Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/f816d6-016a-4135-99e3-8c42bb2231ab/1/ct9pdDDLtXxJoKGZMCTW0yn35WU.mft
File: ct9pdDDLtXxJoKGZMCTW0yn35WU.mft (raw, json)
Hash identifier: JwXev7mp4FxfgSr/eAxXb7NF2k95P201Ou0uBpYj2Yw=
Subject key identifier: 5C:A2:42:8D:89:FE:2C:5E:03:A7:E1:12:DE:37:6F:47:F4:1F:66:28
Authority key identifier: 72:DF:69:74:30:CB:B5:7C:49:A0:A1:99:30:24:D6:D3:29:F7:E5:65
Certificate issuer: /CN=72df697430cbb57c49a0a1993024d6d329f7e565
Certificate serial: 0196440CD0C5C4006A49505D7E6BF7E08D00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ct9pdDDLtXxJoKGZMCTW0yn35WU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/f816d6-016a-4135-99e3-8c42bb2231ab/1/ct9pdDDLtXxJoKGZMCTW0yn35WU.mft
Manifest number: 0FA1
Signing time: Thu 17 Apr 2025 14:00:12 +0000
Manifest this update: Thu 17 Apr 2025 14:00:12 +0000
Manifest next update: Fri 18 Apr 2025 14:00:12 +0000
Files and hashes: 1: ct9pdDDLtXxJoKGZMCTW0yn35WU.crl (hash: QMXoGfsMOKEbbBl0J+RnL7iYm5D5PWgPpEB/mtWSit4=)
2: hcuixNDtZTOahJr2Izkq1PkvB30.roa (hash: 0Y98rWR7z+ovo4LddJHUN4JqVyjOhGekgLOw4fEG1XU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/f816d6-016a-4135-99e3-8c42bb2231ab/1/ct9pdDDLtXxJoKGZMCTW0yn35WU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/f816d6-016a-4135-99e3-8c42bb2231ab/1/ct9pdDDLtXxJoKGZMCTW0yn35WU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ct9pdDDLtXxJoKGZMCTW0yn35WU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 14:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:0c:d0:c5:c4:00:6a:49:50:5d:7e:6b:f7:e0:8d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72df697430cbb57c49a0a1993024d6d329f7e565
Validity
Not Before: Apr 17 14:00:12 2025 GMT
Not After : Apr 18 14:00:12 2025 GMT
Subject: CN=5ca2428d89fe2c5e03a7e112de376f47f41f6628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f9:e1:cc:48:c2:8c:7b:a3:e8:11:3d:ff:85:
1c:12:21:5d:bf:5e:37:43:02:ad:a0:6d:c2:d8:1d:
f9:b6:3e:f8:9c:cc:43:c5:18:19:4f:45:7f:82:b9:
5b:b8:41:ad:c0:07:fd:01:19:b0:e7:70:10:b5:81:
85:7f:01:74:15:29:68:05:d4:f7:50:02:5b:94:c7:
61:82:b5:b0:cf:18:9b:51:51:bb:75:64:1d:63:62:
a2:1e:e9:44:94:ed:fb:aa:8d:98:bd:40:82:d5:f0:
23:77:84:61:82:d4:b0:41:6b:fc:71:7a:9c:24:2c:
16:02:5f:c3:6d:3c:b9:63:7c:ac:5e:d8:b8:df:07:
ab:4f:25:a4:9c:c9:d4:a9:97:f5:ef:95:bb:6a:c9:
f9:a0:bb:38:09:f3:8d:8d:d3:df:18:65:39:92:90:
e1:4f:c7:e8:ca:d9:5c:e5:9e:a1:34:f5:81:a8:61:
23:d6:1f:37:2a:ac:cb:85:07:7d:d1:ed:1a:f4:54:
64:20:37:5d:dc:bc:ae:12:6f:4e:0b:52:ff:2d:81:
b7:88:1f:10:14:99:f3:c2:53:bd:df:5a:8b:5c:2c:
8a:c1:90:d6:db:a6:a0:c1:d8:69:0b:22:bd:ab:ec:
0f:fe:c5:3d:cf:5f:45:b9:ec:a1:12:5b:d9:22:bd:
84:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:A2:42:8D:89:FE:2C:5E:03:A7:E1:12:DE:37:6F:47:F4:1F:66:28
X509v3 Authority Key Identifier:
keyid:72:DF:69:74:30:CB:B5:7C:49:A0:A1:99:30:24:D6:D3:29:F7:E5:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ct9pdDDLtXxJoKGZMCTW0yn35WU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f816d6-016a-4135-99e3-8c42bb2231ab/1/ct9pdDDLtXxJoKGZMCTW0yn35WU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f816d6-016a-4135-99e3-8c42bb2231ab/1/ct9pdDDLtXxJoKGZMCTW0yn35WU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:ba:35:83:dd:43:97:3e:3b:a9:04:7d:2a:12:ec:4c:21:9e:
a9:90:59:f8:a7:67:70:0d:17:8a:93:4e:da:f2:b1:fb:1f:81:
1f:45:40:42:2c:95:a1:7d:d3:c5:79:79:1a:eb:58:c9:3a:8e:
34:e9:3e:44:77:cc:c0:8b:74:34:6e:81:c2:6a:82:ef:53:42:
e8:49:c3:e3:6f:a1:a6:c7:9c:5c:5a:49:31:ec:40:a5:07:60:
e1:85:68:b6:45:94:77:05:51:aa:42:f1:bc:b4:92:76:e0:cd:
7b:6b:8f:9b:fd:94:1f:aa:54:2f:6d:a7:65:c2:f7:11:1d:2e:
25:cc:3d:05:40:3e:58:74:aa:af:53:c7:6b:60:d6:c9:bf:65:
0d:f1:79:fd:7f:f2:04:e1:7a:2d:14:36:d2:9f:74:63:79:63:
42:bc:28:de:b6:6d:c2:d7:21:23:c2:18:9d:45:b9:b6:23:87:
13:e6:7f:d4:5b:fd:29:66:5b:50:69:07:7b:92:eb:d6:69:1a:
95:a7:9b:bd:ec:8d:09:d4:b6:ca:37:6c:59:76:08:52:26:4d:
47:95:61:23:24:db:58:f2:9e:3d:b0:dc:99:34:20:35:d5:1c:
19:1b:3a:ef:28:e8:32:0d:8e:07:bd:a4:7e:4e:e1:a7:74:fe:
1c:db:8c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:44:30 2025 by rpki-client