Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft
File: 9WFTxQuIFb0o37sA4j5vJjIDFy4.mft (raw, json)
Hash identifier: K+Dzt9WnSMsvcT6I43bXYoSYEbbeEIKqz2vuh45zBis=
Subject key identifier: 74:97:B9:2C:4A:42:E6:A0:F8:15:AE:60:22:09:65:32:16:D5:A5:9D
Authority key identifier: F5:61:53:C5:0B:88:15:BD:28:DF:BB:00:E2:3E:6F:26:32:03:17:2E
Certificate issuer: /CN=f56153c50b8815bd28dfbb00e23e6f263203172e
Certificate serial: 01964C6BA40DD7D57BFF57C1BAEC16848197
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WFTxQuIFb0o37sA4j5vJjIDFy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft
Manifest number: 09DC
Signing time: Sat 19 Apr 2025 05:00:44 +0000
Manifest this update: Sat 19 Apr 2025 05:00:44 +0000
Manifest next update: Sun 20 Apr 2025 05:00:44 +0000
Files and hashes: 1: 9WFTxQuIFb0o37sA4j5vJjIDFy4.crl (hash: /E51qBHRZ1ULWlPUhMkQR1SXRTgdn0Mxrwtgp7BZEJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WFTxQuIFb0o37sA4j5vJjIDFy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:6b:a4:0d:d7:d5:7b:ff:57:c1:ba:ec:16:84:81:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f56153c50b8815bd28dfbb00e23e6f263203172e
Validity
Not Before: Apr 19 05:00:44 2025 GMT
Not After : Apr 20 05:00:44 2025 GMT
Subject: CN=7497b92c4a42e6a0f815ae602209653216d5a59d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:46:24:e7:7e:b0:75:76:d0:b7:27:bd:92:1c:
a3:87:33:65:9d:67:3a:ab:e1:6a:65:f8:ce:33:1b:
bb:41:1b:cd:72:88:9d:a7:c7:7f:76:ea:6d:4d:9f:
bf:38:9a:b5:b6:7f:39:66:21:cf:b4:7e:ce:3b:2c:
18:cd:f3:66:d6:16:01:33:73:13:11:32:73:a7:16:
e4:0f:9a:1e:b7:e6:7d:40:0b:86:0f:c8:cf:eb:de:
62:8f:4d:21:5d:09:8f:13:8a:0b:7f:c9:2b:b2:36:
01:a7:47:49:7f:bb:25:be:14:2a:db:9c:06:24:60:
3d:eb:ee:ec:99:92:52:24:9e:47:a7:7c:a6:34:6d:
35:04:4a:08:23:de:a9:e3:31:61:3a:c7:fc:71:85:
1e:a9:57:a7:5e:e1:dd:b0:0b:bb:b2:e4:35:a3:90:
2e:e4:b2:14:e8:b7:ae:b7:d2:c5:37:67:4e:a3:d0:
55:50:01:1d:bf:c7:57:22:ee:20:72:7c:c6:c7:af:
72:a2:c0:5d:4f:4e:88:8d:a3:10:e5:a6:b1:ba:40:
a2:3c:e5:83:a5:98:0d:8a:11:ab:86:04:0b:25:fc:
95:39:0d:3c:97:f4:9d:b3:7a:4f:14:b7:7c:75:6e:
ef:f9:71:f3:ba:13:c3:1f:bf:72:76:a2:89:8b:f6:
4b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:97:B9:2C:4A:42:E6:A0:F8:15:AE:60:22:09:65:32:16:D5:A5:9D
X509v3 Authority Key Identifier:
keyid:F5:61:53:C5:0B:88:15:BD:28:DF:BB:00:E2:3E:6F:26:32:03:17:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WFTxQuIFb0o37sA4j5vJjIDFy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:42:14:0e:93:38:c2:9a:c6:8f:ec:f0:fd:d0:74:48:d4:96:
8e:c9:e3:8a:7f:f9:e4:14:f1:92:3f:7d:97:3f:70:80:ca:64:
f9:59:3e:ec:59:92:eb:aa:ad:d4:b7:55:a0:46:4c:8d:63:42:
61:75:91:97:93:20:eb:8c:2a:44:77:8d:cb:2f:5d:83:18:1c:
ae:22:cb:08:54:08:c9:0d:bb:cc:8c:33:b4:40:cf:d4:76:23:
5e:a7:3c:5e:bc:ce:17:b3:c5:7f:48:e3:e8:6a:5c:70:1e:72:
93:e6:3c:ec:67:ba:ed:a4:91:7d:90:3d:7b:19:18:63:ea:be:
53:40:77:f9:9f:de:4e:33:75:1a:85:8b:4d:a9:15:b6:d5:61:
46:8a:4f:27:d1:41:fd:56:1b:e3:30:95:ec:9b:82:41:3a:4a:
aa:6e:b7:c1:2e:f1:3b:27:8c:38:8c:8a:4f:a2:d9:8a:52:1e:
9b:d2:08:81:f6:5a:52:4c:60:39:f6:17:63:51:5a:8e:e5:6e:
94:e1:b1:c6:39:e8:de:07:41:cd:04:80:1f:9b:65:1a:92:de:
53:04:09:e7:ea:b4:5e:ce:30:9f:aa:f7:33:ac:f9:0d:b5:7a:
05:b5:50:1d:c9:93:6d:29:bf:5e:a6:04:dc:ff:3a:f5:a4:26:
f5:ef:0d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:18:20 2025 by rpki-client