Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.mft
File: 9f3nK_WgC97E0e_dfQICnueeRyA.mft (raw, json)
Hash identifier: uBnnHzAgpk1i+pQwefABRI9VFbb6oU97Y/tXmvrpBJE=
Subject key identifier: 41:B8:EA:D2:7F:C3:3D:CF:12:EE:AE:71:25:3D:B5:7F:DA:E8:38:4E
Authority key identifier: F5:FD:E7:2B:F5:A0:0B:DE:C4:D1:EF:DD:7D:02:02:9E:E7:9E:47:20
Certificate issuer: /CN=f5fde72bf5a00bdec4d1efdd7d02029ee79e4720
Certificate serial: 01958C60D768B2FD4A8CFCE610787637A00C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9f3nK_WgC97E0e_dfQICnueeRyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.mft
Manifest number: 0860
Signing time: Wed 12 Mar 2025 22:01:51 +0000
Manifest this update: Wed 12 Mar 2025 22:01:51 +0000
Manifest next update: Thu 13 Mar 2025 22:01:51 +0000
Files and hashes: 1: 9f3nK_WgC97E0e_dfQICnueeRyA.crl (hash: ZNETiIrLOXktQa+42zbpGTEBWof9fFlymRkPm7UbM30=)
2: VwdOphY_UgRaqYf3Kg3b6kzwRf0.roa (hash: RncMvUV6R6LkD/qjU1iWGPE4PHApbhUX2ZP/1640Hn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9f3nK_WgC97E0e_dfQICnueeRyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:60:d7:68:b2:fd:4a:8c:fc:e6:10:78:76:37:a0:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5fde72bf5a00bdec4d1efdd7d02029ee79e4720
Validity
Not Before: Mar 12 22:01:51 2025 GMT
Not After : Mar 13 22:01:51 2025 GMT
Subject: CN=41b8ead27fc33dcf12eeae71253db57fdae8384e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:64:20:43:b8:85:5a:f9:6e:79:86:ba:5d:f9:
77:d2:00:60:3b:9e:88:b7:2e:4d:4e:41:92:2f:3e:
84:91:75:16:94:2c:19:25:a2:e1:c2:5b:94:92:81:
f1:39:1c:c2:57:f7:04:0f:93:52:e0:d7:b5:4b:4d:
df:b3:c0:df:0c:29:f7:91:c6:16:ed:6c:76:e3:b5:
1e:d7:2f:97:06:7f:fc:27:0e:a2:cd:61:d7:1a:5a:
c0:18:5f:23:a4:a3:3b:a9:93:a8:a0:64:c1:f4:66:
ee:4c:a3:f7:90:f1:68:41:3e:d9:20:db:3c:74:a2:
7b:68:2c:a4:59:d8:01:05:58:b1:b2:aa:6b:eb:8d:
df:16:19:7e:be:26:66:35:15:03:2b:41:78:aa:05:
db:7e:a5:53:ca:a2:4c:e1:91:f1:dd:5c:49:e1:c9:
58:e0:8e:fa:12:66:a2:1d:ed:6f:09:5b:17:6c:c9:
ae:ac:6c:6b:ba:af:f4:07:81:06:3e:ef:bf:9e:9c:
79:3d:03:84:53:c8:8d:21:c2:b8:84:e1:15:4e:55:
1d:cb:b3:68:07:11:93:29:fb:9b:c6:d5:01:c3:80:
6c:26:dc:1e:14:a2:a8:e0:9c:41:7c:ff:89:2e:8f:
f1:16:f9:5e:c3:1a:1d:5c:87:4c:fb:b2:81:15:49:
df:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:B8:EA:D2:7F:C3:3D:CF:12:EE:AE:71:25:3D:B5:7F:DA:E8:38:4E
X509v3 Authority Key Identifier:
keyid:F5:FD:E7:2B:F5:A0:0B:DE:C4:D1:EF:DD:7D:02:02:9E:E7:9E:47:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f3nK_WgC97E0e_dfQICnueeRyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:b4:c7:91:5e:b7:79:0a:72:4f:d0:12:99:28:64:14:b6:93:
37:38:d4:6c:2c:83:f3:4c:9a:13:b9:59:85:42:13:f3:71:d3:
b6:9a:5c:8a:8a:51:d6:66:63:9f:e0:b4:72:1b:3c:b4:07:42:
9b:7c:b0:23:7c:15:2a:6f:15:ff:78:45:93:53:1e:59:29:48:
18:0d:5c:bd:c2:d1:82:6d:b0:2c:14:8f:1b:f5:44:34:d3:3c:
f9:93:f6:13:03:3e:8e:79:ff:2c:86:9a:bb:6e:56:68:ec:40:
2b:61:8a:f3:91:7a:2a:6b:77:1d:d6:5a:1c:97:07:c3:04:ea:
5d:b4:28:17:aa:a3:6c:7b:02:6a:9f:cb:15:22:ed:79:d2:58:
54:79:0a:45:b9:a2:df:a9:9b:db:b1:13:67:16:b4:b0:d0:5f:
20:ac:1c:bb:f0:03:91:a0:87:ea:3a:a1:17:5f:eb:17:f8:1f:
a9:5f:c4:32:1f:ef:ec:76:ed:80:9a:7f:0e:6f:ec:44:20:81:
e6:d5:48:5b:71:78:ea:e7:c3:dc:a8:99:73:79:5a:d5:d6:37:
e4:9a:83:f8:cf:3f:b9:bc:f6:7d:97:45:47:83:d5:85:f2:6e:
2d:66:75:66:c8:d9:ce:ee:02:77:34:17:14:d2:60:cd:18:62:
5c:fa:eb:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:29:45 2025 by rpki-client