
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.mft
File: 1-V9aNXOMMini9DlFAMMiyCdal6I.mft (raw, json)
Hash identifier: 94r3Tg6O66Uhbz9Mh+VjVTiNtlv+Q5P/ci1uoIl6uaY=
Subject key identifier: 21:58:CA:62:BC:E5:86:30:9E:FE:DE:93:24:49:F1:09:62:A2:4E:36
Authority key identifier: F9:5F:5A:35:73:8C:32:29:E2:F4:39:45:00:C3:22:C8:27:5A:97:A2
Certificate issuer: /CN=f95f5a35738c3229e2f4394500c322c8275a97a2
Certificate serial: 01964BFDD46E4ED82081AA7EE8803B6032BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-V9aNXOMMini9DlFAMMiyCdal6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.mft
Manifest number: 122E
Signing time: Sat 19 Apr 2025 03:00:48 +0000
Manifest this update: Sat 19 Apr 2025 03:00:48 +0000
Manifest next update: Sun 20 Apr 2025 03:00:48 +0000
Files and hashes: 1: 1-V9aNXOMMini9DlFAMMiyCdal6I.crl (hash: 4Tkg+nrYbacJS0Bzp/GSMAA6Saya4bsYnZBHVfIZ4EQ=)
2: k_l8rtQi2P6fa9dQhkQ5j5jaCYE.roa (hash: sMo/6l6OJgyWFVqU8cFbnDYPktbERaDpmId+0GVplIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-V9aNXOMMini9DlFAMMiyCdal6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 03:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:fd:d4:6e:4e:d8:20:81:aa:7e:e8:80:3b:60:32:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f95f5a35738c3229e2f4394500c322c8275a97a2
Validity
Not Before: Apr 19 03:00:48 2025 GMT
Not After : Apr 20 03:00:48 2025 GMT
Subject: CN=2158ca62bce586309efede932449f10962a24e36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c9:a0:28:98:61:25:b9:77:c3:ce:04:76:e1:
e7:7f:41:a1:f8:d9:f7:e5:52:4b:02:c9:55:ee:5e:
3a:0e:48:a0:b8:e9:d4:dc:40:6f:c3:c2:9f:0c:c2:
be:6b:ed:21:62:40:68:4c:d9:5a:f8:fc:2c:5e:6b:
30:2d:31:82:a2:d3:ac:dd:c4:81:38:14:03:75:c5:
09:86:54:04:62:41:12:a4:46:31:c3:7b:68:d4:92:
47:af:74:eb:62:ac:0c:7e:9f:f5:ba:3b:54:80:58:
e1:83:a0:3d:1b:0c:0c:6a:e7:2a:67:26:e0:84:36:
17:30:b9:68:a4:3a:0f:82:a5:43:22:9f:ca:0f:dd:
b3:75:0d:64:dd:7b:5b:ac:a2:65:c7:67:d2:88:95:
d2:bf:fb:81:56:53:2d:53:5f:19:17:98:35:90:c5:
0c:c2:9e:42:61:3b:e4:5a:5f:8f:73:e5:a2:97:0a:
2f:30:18:11:7a:9a:e3:8d:6c:bf:63:82:ac:1e:a5:
43:98:13:b1:2c:33:ae:7c:0e:12:98:4d:77:44:59:
1d:4d:a3:80:e7:8d:b4:58:b2:16:0a:a1:fb:55:ba:
e3:ab:4d:7f:55:75:be:73:58:0c:06:ce:3e:b2:1f:
97:02:96:0d:b3:8e:5b:8a:22:77:94:3a:b3:28:59:
bc:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:58:CA:62:BC:E5:86:30:9E:FE:DE:93:24:49:F1:09:62:A2:4E:36
X509v3 Authority Key Identifier:
keyid:F9:5F:5A:35:73:8C:32:29:E2:F4:39:45:00:C3:22:C8:27:5A:97:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-V9aNXOMMini9DlFAMMiyCdal6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:dc:e2:e3:0c:29:77:db:c0:ad:cb:08:83:6e:57:e1:a7:3a:
08:52:3d:2a:e6:56:cf:c0:e8:5c:93:63:08:fd:d1:fc:f0:16:
e9:40:51:34:2e:68:04:3d:37:ad:40:ef:ed:f5:93:59:c2:44:
a1:da:41:56:52:50:a3:cb:d7:2a:ac:1e:64:c5:49:86:53:fc:
30:a0:27:ad:02:4c:39:a6:03:c2:7b:41:ca:7e:b3:4c:1e:21:
02:40:de:07:c8:18:b8:37:52:0d:1c:64:5e:ef:00:39:42:4a:
61:23:b0:40:6e:cf:d5:8f:50:28:aa:b0:b1:80:4a:c5:e0:fb:
39:56:86:fa:70:c2:c8:cd:81:8b:6c:3d:20:6b:fd:d8:25:35:
07:aa:1c:20:d5:b1:cd:86:de:2b:a6:2a:6f:e9:13:04:54:ce:
3e:7f:29:d8:cc:76:bf:77:c2:17:d1:8c:46:27:3a:08:b7:9e:
a1:b9:38:29:c7:82:0c:2a:2f:54:09:56:18:27:82:46:79:af:
93:fc:a6:8e:55:6b:a6:2e:fa:c3:23:6a:d6:d1:29:3f:e5:20:
6c:8f:03:7d:e4:c1:ea:4d:36:8e:63:44:bc:f5:08:50:8a:b5:
11:e6:f2:6d:41:6e:ab:d2:f1:d3:d7:82:2c:b5:ec:40:94:72:
66:e4:8c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:04:21 2025 by rpki-client