Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/67335c-362c-47af-9fb9-12c6b0fd7f73/1/x9uZhsBTq3lIoSw9DITO65Om1j0.mft
File: x9uZhsBTq3lIoSw9DITO65Om1j0.mft (raw, json)
Hash identifier: iw9shc2jDdvxLM+i1M1/UZ1pKulVyAigt7jmpRu+6Gc=
Subject key identifier: D1:96:C6:DA:C3:17:3F:95:F5:F8:9A:AB:90:1F:73:A2:3B:C0:05:01
Authority key identifier: C7:DB:99:86:C0:53:AB:79:48:A1:2C:3D:0C:84:CE:EB:93:A6:D6:3D
Certificate issuer: /CN=c7db9986c053ab7948a12c3d0c84ceeb93a6d63d
Certificate serial: 019655389E7921D5E84AECCF6831CF32C7C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x9uZhsBTq3lIoSw9DITO65Om1j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/67335c-362c-47af-9fb9-12c6b0fd7f73/1/x9uZhsBTq3lIoSw9DITO65Om1j0.mft
Manifest number: 14FD
Signing time: Sun 20 Apr 2025 22:01:35 +0000
Manifest this update: Sun 20 Apr 2025 22:01:35 +0000
Manifest next update: Mon 21 Apr 2025 22:01:35 +0000
Files and hashes: 1: P-wj_vrRcbXiIB_5K8UUWmn7wtA.roa (hash: DBiwTIAVoLlTcU9IX3rDmcOWHkGERlsL2UhqGoUcwKc=)
2: x9uZhsBTq3lIoSw9DITO65Om1j0.crl (hash: KtnJ87thcatAxWKilQveHyoAmCu+M2sTeqhY37ZHI/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/67335c-362c-47af-9fb9-12c6b0fd7f73/1/x9uZhsBTq3lIoSw9DITO65Om1j0.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/67335c-362c-47af-9fb9-12c6b0fd7f73/1/x9uZhsBTq3lIoSw9DITO65Om1j0.mft
rsync://rpki.ripe.net/repository/DEFAULT/x9uZhsBTq3lIoSw9DITO65Om1j0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:9e:79:21:d5:e8:4a:ec:cf:68:31:cf:32:c7:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7db9986c053ab7948a12c3d0c84ceeb93a6d63d
Validity
Not Before: Apr 20 22:01:35 2025 GMT
Not After : Apr 21 22:01:35 2025 GMT
Subject: CN=d196c6dac3173f95f5f89aab901f73a23bc00501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ff:4e:0f:d7:2c:1e:fc:f7:c5:1d:89:3a:37:
c5:40:aa:3a:a1:ab:ef:85:3a:82:0e:5e:2e:1a:60:
3f:e7:96:da:c1:c0:1e:3b:d1:8c:2a:a2:fc:a3:2e:
65:f3:1a:ce:7f:36:17:1e:29:d1:ac:a7:15:98:09:
92:f1:29:dc:9e:6d:a3:fd:d9:fa:75:df:6b:e0:04:
a9:ca:d7:ab:ce:5f:28:85:94:3e:c3:3f:0d:e8:db:
9d:8b:b3:46:84:9c:d4:9e:73:90:48:16:b7:d8:0a:
20:10:cc:8f:a6:98:71:59:14:4b:f8:4f:38:01:48:
88:8c:90:af:2c:f1:26:51:0c:37:0d:88:e6:dd:db:
02:6c:ab:d7:91:c6:5c:68:33:a4:0c:ad:00:53:37:
a3:99:24:3f:76:e8:1a:a0:cc:5c:38:cc:1a:77:93:
c7:1f:49:fd:8e:0f:7a:55:65:cf:b5:77:fd:cb:81:
79:ae:e7:02:94:ec:02:82:d7:bb:48:6e:59:dc:f5:
c3:b1:d3:b4:6f:6a:53:4d:61:79:19:9f:2b:07:91:
b5:b9:a7:20:63:ee:c4:60:13:ed:b9:16:c5:47:62:
73:e0:f0:09:ed:23:4d:29:d8:9c:51:8b:70:3f:ea:
96:92:c7:38:86:dc:14:c5:fa:1c:2f:f4:41:c7:43:
78:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:96:C6:DA:C3:17:3F:95:F5:F8:9A:AB:90:1F:73:A2:3B:C0:05:01
X509v3 Authority Key Identifier:
keyid:C7:DB:99:86:C0:53:AB:79:48:A1:2C:3D:0C:84:CE:EB:93:A6:D6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9uZhsBTq3lIoSw9DITO65Om1j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/67335c-362c-47af-9fb9-12c6b0fd7f73/1/x9uZhsBTq3lIoSw9DITO65Om1j0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/67335c-362c-47af-9fb9-12c6b0fd7f73/1/x9uZhsBTq3lIoSw9DITO65Om1j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:a3:30:53:c8:30:5f:dc:9b:be:27:dd:51:8e:cb:13:e1:ed:
51:45:56:57:8b:0f:5a:ee:f5:fe:ab:9d:85:03:c5:c0:7c:f7:
09:25:b4:bf:e9:32:d1:47:7c:d9:9c:f5:fb:61:cb:57:eb:c1:
98:10:aa:96:99:16:35:c0:61:45:c7:7b:bd:7e:75:ec:5d:22:
a5:75:6f:d5:f1:50:60:6f:f0:13:5f:c7:27:33:95:f5:57:87:
73:d5:f6:c6:c6:0f:1d:79:44:ce:00:25:3a:ab:4d:99:ad:ca:
41:7f:f3:f8:17:cc:75:9f:78:ae:3f:23:ef:d6:1a:c7:5c:42:
b9:12:4c:c8:84:90:16:47:bc:2e:0c:b6:6f:11:1d:53:2c:60:
6e:fa:06:3c:a9:bf:21:c3:7c:ff:ce:5a:98:18:06:84:27:b0:
6d:86:14:11:6f:9a:03:92:86:f3:14:24:54:1d:67:b6:53:90:
05:92:8d:d0:44:f6:2f:87:5a:4f:e7:ea:fc:35:14:c3:cf:98:
c4:c7:3e:0e:4b:a2:95:27:12:20:30:95:af:46:fc:00:9f:c9:
1c:b1:bb:b1:58:c1:50:25:53:ba:92:e1:44:1b:94:e8:24:d1:
a6:36:90:98:5d:c5:d2:6e:3a:7e:b3:7d:9f:25:82:06:a4:a8:
3e:dd:ab:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:27:18 2025 by rpki-client