Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft
File: 1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft (raw, json)
Hash identifier: WaT+kW2XNeSlhkr75NRbwKFztTjrclbztmlz9ofqm8w=
Subject key identifier: 20:60:14:E5:9B:46:AE:BF:71:28:EE:55:78:C3:C6:F5:F1:10:96:D4
Authority key identifier: FB:D3:29:68:AA:AA:91:9C:52:79:1F:FB:07:F9:34:36:B7:4F:D5:08
Certificate issuer: /CN=fbd32968aaaa919c52791ffb07f93436b74fd508
Certificate serial: 01964CD9B52F90B73850A5444A82C241C4B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft
Manifest number: 0952
Signing time: Sat 19 Apr 2025 07:00:58 +0000
Manifest this update: Sat 19 Apr 2025 07:00:58 +0000
Manifest next update: Sun 20 Apr 2025 07:00:58 +0000
Files and hashes: 1: 1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.crl (hash: Nwn8qeoURLXG5T2oeYD4TbRMIznXsNqFYRUSEpNFF90=)
2: pkEvxsg0lyUz8ua6CoCuzxPGvFc.roa (hash: EcykeL8rqJYAw+Ypkvc2gvotxsw/oc8iK0wUO0U4PaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:d9:b5:2f:90:b7:38:50:a5:44:4a:82:c2:41:c4:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd32968aaaa919c52791ffb07f93436b74fd508
Validity
Not Before: Apr 19 07:00:58 2025 GMT
Not After : Apr 20 07:00:58 2025 GMT
Subject: CN=206014e59b46aebf7128ee5578c3c6f5f11096d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:55:f3:27:5b:04:a1:ea:32:74:bb:4b:2a:b2:
b8:f9:22:bd:fc:a3:2c:8a:d1:ee:28:f2:95:4b:27:
6f:3a:46:05:ee:4a:67:23:c7:ec:7d:4b:48:5e:e4:
a5:64:80:8c:73:ad:9b:c6:82:e3:1e:8b:08:7a:75:
8a:bf:c1:2e:21:9c:d5:6b:63:32:d3:43:43:f3:22:
2d:68:e3:bb:ef:12:5e:fe:5e:97:e0:08:d4:76:6b:
6f:3b:93:d2:71:5e:01:39:63:6e:18:61:6a:1a:fa:
ec:fc:10:09:30:96:a9:f8:34:03:24:57:6c:88:8f:
ac:96:5a:ba:d3:3d:d1:d1:5c:f3:24:a5:c1:14:59:
cf:fa:11:2d:6a:9a:e5:73:3f:81:bb:55:2c:56:e6:
d5:e4:da:f1:e5:68:d0:db:cb:d6:f6:3c:58:9f:94:
b4:8e:65:b8:6f:06:a2:2d:ff:ee:14:28:a2:f6:a1:
58:fb:48:04:fb:78:e1:59:00:8d:10:fc:4b:d2:05:
85:cf:28:65:5d:1b:f7:e3:ad:03:af:dc:72:7b:c8:
18:e0:b3:da:57:d2:34:cc:1e:4b:9d:9c:6c:91:52:
01:b3:4c:80:41:95:81:d6:c6:3e:b3:07:6c:78:d6:
22:ff:4d:94:83:7a:be:7e:8c:70:4f:88:1b:c5:de:
a3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:60:14:E5:9B:46:AE:BF:71:28:EE:55:78:C3:C6:F5:F1:10:96:D4
X509v3 Authority Key Identifier:
keyid:FB:D3:29:68:AA:AA:91:9C:52:79:1F:FB:07:F9:34:36:B7:4F:D5:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:b8:e8:57:ec:d7:c8:38:c5:9a:b2:15:10:f0:20:ad:fa:d2:
67:90:9c:fc:dc:dc:99:02:1a:ba:eb:e8:f3:42:b0:83:c9:57:
b3:4e:16:7e:48:b5:7e:fe:a8:62:c7:de:60:22:51:41:fc:b5:
89:9e:19:25:f8:6e:21:3f:a6:b0:55:18:59:de:45:a4:7d:51:
f6:a0:7a:b2:25:e0:d6:8d:11:31:56:d6:2b:3a:f2:79:35:80:
77:eb:26:a6:10:af:cf:33:1f:9b:58:96:77:f3:92:ee:75:67:
3a:13:85:37:2f:84:ae:3a:ea:d0:ea:54:95:57:bd:78:53:4f:
85:32:42:77:9f:d1:fd:9c:b9:e7:f4:d1:12:86:4b:4a:17:6f:
8b:1a:2d:3d:98:85:ab:42:83:a1:64:71:9e:1a:62:4f:9e:12:
85:7c:43:94:eb:85:78:1e:06:86:27:17:d3:86:68:5d:2c:26:
c2:13:ac:55:66:6a:c9:82:72:0d:d2:45:cf:df:9c:20:2a:e6:
f4:23:4f:8b:f6:4f:0e:d3:74:4c:c2:f8:64:1e:22:dd:dd:fe:
73:ec:e2:d3:a9:76:de:c9:07:17:c2:a1:8e:a8:ff:1c:51:b0:
95:8c:5c:eb:a2:a9:0a:2a:78:15:31:b5:10:e7:8d:93:8e:3d:
e3:05:40:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:26:37 2025 by rpki-client