Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft
File: 9f9GumzY4vNa_bW1-fhlAvg0w0o.mft (raw, json)
Hash identifier: GUHUXDhE77MeRXJWp8+01AZm7Wfv1R0+P5MUlCiMVzw=
Subject key identifier: BF:90:A8:77:C8:FB:01:F5:CD:66:88:B3:55:57:7E:56:1C:C6:E6:64
Authority key identifier: F5:FF:46:BA:6C:D8:E2:F3:5A:FD:B5:B5:F9:F8:65:02:F8:34:C3:4A
Certificate issuer: /CN=f5ff46ba6cd8e2f35afdb5b5f9f86502f834c34a
Certificate serial: 019646D7487AD77977529246BB7314B41574
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9f9GumzY4vNa_bW1-fhlAvg0w0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft
Manifest number: 10E2
Signing time: Fri 18 Apr 2025 03:00:35 +0000
Manifest this update: Fri 18 Apr 2025 03:00:35 +0000
Manifest next update: Sat 19 Apr 2025 03:00:35 +0000
Files and hashes: 1: 9f9GumzY4vNa_bW1-fhlAvg0w0o.crl (hash: VWcAML+KctCbkZrzskd7Kz/R7FIb4yo3EixXWoRC52g=)
2: jFj_wAVFaMa6v6BwAOU_Uc1FIto.roa (hash: OCl5X/o2fl4tL/vj2OOu1PZNEi03ZxIx2lIN6Tnh8gk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/9f9GumzY4vNa_bW1-fhlAvg0w0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:46:d7:48:7a:d7:79:77:52:92:46:bb:73:14:b4:15:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5ff46ba6cd8e2f35afdb5b5f9f86502f834c34a
Validity
Not Before: Apr 18 03:00:35 2025 GMT
Not After : Apr 19 03:00:35 2025 GMT
Subject: CN=bf90a877c8fb01f5cd6688b355577e561cc6e664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:37:f7:b6:f2:af:5e:8b:27:a5:13:e2:15:73:
ef:0c:27:97:98:7e:b7:c1:9c:c7:cf:7e:26:22:01:
a4:83:de:6b:9e:3d:d5:14:2b:08:e6:d7:95:3f:d3:
eb:51:e8:11:6b:c4:6f:92:95:77:cc:a1:27:49:97:
47:34:97:d2:9c:00:36:b2:67:1f:b4:d6:42:c2:09:
4b:99:8f:12:0b:5c:89:b8:d6:f3:6b:84:64:ec:e4:
25:4e:45:13:7d:b2:11:ba:c7:0e:75:e8:b4:8b:d8:
ca:71:ff:f1:ad:7b:48:ad:f8:47:f5:a0:52:15:be:
49:03:52:ae:3e:da:9e:45:21:ae:16:86:5d:ee:2b:
0f:69:2c:33:dc:2e:8e:6f:6b:ae:a5:33:29:2a:0d:
7f:ae:f1:05:be:c0:b0:2d:e1:88:d4:f7:b8:04:6d:
a9:df:05:50:9a:b9:25:60:b8:33:8d:da:15:09:12:
56:5e:31:a5:f3:8a:80:30:51:c8:97:1c:d7:72:77:
6a:3e:45:2a:f1:ac:0d:4f:85:7d:55:60:44:1e:b8:
2d:7c:33:be:d6:6c:d3:a3:0b:9d:c4:4d:cf:ea:50:
09:55:82:93:b2:40:fa:b3:ca:b3:aa:2c:4b:42:11:
e4:10:74:35:38:ba:f3:1f:42:ca:53:38:18:d4:bc:
ca:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:90:A8:77:C8:FB:01:F5:CD:66:88:B3:55:57:7E:56:1C:C6:E6:64
X509v3 Authority Key Identifier:
keyid:F5:FF:46:BA:6C:D8:E2:F3:5A:FD:B5:B5:F9:F8:65:02:F8:34:C3:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f9GumzY4vNa_bW1-fhlAvg0w0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:d3:ff:c1:1e:e1:03:40:5f:6d:cf:3d:80:f1:af:ca:69:8e:
35:0e:4b:b8:d9:a8:02:83:76:13:08:32:83:67:62:3a:dc:81:
c8:7d:a4:37:ec:5a:50:2e:82:2b:98:c3:b7:fb:f7:9f:64:11:
38:aa:50:a9:c4:7f:8c:d3:40:63:4e:6b:e0:2f:00:ce:c6:09:
e5:b5:f1:29:28:d7:df:1d:fe:e0:6d:f6:09:7e:8b:6b:9d:08:
98:81:37:4f:1c:be:9a:13:65:70:9e:e3:2a:24:e7:40:24:1e:
e5:d7:8d:4b:30:cc:a1:85:af:37:0b:51:98:96:15:49:fa:64:
2c:8f:49:51:7e:f0:28:6d:8a:be:1d:3d:0b:32:98:b5:60:18:
cb:e0:bc:84:2d:a8:21:24:17:c1:98:8a:aa:34:de:fe:cd:a0:
a2:1d:12:49:68:22:7c:57:7e:f4:47:b6:32:22:ba:d8:54:43:
f6:0e:a0:cc:a2:1c:51:06:78:69:ce:a3:62:6b:05:94:cb:c5:
90:f7:df:5c:5f:b1:5b:8a:a8:96:1c:49:a6:3d:8e:4e:3d:8a:
45:87:c4:73:f1:e4:3d:cf:6f:ae:57:ca:1b:d9:37:24:b5:91:
6e:14:4c:b1:96:b2:ea:61:24:a4:81:03:5a:de:dc:01:05:a1:
42:9f:8a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:00:32 2025 by rpki-client