Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.mft
File: F9uL3_IuGjew9KaVNCS2UWmwNCk.mft (raw, json)
Hash identifier: r93D/Gho5+R9yNiVtLjzUc436mZdG23CqsRJj+P+wJM=
Subject key identifier: 25:BB:07:94:FA:29:C2:DB:2B:62:3B:7D:D9:94:60:9C:26:61:89:94
Authority key identifier: 17:DB:8B:DF:F2:2E:1A:37:B0:F4:A6:95:34:24:B6:51:69:B0:34:29
Certificate issuer: /CN=17db8bdff22e1a37b0f4a6953424b65169b03429
Certificate serial: 0196501151926CDDAA62D8D35EC922F93EAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9uL3_IuGjew9KaVNCS2UWmwNCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.mft
Manifest number: 0C08
Signing time: Sat 19 Apr 2025 22:00:34 +0000
Manifest this update: Sat 19 Apr 2025 22:00:34 +0000
Manifest next update: Sun 20 Apr 2025 22:00:34 +0000
Files and hashes: 1: F9uL3_IuGjew9KaVNCS2UWmwNCk.crl (hash: nkbmKOu0rbhkNvyxA09MfhWYTof9RewW9pFsPHK1cSc=)
2: KNcCODBaDX2MFgjxBHddnmeDs1w.roa (hash: v5RHpNNKwnL8+b9d7xhZwKkWy+NYX2Itp+tps9r7KV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/F9uL3_IuGjew9KaVNCS2UWmwNCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:11:51:92:6c:dd:aa:62:d8:d3:5e:c9:22:f9:3e:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17db8bdff22e1a37b0f4a6953424b65169b03429
Validity
Not Before: Apr 19 22:00:34 2025 GMT
Not After : Apr 20 22:00:34 2025 GMT
Subject: CN=25bb0794fa29c2db2b623b7dd994609c26618994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a6:c4:cd:b7:49:74:eb:a7:c5:fd:a0:6c:7e:
05:70:6a:bd:e9:a4:01:64:2a:26:f7:48:44:f3:fa:
1c:71:d2:a8:0f:77:a9:84:bf:0c:34:61:5a:a0:39:
23:94:12:78:1c:b4:21:2d:8e:a4:4d:f6:24:e8:ca:
18:72:fa:4d:c2:dc:12:b1:48:5c:aa:38:e0:87:86:
aa:60:17:c2:ea:47:a4:28:3e:79:2a:ce:32:9e:b7:
d6:ff:70:1a:88:1d:cd:2b:bc:07:82:0f:88:fe:b5:
ff:db:67:fc:78:07:26:0c:5d:a5:f7:ef:8e:f4:db:
65:83:06:9a:ce:58:34:78:85:11:99:0e:f8:dd:da:
e9:0a:d3:69:60:0a:a3:df:cb:f3:cf:ad:44:e3:b3:
fb:fe:66:87:c7:e0:ad:13:e1:ea:10:c9:20:a9:b4:
ed:3d:0f:d7:1c:e1:f1:4b:04:ac:03:17:f4:d4:e5:
b6:7a:63:bc:2f:a1:e0:c4:11:c8:08:d0:22:e0:f5:
d6:fe:73:ad:b7:1b:cb:23:2e:ba:8b:48:9c:9a:03:
37:03:99:5e:00:41:69:f2:78:66:8e:ac:bb:41:2a:
b9:8b:a7:d0:58:52:55:77:99:62:80:a0:f2:f8:79:
04:b6:14:6d:81:8b:7f:f8:ed:58:c5:0a:7e:91:eb:
a8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:BB:07:94:FA:29:C2:DB:2B:62:3B:7D:D9:94:60:9C:26:61:89:94
X509v3 Authority Key Identifier:
keyid:17:DB:8B:DF:F2:2E:1A:37:B0:F4:A6:95:34:24:B6:51:69:B0:34:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9uL3_IuGjew9KaVNCS2UWmwNCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:b1:f7:be:44:27:9f:59:d8:72:57:f9:0b:84:19:0d:16:55:
6f:5d:13:0a:32:2a:25:b7:e7:2f:8f:0f:48:e5:a5:ca:bf:d6:
45:af:7b:9b:68:a2:a7:e1:3f:f4:8f:40:83:b0:cb:7b:7a:a5:
8a:67:7e:62:a4:e1:d6:99:6c:36:df:3a:ba:05:d1:2c:4a:c0:
3e:a8:29:53:16:d1:95:20:1e:cf:85:31:fe:eb:13:c9:aa:03:
80:8a:a0:7e:1b:5b:fe:22:31:05:6a:73:3e:8f:d4:a3:d2:c1:
91:f0:56:24:13:a1:82:64:77:45:d7:27:f7:f4:92:c6:40:bf:
9f:57:20:61:a5:1e:11:83:fb:3f:45:83:45:39:20:c1:cb:3e:
e2:6b:f6:19:fe:5e:3d:51:3a:31:60:73:85:52:20:ed:b3:73:
7b:a5:2e:47:64:f0:67:88:82:8a:1a:01:c4:4b:e6:ec:f4:f1:
bc:fe:f5:15:69:c7:83:6a:25:71:58:e2:fe:d2:7e:dd:db:c2:
1c:21:20:1e:99:45:0f:0b:34:45:00:2f:b8:97:6e:af:e1:a5:
46:cc:d2:dd:6e:fe:8f:de:06:ca:54:f7:19:58:f3:ad:3f:cd:
a0:d1:32:9b:71:f5:59:95:da:b4:4d:a0:70:69:ad:f2:44:a3:
cb:78:df:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:44:44 2025 by rpki-client