Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
File: 9poKXR6NVCSOh2Z-mIPJAvF14uc.mft (raw, json)
Hash identifier: Gbfm4BgfKLTqCO4racMSPJahVWrQLmnxkYC8BCkoDR4=
Subject key identifier: 23:4D:DC:EF:EC:49:7B:69:39:CF:0F:C6:12:8D:8E:D8:C8:C0:5D:43
Authority key identifier: F6:9A:0A:5D:1E:8D:54:24:8E:87:66:7E:98:83:C9:02:F1:75:E2:E7
Certificate issuer: /CN=f69a0a5d1e8d54248e87667e9883c902f175e2e7
Certificate serial: 0196116A0B2604C38E514E82769B35A4C051
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
Manifest number: 14DB
Signing time: Mon 07 Apr 2025 18:01:24 +0000
Manifest this update: Mon 07 Apr 2025 18:01:24 +0000
Manifest next update: Tue 08 Apr 2025 18:01:24 +0000
Files and hashes: 1: 9poKXR6NVCSOh2Z-mIPJAvF14uc.crl (hash: kwSsP7J+aFkFjcnEqnNwDsVAG8LYILkOYjboc2h355k=)
2: HmMkZMs_L5qVhevMb58XTv8ACos.roa (hash: p6Cspm4w36V6nse6CJ6sMJJCGrV41tHwZhdpXbj7GQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:11:6a:0b:26:04:c3:8e:51:4e:82:76:9b:35:a4:c0:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69a0a5d1e8d54248e87667e9883c902f175e2e7
Validity
Not Before: Apr 7 18:01:24 2025 GMT
Not After : Apr 8 18:01:24 2025 GMT
Subject: CN=234ddcefec497b6939cf0fc6128d8ed8c8c05d43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:be:ba:53:51:0b:81:6d:9d:03:72:93:dc:6b:
ae:73:0f:84:8c:3e:44:ab:11:14:56:cf:f8:15:e1:
1c:44:da:9a:da:4b:0a:b5:76:3e:14:36:94:08:69:
85:1c:d3:76:68:cd:a0:07:2d:2c:97:e0:9b:0d:c7:
44:52:8e:94:fb:bb:53:dd:9b:83:72:e5:3c:dc:e7:
79:d7:14:64:2d:3c:0b:08:26:d9:27:07:99:7a:6b:
d6:70:51:bd:cb:53:4f:26:17:42:ba:35:96:d4:59:
09:44:26:f5:d4:3a:19:db:f2:33:2d:c0:b0:3e:50:
69:e4:57:a6:08:66:ca:be:ff:69:92:b7:8a:ee:ff:
b4:8a:c4:de:1b:4b:84:3e:b6:2b:0f:78:98:49:3a:
da:6a:a2:00:f2:b9:11:3e:94:32:ce:4c:d5:80:e9:
0a:ba:8e:06:ea:06:c8:5c:ea:14:55:81:ac:fc:84:
ed:aa:d8:f2:f1:98:78:34:f7:50:3b:c7:21:27:1a:
2e:a5:d6:14:d8:c2:7c:85:15:79:dd:3a:fc:ad:50:
8f:b8:35:5e:0c:ae:09:68:e9:74:f2:22:42:41:93:
a2:04:3d:49:b3:48:8a:00:71:a4:90:fd:1d:14:31:
ad:c5:19:78:4b:88:b1:24:ae:4a:7a:01:1a:a5:29:
15:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:4D:DC:EF:EC:49:7B:69:39:CF:0F:C6:12:8D:8E:D8:C8:C0:5D:43
X509v3 Authority Key Identifier:
keyid:F6:9A:0A:5D:1E:8D:54:24:8E:87:66:7E:98:83:C9:02:F1:75:E2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:ce:43:4d:ee:70:32:5f:5d:be:19:e0:5a:66:3d:d2:15:9e:
e0:17:78:e6:ca:98:37:c2:cb:23:84:d0:94:58:de:6c:84:c1:
77:08:95:da:d7:93:69:bd:f8:4c:9b:ab:b1:b7:29:d4:b6:26:
7b:78:f5:eb:a1:00:fc:e3:d1:4f:b9:07:08:68:6a:d1:0b:2f:
8c:79:be:2f:b0:03:3a:29:74:0c:a8:d5:e8:cb:e9:44:d0:48:
83:65:5e:fb:6f:41:00:91:43:22:b7:4d:42:4b:fc:f3:35:e7:
1c:68:85:83:06:54:c9:3a:a0:f9:65:5b:53:5f:90:36:0b:14:
44:3e:a0:63:23:7a:4c:1b:d3:cb:14:a3:cd:a1:9c:92:04:e8:
64:f7:9c:57:3d:4c:a7:e3:a4:e4:38:7d:32:90:4a:35:83:65:
b4:b3:78:ab:22:f0:6f:7d:1d:95:73:2d:cc:b0:d6:03:c7:ed:
c6:db:40:ab:72:67:1c:7f:0f:50:3e:29:04:a0:d2:bb:79:d4:
d7:ba:d5:21:4d:2a:2d:6f:09:1d:eb:37:02:c3:19:ad:f3:ae:
a7:cd:d9:9c:05:64:91:b6:04:68:ce:64:89:c4:71:00:bf:ae:
aa:d1:72:1f:4c:96:3f:9f:c1:ee:22:37:f6:20:88:74:a9:6e:
98:43:89:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:34:11 2025 by rpki-client