Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.mft
File: 15ToHXL1nGWg0YFEobJgeYNTa0o.mft (raw, json)
Hash identifier: 8U+Zx9K9W+H6tQ1PuVlya1OfwHMcvSogCBdv2gKY1JM=
Subject key identifier: F9:CA:EB:03:F3:20:36:72:93:9C:48:39:CC:C5:C9:3E:B9:C6:C5:99
Authority key identifier: D7:94:E8:1D:72:F5:9C:65:A0:D1:81:44:A1:B2:60:79:83:53:6B:4A
Certificate issuer: /CN=d794e81d72f59c65a0d18144a1b2607983536b4a
Certificate serial: 01958B16A0C34C369F108CE7FF4BDEA76575
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.mft
Manifest number: 0B9E
Signing time: Wed 12 Mar 2025 16:01:10 +0000
Manifest this update: Wed 12 Mar 2025 16:01:10 +0000
Manifest next update: Thu 13 Mar 2025 16:01:10 +0000
Files and hashes: 1: 15ToHXL1nGWg0YFEobJgeYNTa0o.crl (hash: yaKahcDXS821EkQvIJ0Fp1f6R2VYnZ3Yx/B1jbNxE5M=)
2: ATm3n0KFZ5OKTQtdaMLYTaNNVew.roa (hash: 2UTJGztOoJrr9yNdFqpMauhjZZvVEquE5BNwI7gR6Xg=)
3: ac_ZR0uyAlaCoYYTyxabMzs0ruQ.roa (hash: 2lsdqjwrAVWCJd53FIUYeMEFwheNjGGCw24m80TwAaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 16:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:16:a0:c3:4c:36:9f:10:8c:e7:ff:4b:de:a7:65:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d794e81d72f59c65a0d18144a1b2607983536b4a
Validity
Not Before: Mar 12 16:01:10 2025 GMT
Not After : Mar 13 16:01:10 2025 GMT
Subject: CN=f9caeb03f3203672939c4839ccc5c93eb9c6c599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:5e:b3:a4:34:1d:2e:cd:cd:88:3e:e7:77:5a:
50:5d:e5:b0:69:ac:c2:b7:6f:b4:37:55:ca:a1:56:
cf:81:4c:87:76:2d:07:24:d9:80:4a:4b:3c:33:cf:
d2:b1:66:43:dd:2c:ee:00:f9:dd:3a:5e:d0:36:3f:
a6:f3:10:1a:bb:14:c6:75:54:26:0b:ab:ef:09:0f:
3e:72:b3:62:bf:64:5d:d7:2b:98:b2:c7:6b:a0:98:
75:95:f5:68:2b:a5:23:2e:b9:c6:b9:2c:3d:93:86:
ca:17:47:a7:4a:dd:17:43:be:87:47:65:80:f1:8c:
38:7f:11:8f:c3:b8:89:22:1d:6d:10:28:c6:95:71:
d0:d1:bc:12:d0:81:fe:d7:ee:63:98:c5:86:d7:f6:
09:26:55:f6:98:fa:18:b9:4e:bc:2d:c4:bc:f3:76:
90:7d:14:93:e0:4f:05:78:19:ce:a2:ed:b0:9d:78:
09:b5:51:a9:2f:17:8f:35:b5:2d:62:1e:00:49:69:
e9:8a:0e:ae:33:d0:9d:1b:67:3e:c6:3e:66:fc:23:
b8:41:2b:36:32:48:7a:d0:1c:92:d3:d2:36:75:89:
e3:ff:3f:e5:80:1f:9a:71:f2:c4:4f:a6:eb:25:35:
97:a7:a5:29:80:a3:f1:76:9e:da:f9:4d:eb:77:b2:
ae:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:CA:EB:03:F3:20:36:72:93:9C:48:39:CC:C5:C9:3E:B9:C6:C5:99
X509v3 Authority Key Identifier:
keyid:D7:94:E8:1D:72:F5:9C:65:A0:D1:81:44:A1:B2:60:79:83:53:6B:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:94:5f:f8:d7:5b:f9:32:fe:27:d6:15:7a:ae:50:34:96:c9:
4c:75:6d:ca:0e:d9:b2:68:c0:ac:ab:97:a4:ed:ce:2e:2f:35:
f8:92:2a:ef:4a:4c:aa:ac:c0:31:39:49:8a:9e:d2:bb:72:69:
f3:5a:32:73:0e:f0:d3:55:c4:8e:d7:3e:4c:2c:74:c0:61:a8:
02:f1:7a:c0:fb:59:18:8d:4f:6f:35:09:04:1f:87:08:63:ba:
b3:ae:b9:e4:8c:5c:33:26:18:7c:a6:cc:a8:75:0b:ce:b5:2c:
e2:8d:7d:aa:24:2d:70:59:78:52:f6:bc:f1:8e:2f:ac:07:3c:
6f:a9:42:8c:aa:a9:07:9a:03:02:b8:06:39:5a:1d:19:ab:66:
c7:d6:db:3a:76:7e:37:df:52:76:51:a1:82:03:9d:32:a0:94:
cd:7e:22:3f:8e:b9:70:ff:2b:8f:1e:23:9e:6d:f3:b9:49:32:
54:71:9a:6c:5e:07:81:a6:1d:c7:7e:85:3d:70:16:f7:e2:2c:
1e:31:70:e4:ba:bb:1e:a0:b5:cb:fa:75:0b:1e:bb:db:07:8e:
b3:7e:69:df:e3:ac:36:c6:d4:fd:db:79:a1:5b:4f:29:a2:f7:
94:d1:60:dd:67:4e:35:87:d3:d8:30:cc:ac:30:ae:16:1f:9b:
81:55:76:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:46:39 2025 by rpki-client