Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/f816d6-016a-4135-99e3-8c42bb2231ab/1/ct9pdDDLtXxJoKGZMCTW0yn35WU.mft
File: ct9pdDDLtXxJoKGZMCTW0yn35WU.mft (raw, json)
Hash identifier: BVochktmHsMRx5tTubyZZRuom4quNEw7RBSj4QCM5gA=
Subject key identifier: 69:61:AD:33:10:16:B1:42:C4:F4:16:AA:F3:56:BE:77:C5:D8:A3:11
Authority key identifier: 72:DF:69:74:30:CB:B5:7C:49:A0:A1:99:30:24:D6:D3:29:F7:E5:65
Certificate issuer: /CN=72df697430cbb57c49a0a1993024d6d329f7e565
Certificate serial: 0194C3BE9E6792A33D920F10276222DF3C03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ct9pdDDLtXxJoKGZMCTW0yn35WU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/f816d6-016a-4135-99e3-8c42bb2231ab/1/ct9pdDDLtXxJoKGZMCTW0yn35WU.mft
Manifest number: 0EDA
Signing time: Sat 01 Feb 2025 23:00:37 +0000
Manifest this update: Sat 01 Feb 2025 23:00:37 +0000
Manifest next update: Sun 02 Feb 2025 23:00:37 +0000
Files and hashes: 1: ct9pdDDLtXxJoKGZMCTW0yn35WU.crl (hash: rTXnx+GZ5zIXS06hfjhbDEj0fa+5JCiykWIG4rDj7PM=)
2: hcuixNDtZTOahJr2Izkq1PkvB30.roa (hash: 0Y98rWR7z+ovo4LddJHUN4JqVyjOhGekgLOw4fEG1XU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/f816d6-016a-4135-99e3-8c42bb2231ab/1/ct9pdDDLtXxJoKGZMCTW0yn35WU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/f816d6-016a-4135-99e3-8c42bb2231ab/1/ct9pdDDLtXxJoKGZMCTW0yn35WU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ct9pdDDLtXxJoKGZMCTW0yn35WU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 23:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:be:9e:67:92:a3:3d:92:0f:10:27:62:22:df:3c:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72df697430cbb57c49a0a1993024d6d329f7e565
Validity
Not Before: Feb 1 23:00:37 2025 GMT
Not After : Feb 2 23:00:37 2025 GMT
Subject: CN=6961ad331016b142c4f416aaf356be77c5d8a311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:63:10:bf:34:7f:6b:61:13:3d:43:53:61:80:
90:36:8b:3c:52:37:e6:21:1b:6a:96:48:39:e3:f7:
f3:e7:7f:8f:1d:43:37:14:a7:52:a0:04:a8:31:9f:
f1:bc:52:69:b7:0a:76:38:5f:02:36:99:38:ae:16:
c1:1d:f6:76:be:39:7d:a6:a7:f9:15:cf:9d:a7:bc:
cf:9d:db:a9:c2:cc:2e:ff:76:80:b2:49:a8:a9:c7:
a2:c3:cb:ca:15:6a:51:dc:b3:78:f7:db:f0:0b:60:
17:6c:fe:20:0a:36:97:9f:53:18:27:aa:e7:83:c6:
d3:96:72:45:fc:b5:f8:6f:89:d8:fc:f6:b7:8f:d5:
01:14:f6:25:54:d8:0c:dd:11:8f:8c:15:c8:87:ee:
5a:51:c1:59:d2:a7:da:94:23:4b:4f:3d:b4:66:cd:
f6:9e:99:c6:54:88:1d:2a:45:73:d6:ec:17:15:ca:
eb:39:94:b2:32:91:2a:c9:38:91:e0:1f:cc:26:fb:
14:21:d3:b9:f3:bb:b4:dc:94:4a:d1:f8:48:34:d4:
e1:39:cd:6b:61:0b:ab:18:49:28:4f:8f:f2:30:ea:
73:f3:2e:22:91:cf:48:0e:7f:85:4d:56:67:35:17:
89:2a:cc:cf:15:13:d2:25:20:02:cc:2c:62:ab:70:
0c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:61:AD:33:10:16:B1:42:C4:F4:16:AA:F3:56:BE:77:C5:D8:A3:11
X509v3 Authority Key Identifier:
keyid:72:DF:69:74:30:CB:B5:7C:49:A0:A1:99:30:24:D6:D3:29:F7:E5:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ct9pdDDLtXxJoKGZMCTW0yn35WU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f816d6-016a-4135-99e3-8c42bb2231ab/1/ct9pdDDLtXxJoKGZMCTW0yn35WU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f816d6-016a-4135-99e3-8c42bb2231ab/1/ct9pdDDLtXxJoKGZMCTW0yn35WU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:ce:a8:b9:84:1a:e3:06:6f:e2:1a:63:fd:e9:cd:12:b5:0d:
24:3b:5f:84:a3:d7:39:e9:6e:90:67:e8:72:2b:78:4b:23:68:
66:ee:d5:21:da:ce:e4:e1:e1:dc:24:8a:84:44:e9:f0:c2:6e:
4b:29:1b:fb:be:76:66:b4:dd:f0:51:7a:c8:88:23:f1:c4:ee:
97:7f:de:6f:c3:9a:33:f4:3a:d8:12:f6:0b:94:35:92:ba:7d:
66:ce:8c:cd:e5:c2:72:59:37:7c:f1:db:14:8a:b2:0c:18:74:
d2:26:0b:9b:7b:4f:f6:73:b0:94:49:a7:a7:15:e7:77:39:e7:
65:30:3a:66:e2:aa:22:e6:a8:83:d3:32:7d:e3:14:49:20:25:
10:51:1d:dc:e9:c5:c3:18:25:8d:3b:25:6a:bd:c0:ca:69:f9:
1a:d9:45:19:07:78:6f:c3:a7:22:d7:2d:fd:4b:05:39:11:8a:
c2:2e:8a:8e:64:6b:be:d2:80:dd:dc:01:0e:41:06:9b:71:8c:
ef:8e:ca:72:14:72:e2:b7:03:b1:7f:f1:bf:71:1a:55:55:73:
43:6a:3f:d0:c0:2a:e4:76:c9:74:4f:dd:9b:31:ef:62:b9:7f:
5e:af:95:d3:2a:36:fa:ef:3a:ab:38:35:66:0b:da:20:0d:5b:
ad:12:20:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:49:22 2025 by rpki-client