Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/74fbee-6ee0-4f5a-95ce-ed2dfda7df6a/1/9bJzfl2X4RCOsEmQTemxbzauseA.mft
File: 9bJzfl2X4RCOsEmQTemxbzauseA.mft (raw, json)
Hash identifier: jd9UlIJXAqrLfnP2VlscLSn6JP0+w97IXbFXnX2GPXo=
Subject key identifier: 5D:92:E2:41:38:38:29:96:C9:19:13:7F:1E:E5:0C:13:86:35:0A:AA
Authority key identifier: F5:B2:73:7E:5D:97:E1:10:8E:B0:49:90:4D:E9:B1:6F:36:AE:B1:E0
Certificate issuer: /CN=f5b2737e5d97e1108eb049904de9b16f36aeb1e0
Certificate serial: 0196515BDA8CC7332B7FB08DA72B7D46B639
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9bJzfl2X4RCOsEmQTemxbzauseA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/74fbee-6ee0-4f5a-95ce-ed2dfda7df6a/1/9bJzfl2X4RCOsEmQTemxbzauseA.mft
Manifest number: 14FA
Signing time: Sun 20 Apr 2025 04:01:36 +0000
Manifest this update: Sun 20 Apr 2025 04:01:36 +0000
Manifest next update: Mon 21 Apr 2025 04:01:36 +0000
Files and hashes: 1: 9bJzfl2X4RCOsEmQTemxbzauseA.crl (hash: acE5miupNEq/mKRm5k5ofxWVkOgT6JTFot0J/pJRKNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/74fbee-6ee0-4f5a-95ce-ed2dfda7df6a/1/9bJzfl2X4RCOsEmQTemxbzauseA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/74fbee-6ee0-4f5a-95ce-ed2dfda7df6a/1/9bJzfl2X4RCOsEmQTemxbzauseA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9bJzfl2X4RCOsEmQTemxbzauseA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 04:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:5b:da:8c:c7:33:2b:7f:b0:8d:a7:2b:7d:46:b6:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5b2737e5d97e1108eb049904de9b16f36aeb1e0
Validity
Not Before: Apr 20 04:01:36 2025 GMT
Not After : Apr 21 04:01:36 2025 GMT
Subject: CN=5d92e24138382996c919137f1ee50c1386350aaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2f:02:85:8a:31:5e:f6:2f:a8:5f:e5:dc:c9:
52:9e:39:f5:eb:f6:3e:9c:92:49:8c:31:ec:f2:a5:
01:d4:06:5d:64:e7:92:36:b0:3a:e5:74:2f:7f:9d:
51:af:e9:e1:09:26:98:4e:e1:61:af:b4:28:45:01:
83:bf:c3:7d:e8:45:cf:6d:2a:96:34:34:fa:46:11:
e4:8e:0f:c2:17:b9:56:93:86:7e:dc:e3:d2:f1:67:
6d:02:b8:72:ba:2b:ce:ae:b2:87:e3:27:9f:e1:cd:
14:8f:09:70:a6:70:50:13:8a:a3:f9:d7:da:17:3b:
8a:24:b0:91:a8:88:58:76:64:f5:96:b8:33:91:2c:
31:0a:22:85:32:d2:57:44:8b:57:38:38:17:0c:c6:
dc:b1:6d:85:85:03:cd:24:44:1b:8a:10:7f:cb:d8:
59:05:d6:c8:4a:4d:5e:f4:58:53:53:fd:12:9a:a7:
dc:f8:ee:07:d0:95:06:8e:44:4b:bb:55:1f:87:c3:
66:20:1b:a0:41:21:7c:e3:d7:50:4e:d4:47:57:ee:
9b:b5:84:fa:73:9a:34:5a:2a:c3:69:0b:1e:a0:18:
2f:b5:f6:00:ba:dc:59:5b:36:5c:7d:ec:36:0e:1b:
fc:82:38:d0:92:7d:d2:3f:b3:e4:ce:58:c5:7f:5e:
61:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:92:E2:41:38:38:29:96:C9:19:13:7F:1E:E5:0C:13:86:35:0A:AA
X509v3 Authority Key Identifier:
keyid:F5:B2:73:7E:5D:97:E1:10:8E:B0:49:90:4D:E9:B1:6F:36:AE:B1:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9bJzfl2X4RCOsEmQTemxbzauseA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/74fbee-6ee0-4f5a-95ce-ed2dfda7df6a/1/9bJzfl2X4RCOsEmQTemxbzauseA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/74fbee-6ee0-4f5a-95ce-ed2dfda7df6a/1/9bJzfl2X4RCOsEmQTemxbzauseA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:01:37:de:fc:c3:52:a6:f1:f5:71:18:48:bd:83:bc:0b:14:
68:52:c4:8c:d5:9a:62:78:e1:ed:95:5d:7f:73:8a:76:ce:20:
36:b4:55:59:13:76:f6:69:e8:b9:88:ce:e7:ab:4b:cd:e0:e0:
f1:be:6a:15:86:57:14:15:78:dd:1c:a4:9c:85:33:df:ad:bb:
ce:25:7b:c2:d9:5c:f2:0d:ee:d7:aa:87:f1:29:e7:9d:f8:08:
dd:4a:f8:17:4e:c2:a0:a6:91:66:cd:46:ec:16:2f:82:fd:cb:
b0:2e:1f:03:d6:e6:a2:a2:4d:85:b2:a7:dd:37:e8:e8:2b:6e:
22:a9:0c:b9:a6:79:9d:a1:55:0d:1c:72:f1:c1:b6:0c:1a:e9:
00:3c:d1:1d:3e:f1:1e:11:bc:4e:88:51:c1:0a:86:95:cf:2a:
28:64:19:19:5e:7e:1a:d7:e6:35:f2:7a:55:f7:05:ca:53:c7:
ba:bb:cd:7c:87:8f:3a:74:b6:4d:e1:16:f0:f2:35:c2:aa:1f:
21:3a:7b:e7:99:b0:6c:4c:78:4a:7a:22:7f:cf:41:e9:c8:57:
0c:7a:3d:4f:c3:58:b6:e5:91:f5:60:a1:48:c9:57:6f:c0:a5:
99:9c:94:ba:6f:dc:7a:26:f0:4f:04:b7:74:ed:2a:b5:d6:7e:
81:0a:1a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 14:52:10 2025 by rpki-client