Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/af601e-c2bf-4a6a-aa32-d2ee15399d06/1/INS9SZ9YSUrA6CJjtVIKLGTWR34.mft
File: INS9SZ9YSUrA6CJjtVIKLGTWR34.mft (raw, json)
Hash identifier: j+T+H0vOQQGJ+LUwf/PTVRu81b1bUgdScWQCxJ/TFos=
Subject key identifier: F9:A3:EB:95:6E:89:72:0A:35:F3:22:03:3B:47:87:5D:6F:19:57:8F
Authority key identifier: 20:D4:BD:49:9F:58:49:4A:C0:E8:22:63:B5:52:0A:2C:64:D6:47:7E
Certificate issuer: /CN=20d4bd499f58494ac0e82263b5520a2c64d6477e
Certificate serial: 01964A0F83E5E671143737940A088B30BE2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/INS9SZ9YSUrA6CJjtVIKLGTWR34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/af601e-c2bf-4a6a-aa32-d2ee15399d06/1/INS9SZ9YSUrA6CJjtVIKLGTWR34.mft
Manifest number: 148A
Signing time: Fri 18 Apr 2025 18:00:52 +0000
Manifest this update: Fri 18 Apr 2025 18:00:52 +0000
Manifest next update: Sat 19 Apr 2025 18:00:52 +0000
Files and hashes: 1: INS9SZ9YSUrA6CJjtVIKLGTWR34.crl (hash: UAAGR+vOjnXJdbjN/MM9HDHFT3pKZYl902NM70OXlsk=)
2: h_lcjhsZRd-WoNkwUeJTA-cn-HU.roa (hash: MoTuYke9XnON66W6lzgS1xcgPTaCQPNgcBaF3y/k338=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/af601e-c2bf-4a6a-aa32-d2ee15399d06/1/INS9SZ9YSUrA6CJjtVIKLGTWR34.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/af601e-c2bf-4a6a-aa32-d2ee15399d06/1/INS9SZ9YSUrA6CJjtVIKLGTWR34.mft
rsync://rpki.ripe.net/repository/DEFAULT/INS9SZ9YSUrA6CJjtVIKLGTWR34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 14:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:0f:83:e5:e6:71:14:37:37:94:0a:08:8b:30:be:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20d4bd499f58494ac0e82263b5520a2c64d6477e
Validity
Not Before: Apr 18 18:00:52 2025 GMT
Not After : Apr 19 18:00:52 2025 GMT
Subject: CN=f9a3eb956e89720a35f322033b47875d6f19578f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:14:b3:7e:1e:85:a7:ee:ed:24:07:57:8b:e2:
6a:95:6e:9e:3e:68:44:fb:07:73:b5:89:27:fb:3a:
c1:70:e2:a4:a6:07:02:6a:d1:1b:bd:7f:50:47:06:
80:7e:ff:f4:a9:16:f4:af:50:74:ea:bc:bd:5b:68:
db:55:ec:1a:de:66:bb:65:23:5b:d7:e9:6d:61:f7:
e9:64:29:0f:fe:ce:38:b7:94:a4:d2:10:45:5c:25:
92:6b:6f:5a:ef:4c:76:36:6c:c2:0f:a3:b3:88:dd:
1b:c2:f4:51:7a:36:2d:45:45:84:69:6d:8d:b8:db:
d5:24:78:fc:88:fd:58:97:8a:2e:4c:04:d5:30:00:
63:9d:c6:38:94:b7:96:47:c8:2c:db:45:56:a0:ee:
96:71:07:92:e6:7c:20:af:30:fa:c0:ad:87:bf:4a:
14:15:e3:81:b8:e5:b3:aa:aa:04:ef:20:3b:94:6b:
3a:48:84:66:c3:5c:28:e9:0e:41:10:2a:a3:97:c7:
ca:c3:91:4d:ad:2e:d2:67:1a:05:ae:b1:17:fc:79:
68:7a:2e:35:5d:27:bd:86:26:0c:50:b7:04:87:bb:
29:81:9c:15:d5:5b:78:6a:a4:ba:63:58:e2:ce:2e:
c6:92:e9:2d:92:92:28:fd:75:29:0c:b9:cf:9e:70:
39:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:A3:EB:95:6E:89:72:0A:35:F3:22:03:3B:47:87:5D:6F:19:57:8F
X509v3 Authority Key Identifier:
keyid:20:D4:BD:49:9F:58:49:4A:C0:E8:22:63:B5:52:0A:2C:64:D6:47:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INS9SZ9YSUrA6CJjtVIKLGTWR34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/af601e-c2bf-4a6a-aa32-d2ee15399d06/1/INS9SZ9YSUrA6CJjtVIKLGTWR34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/af601e-c2bf-4a6a-aa32-d2ee15399d06/1/INS9SZ9YSUrA6CJjtVIKLGTWR34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:b2:b3:80:06:61:2e:08:51:8a:53:24:28:c7:a2:e8:af:df:
2e:eb:55:6c:fe:d4:0d:0f:93:b6:32:1d:cf:1f:4e:15:5c:ca:
9f:16:a3:c0:c4:b6:52:77:5b:24:18:5f:7f:ed:6c:e3:af:ea:
8b:33:18:e8:ff:84:fa:41:bb:cd:80:de:ee:bf:d3:58:d1:d2:
eb:75:90:0c:00:9e:65:a6:f0:ca:8d:a9:6e:3b:13:02:4e:e3:
c4:7f:40:03:16:e1:94:a8:44:d2:24:df:69:30:7f:4f:d5:e7:
c0:a5:ce:0c:64:e0:65:9f:2f:36:8d:f6:a0:1b:a9:6e:e5:67:
a3:42:a1:b3:1e:fa:ee:f4:16:92:c7:8e:88:e3:57:24:7c:83:
fd:0a:9d:a8:78:a4:18:61:ac:0d:7f:f7:6f:55:32:ea:b9:8c:
94:27:d8:49:50:25:f0:54:4f:00:85:b4:b7:cf:aa:7d:a2:c8:
4a:ee:91:af:a6:16:cc:7f:c6:cc:70:02:11:66:6b:d7:bc:20:
c1:02:8d:10:08:68:62:8d:bb:30:18:30:7b:89:2b:4c:60:9c:
7d:0b:53:20:e3:49:5f:eb:90:94:fc:90:38:34:c1:24:89:3f:
1f:59:c1:15:b7:1a:a4:be:f5:ed:6d:b7:31:6b:ce:ed:ca:e5:
62:10:10:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:33:21 2025 by rpki-client