Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
File: 9PjslsjuJlw9pCMjClUhk2bdmyg.mft (raw, json)
Hash identifier: bbkmmz6RRIqgCVxsvTBhKGzVXc/rXkVKV0NPI0uSbOg=
Subject key identifier: 74:44:66:F2:3F:11:B1:6F:BB:19:EB:84:7C:4D:C8:4D:45:AD:F0:40
Authority key identifier: F4:F8:EC:96:C8:EE:26:5C:3D:A4:23:23:0A:55:21:93:66:DD:9B:28
Certificate issuer: /CN=f4f8ec96c8ee265c3da423230a55219366dd9b28
Certificate serial: 019652DB149BEDBD3416C470D0501C46D5BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
Manifest number: 0977
Signing time: Sun 20 Apr 2025 11:00:11 +0000
Manifest this update: Sun 20 Apr 2025 11:00:11 +0000
Manifest next update: Mon 21 Apr 2025 11:00:11 +0000
Files and hashes: 1: 9PjslsjuJlw9pCMjClUhk2bdmyg.crl (hash: Dr0UxfvXouLQOjkbEU9wCwJP9ppMBx1oFc2SieHblAg=)
2: KtAzNYXVImWMGMH8A6HLsIQbFYc.roa (hash: ltDvt7Ps4IWIzfc/uVIIbjH4kHjztdeIqznwfwNq8iY=)
3: X7mQYJCLCkSBMPn_lrSoI8KIXAY.roa (hash: qkjXPDtCPdPuWts7n2uaYetfDj2xIXD2HuaNsodcZ5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 11:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:db:14:9b:ed:bd:34:16:c4:70:d0:50:1c:46:d5:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f8ec96c8ee265c3da423230a55219366dd9b28
Validity
Not Before: Apr 20 11:00:11 2025 GMT
Not After : Apr 21 11:00:11 2025 GMT
Subject: CN=744466f23f11b16fbb19eb847c4dc84d45adf040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:93:4e:dd:4a:d9:ef:1c:81:b3:7c:4f:f1:b6:
49:46:38:c5:16:56:74:cb:1a:47:4d:1d:d4:e0:f6:
0d:34:1f:d0:ea:a6:b8:28:86:ac:5c:88:95:60:4b:
d6:40:e3:30:39:98:da:9a:ee:2f:99:1f:7c:93:42:
74:47:25:b2:ac:56:7e:f0:94:0c:aa:f5:63:75:47:
cd:01:47:4b:12:dd:49:2b:1f:d6:5c:32:a4:97:16:
24:90:ce:5c:f9:ed:9f:1a:b3:1f:89:df:6e:42:72:
76:6b:21:03:71:a3:d6:55:4b:4f:be:ab:c5:24:a4:
74:82:37:e6:c2:1a:ac:8a:11:bc:34:68:0d:e3:ef:
60:d6:a3:6b:08:e7:c2:9f:19:d1:da:35:04:92:2a:
9c:7d:2a:37:00:a9:3a:2e:96:73:d2:7d:2f:1a:e5:
bb:ea:eb:4f:34:f7:55:d2:cf:7d:e1:a4:d7:d5:02:
b0:7f:95:bc:b2:c7:2d:14:c4:8b:f4:05:9a:25:fa:
7f:95:a6:d7:8b:b2:2e:5a:71:6b:12:9e:f4:58:23:
c8:64:4b:08:16:7e:a3:4d:73:37:ee:59:86:76:f8:
23:b2:f6:aa:1a:7f:97:b2:34:97:43:1f:c8:03:66:
8a:9f:59:38:05:27:52:9a:ae:c5:14:91:73:43:4d:
38:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:44:66:F2:3F:11:B1:6F:BB:19:EB:84:7C:4D:C8:4D:45:AD:F0:40
X509v3 Authority Key Identifier:
keyid:F4:F8:EC:96:C8:EE:26:5C:3D:A4:23:23:0A:55:21:93:66:DD:9B:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:15:98:fa:cd:91:19:6f:7b:31:90:b0:94:1d:9a:8f:64:cf:
78:8b:3a:a8:c1:07:8b:d1:e5:68:ac:ee:53:1e:86:56:99:7e:
ca:25:f5:71:50:14:84:1c:16:57:8e:ac:97:a8:45:7a:fb:2e:
46:02:cf:61:79:8a:75:7b:e1:1b:9f:d5:25:fd:bc:d8:6f:7c:
78:11:50:0a:76:26:44:80:55:1f:2c:5b:fa:b9:e0:07:e3:d6:
28:e6:af:ca:52:22:a0:7e:0f:de:de:84:8d:00:5e:5d:ae:ca:
4a:6d:1c:e8:ef:f0:d1:f2:2c:8b:31:45:6b:42:11:78:0b:93:
9f:0f:84:17:31:80:a6:e1:db:cf:aa:b2:9f:85:5c:51:bc:77:
66:20:05:81:81:fb:73:b5:07:5b:dd:11:74:06:55:2c:4d:64:
1c:78:da:c0:38:11:92:22:19:e3:e0:cb:d3:20:64:e4:99:b5:
9c:1f:d7:91:a8:42:df:29:8b:4d:cf:de:a2:9c:4d:97:4f:ed:
f3:7f:a3:58:24:77:85:3e:5b:37:f3:50:fc:87:17:31:8d:ae:
23:18:f0:c1:4a:64:ce:32:e6:dd:0c:ca:f1:aa:b9:8c:3b:17:
1d:ed:5c:c7:c8:f5:51:dc:9c:ef:f5:92:fa:35:ad:bb:4e:67:
2a:b8:47:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:10:31 2025 by rpki-client