Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/faabbc-81ba-4977-8923-cc93b1050de7/1/my6AoUHJdPbaj0AnQzj9rO5Cp3A.mft
File: my6AoUHJdPbaj0AnQzj9rO5Cp3A.mft (raw, json)
Hash identifier: ZZ2NTY/Zf+kP138fkyik+KJxXE2BEk56K4QnmfXvSFY=
Subject key identifier: 35:E4:16:41:FB:81:11:F0:3D:32:A1:B2:A8:44:35:07:F7:11:78:E2
Authority key identifier: 9B:2E:80:A1:41:C9:74:F6:DA:8F:40:27:43:38:FD:AC:EE:42:A7:70
Certificate issuer: /CN=9b2e80a141c974f6da8f40274338fdacee42a770
Certificate serial: 0196515ACC1410CFADF35A0A954680A1AEAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/my6AoUHJdPbaj0AnQzj9rO5Cp3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/faabbc-81ba-4977-8923-cc93b1050de7/1/my6AoUHJdPbaj0AnQzj9rO5Cp3A.mft
Manifest number: 0CAD
Signing time: Sun 20 Apr 2025 04:00:27 +0000
Manifest this update: Sun 20 Apr 2025 04:00:27 +0000
Manifest next update: Mon 21 Apr 2025 04:00:27 +0000
Files and hashes: 1: my6AoUHJdPbaj0AnQzj9rO5Cp3A.crl (hash: lZ2yjlUxIdybPqP/Rh6wL09IZFtc28ZzIR66W0JS3+w=)
2: qDQj2i79pZYtwis1stkVmdhu_cA.roa (hash: OPq9BdTsvn5TcHmuSl2ovdvwcrawOIn1d+BihcQt66M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/faabbc-81ba-4977-8923-cc93b1050de7/1/my6AoUHJdPbaj0AnQzj9rO5Cp3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/faabbc-81ba-4977-8923-cc93b1050de7/1/my6AoUHJdPbaj0AnQzj9rO5Cp3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/my6AoUHJdPbaj0AnQzj9rO5Cp3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 04:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:5a:cc:14:10:cf:ad:f3:5a:0a:95:46:80:a1:ae:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b2e80a141c974f6da8f40274338fdacee42a770
Validity
Not Before: Apr 20 04:00:27 2025 GMT
Not After : Apr 21 04:00:27 2025 GMT
Subject: CN=35e41641fb8111f03d32a1b2a8443507f71178e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a6:c6:39:ce:f5:b6:ed:0c:12:b4:d0:6c:fd:
bb:6d:d8:61:55:4b:5d:09:3b:05:11:db:f2:41:d9:
d8:ff:64:6c:c9:06:12:29:79:59:3c:3d:83:56:d2:
9d:d3:e1:ca:50:64:dd:72:b0:9f:8d:f7:5e:e1:3d:
5c:9b:f2:b6:c3:13:70:a0:0a:ee:d7:de:25:d7:75:
fd:14:63:a0:2c:8c:ae:92:35:f6:eb:ee:83:6c:7e:
39:f5:ae:2e:26:91:0f:32:80:73:16:2c:bd:44:0d:
44:e7:3b:63:8f:c5:29:ae:3f:08:bf:9f:35:30:f3:
2f:82:39:fa:6b:a5:38:24:27:32:63:33:e7:fa:da:
e7:61:73:d1:de:a1:df:1e:fd:98:2f:2c:ba:4e:90:
f5:45:59:8b:a4:77:a7:65:f3:c8:c1:9f:f7:de:08:
6b:fd:e9:06:f3:32:5f:2b:2e:a7:13:0a:49:13:6b:
ee:6f:49:a3:9a:34:a5:90:f4:26:d0:5f:b4:19:81:
2d:4b:41:b7:6a:18:b3:e6:7f:c0:a8:69:84:68:c6:
7b:21:d5:67:9a:3f:2b:92:84:a6:43:db:28:b7:4b:
aa:21:b2:e5:f3:7e:18:0c:3c:5e:da:5d:2b:5a:77:
54:af:69:8d:4e:cf:73:e0:f5:9c:4f:a9:69:09:bd:
d9:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:E4:16:41:FB:81:11:F0:3D:32:A1:B2:A8:44:35:07:F7:11:78:E2
X509v3 Authority Key Identifier:
keyid:9B:2E:80:A1:41:C9:74:F6:DA:8F:40:27:43:38:FD:AC:EE:42:A7:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/my6AoUHJdPbaj0AnQzj9rO5Cp3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/faabbc-81ba-4977-8923-cc93b1050de7/1/my6AoUHJdPbaj0AnQzj9rO5Cp3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/faabbc-81ba-4977-8923-cc93b1050de7/1/my6AoUHJdPbaj0AnQzj9rO5Cp3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:33:b2:fb:07:d3:70:eb:a8:6e:ab:2d:fa:10:14:09:cf:3f:
90:49:da:5d:53:5b:7c:21:d5:f6:23:2b:7b:92:40:c4:49:ff:
15:3f:28:4f:6c:b1:ff:78:5a:5b:a1:4d:8a:fd:a1:55:cf:30:
cd:52:2c:4e:83:9e:90:c2:fd:a3:60:85:09:89:28:e8:22:33:
c5:ee:89:de:a4:44:2a:d1:4c:6d:35:9e:ad:bf:66:c6:d0:27:
44:26:e2:85:f6:dd:37:ec:b2:b4:8b:cd:d3:d3:a0:91:8c:f3:
36:09:c0:5c:11:79:b2:cc:ff:74:48:d1:8a:74:e1:bd:3b:7d:
cf:4b:77:08:5f:f6:92:0c:fd:05:d6:94:fb:25:37:cf:65:63:
d4:9f:8c:1a:77:f7:b8:b3:50:d6:90:26:44:b8:69:e2:43:72:
a6:51:31:a4:ca:b5:e8:40:de:fd:4d:47:6c:b3:af:14:24:bc:
1a:be:8a:7b:e7:d7:51:6f:c8:66:49:d9:d3:da:7a:36:8b:70:
71:84:b4:6a:8e:43:d7:3a:7a:f9:c0:3f:8b:07:66:2f:6e:21:
f9:bc:03:5c:10:72:04:6a:f3:79:8c:eb:4f:96:69:20:b4:9d:
19:3b:cb:11:0b:3c:d1:21:38:d0:52:a8:eb:cc:d8:de:64:44:
c1:bf:50:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:23:14 2025 by rpki-client