Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/917bd6-8bd3-4c28-825f-1475d22dc162/1/9rLInTH2F1Fqhgp4IrumgkinaaA.mft
File: 9rLInTH2F1Fqhgp4IrumgkinaaA.mft (raw, json)
Hash identifier: JGAlrSIyZVYcKmo9+6Sw8h3BbK1KZbnMtEbkEi2EyQc=
Subject key identifier: 7E:5D:52:A0:79:ED:BB:AD:55:76:2F:51:EE:5C:6B:68:67:F5:80:92
Authority key identifier: F6:B2:C8:9D:31:F6:17:51:6A:86:0A:78:22:BB:A6:82:48:A7:69:A0
Certificate issuer: /CN=f6b2c89d31f617516a860a7822bba68248a769a0
Certificate serial: 0196553761363794DB3CED370EF90C3901DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9rLInTH2F1Fqhgp4IrumgkinaaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/917bd6-8bd3-4c28-825f-1475d22dc162/1/9rLInTH2F1Fqhgp4IrumgkinaaA.mft
Manifest number: 06EC
Signing time: Sun 20 Apr 2025 22:00:14 +0000
Manifest this update: Sun 20 Apr 2025 22:00:14 +0000
Manifest next update: Mon 21 Apr 2025 22:00:14 +0000
Files and hashes: 1: 0iYjHA4kyW6qTATWGW_TDJUOsEk.roa (hash: EaJ38giyluinl93rwFdYFKbOjiJmuj1tUHU09V9bmYM=)
2: 9rLInTH2F1Fqhgp4IrumgkinaaA.crl (hash: n9L9tyLIbE12j9n83N83GakFauChaMHz7+c/E2CaizM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/917bd6-8bd3-4c28-825f-1475d22dc162/1/9rLInTH2F1Fqhgp4IrumgkinaaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/917bd6-8bd3-4c28-825f-1475d22dc162/1/9rLInTH2F1Fqhgp4IrumgkinaaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9rLInTH2F1Fqhgp4IrumgkinaaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:37:61:36:37:94:db:3c:ed:37:0e:f9:0c:39:01:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6b2c89d31f617516a860a7822bba68248a769a0
Validity
Not Before: Apr 20 22:00:14 2025 GMT
Not After : Apr 21 22:00:14 2025 GMT
Subject: CN=7e5d52a079edbbad55762f51ee5c6b6867f58092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e6:68:16:5e:64:14:e2:a7:60:97:d7:e3:c8:
9f:b6:7f:7b:4a:3d:7a:17:75:bd:4e:61:c4:a6:93:
28:50:19:f9:f9:65:74:27:28:fc:2d:81:da:5f:3b:
ae:08:59:aa:8e:45:98:98:d9:2e:dd:bc:13:d6:42:
aa:6e:bc:af:77:de:8d:c8:64:ea:c5:6a:c5:a0:52:
39:13:13:33:c0:7d:86:c6:08:29:76:1d:9a:e4:66:
57:83:a9:af:4a:2b:4e:fe:10:3b:dd:d6:12:0b:d8:
c8:3e:cf:00:a7:6b:c1:dc:47:71:34:d7:cd:10:07:
81:4f:bc:d4:de:b9:33:d3:1f:73:5a:88:dc:a8:02:
88:c5:21:43:dc:d2:32:4b:04:31:1a:e5:33:dd:23:
3c:82:6e:b7:2f:cb:ff:fc:46:f7:45:6b:e6:78:2d:
e3:11:17:c3:31:a7:06:65:70:36:67:58:f4:58:01:
64:35:6c:61:5a:ec:e5:b0:80:25:f6:51:3a:38:11:
71:d4:6f:4c:84:8a:ff:4f:50:07:2e:15:81:a7:a9:
6b:e4:35:72:17:48:9f:cd:62:dc:81:ee:b8:37:2f:
5f:8b:c4:c9:6c:d0:6e:26:57:70:5b:f5:82:ba:22:
0d:00:87:22:86:21:0a:88:33:3f:86:28:38:ef:29:
46:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:5D:52:A0:79:ED:BB:AD:55:76:2F:51:EE:5C:6B:68:67:F5:80:92
X509v3 Authority Key Identifier:
keyid:F6:B2:C8:9D:31:F6:17:51:6A:86:0A:78:22:BB:A6:82:48:A7:69:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rLInTH2F1Fqhgp4IrumgkinaaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/917bd6-8bd3-4c28-825f-1475d22dc162/1/9rLInTH2F1Fqhgp4IrumgkinaaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/917bd6-8bd3-4c28-825f-1475d22dc162/1/9rLInTH2F1Fqhgp4IrumgkinaaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:4f:08:b3:f2:98:cf:ff:11:83:79:a0:3b:31:7e:ba:34:7b:
25:40:bf:6b:44:26:73:2c:c8:9a:c2:49:af:21:a4:aa:18:3d:
07:b3:44:e9:55:ad:99:c1:a4:eb:0c:97:ec:db:0f:69:18:31:
70:6e:f2:bb:d4:5b:f8:d0:19:84:29:d6:dd:02:8d:3c:15:63:
c4:ae:fa:26:90:dc:8f:eb:bf:23:b8:bc:4c:32:94:82:9f:bb:
26:d7:91:3a:22:7f:06:2b:df:47:c7:54:b5:01:ee:ad:96:56:
bf:62:92:70:65:31:99:51:af:04:c7:01:0d:1d:94:91:d1:c5:
5b:b6:5d:1d:76:af:66:48:13:7b:2c:24:a6:e3:83:12:6b:f2:
74:33:0f:fd:3a:0d:c1:a6:33:f9:dc:b1:c2:ad:90:32:a2:1e:
c9:3d:60:7f:24:7f:51:5f:3b:ee:f0:62:12:83:24:7b:dd:4a:
3f:85:f6:e2:5a:f2:f3:27:a7:21:2c:9b:be:5b:88:c6:95:24:
76:00:25:13:46:9d:6f:6a:e6:aa:3f:3f:40:56:61:60:a4:76:
45:27:ca:86:53:fa:e2:6f:86:c8:a7:63:19:33:1c:b0:4b:ab:
c1:83:aa:9d:25:77:13:0b:d3:af:f7:c0:b4:06:1b:80:e1:99:
72:17:24:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:06:02 2025 by rpki-client