:25:a2:4d:ac:a9:6d:78:1a:60:47:41:1f:11:44:
3f:ed:d3:0e:4c:99:ad:80:8f:26:59:a7:e1:f2:9d:c1:7c:fc:
a5:1c:d2:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:22:46 2025 by rpki-client