Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
File: _9v7226XXdyo9t2WjDen1VYOaR0.mft (raw, json)
Hash identifier: VXCPkT1D2SqdA5pmYuL2gxnspQAKyIh+iEkXn/BsdhA=
Subject key identifier: A3:B8:F2:BE:56:FC:03:36:6D:61:F3:D5:08:52:F3:97:EB:F7:F4:8D
Authority key identifier: FF:DB:FB:DB:6E:97:5D:DC:A8:F6:DD:96:8C:37:A7:D5:56:0E:69:1D
Certificate issuer: /CN=ffdbfbdb6e975ddca8f6dd968c37a7d5560e691d
Certificate serial: 0196515B1B07F7F11C6634FDC3C6349AA35E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
Manifest number: 0495
Signing time: Sun 20 Apr 2025 04:00:47 +0000
Manifest this update: Sun 20 Apr 2025 04:00:47 +0000
Manifest next update: Mon 21 Apr 2025 04:00:47 +0000
Files and hashes: 1: XtH0htLAKG6Q5dcfnWZEaEHDokg.roa (hash: 6hipGrL8gPx/AA1jsYDtYKkvzd7jAI7crI4ZoMmJgjA=)
2: _9v7226XXdyo9t2WjDen1VYOaR0.crl (hash: AMJoQ3SyEIqldpHEr7pbsf4Ae1OFoEoOZlisKn28PBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 04:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:5b:1b:07:f7:f1:1c:66:34:fd:c3:c6:34:9a:a3:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffdbfbdb6e975ddca8f6dd968c37a7d5560e691d
Validity
Not Before: Apr 20 04:00:47 2025 GMT
Not After : Apr 21 04:00:47 2025 GMT
Subject: CN=a3b8f2be56fc03366d61f3d50852f397ebf7f48d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d0:5b:cd:58:b1:7e:95:96:02:55:67:7f:c2:
c8:74:4f:cb:2d:6e:71:1c:86:65:5b:3f:b1:c6:4a:
2f:cf:37:03:52:e1:27:cb:1a:8e:e4:20:62:6e:fc:
be:2c:41:1e:58:9b:db:1f:47:75:f4:9c:05:22:03:
9d:4b:9d:0c:c5:12:2d:7d:2d:41:ef:b4:ec:71:61:
0e:1e:d9:0d:cb:c1:24:79:f2:58:72:22:0f:85:9a:
6d:60:fe:05:82:36:c6:24:f1:16:8a:a0:81:99:09:
ed:aa:a3:d4:62:22:6d:b6:3d:26:10:ae:42:ee:3b:
bf:78:7f:1b:9a:73:7d:94:3a:2a:92:ad:43:a0:a0:
d5:d2:05:8e:ae:10:0b:7d:ce:c3:13:fe:5b:e4:de:
5d:8f:95:94:aa:66:92:12:a6:ea:5f:f5:a6:9a:e3:
a5:8e:2b:39:bf:9b:fe:35:c3:78:f3:fc:8d:01:68:
09:c6:c3:57:9f:f7:c5:5b:b5:4a:c5:bb:0f:4f:66:
5c:c2:7d:6c:dd:19:8a:63:2f:d2:43:24:ad:50:a5:
47:19:1e:e6:46:2c:6e:fd:1b:f1:c7:d9:25:35:48:
e9:5c:01:bc:af:b8:53:cc:53:d3:2a:7f:65:0f:eb:
4f:a2:a7:2f:51:af:b8:01:08:ea:ef:08:24:cc:11:
2a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:B8:F2:BE:56:FC:03:36:6D:61:F3:D5:08:52:F3:97:EB:F7:F4:8D
X509v3 Authority Key Identifier:
keyid:FF:DB:FB:DB:6E:97:5D:DC:A8:F6:DD:96:8C:37:A7:D5:56:0E:69:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:06:cd:38:c8:49:df:e6:ef:63:a4:03:b8:77:f8:35:03:8c:
69:c3:41:9a:43:3e:1d:e2:cd:3c:2c:f3:eb:f2:fe:1c:40:4a:
a4:45:61:de:2b:07:78:62:6b:fb:77:41:87:1b:b4:d6:ab:42:
08:29:e6:f0:2f:53:22:da:eb:51:75:1d:88:e0:4a:14:1b:4c:
c9:83:c3:a5:b8:87:57:22:69:1c:7f:5e:bf:f6:9b:ed:ef:1c:
c3:55:aa:e3:ea:31:dd:ce:27:3b:48:cc:82:80:6f:c7:08:1a:
ab:6d:5f:c8:10:53:34:ef:cd:e4:a0:ae:7f:f9:e3:21:67:1a:
60:9e:08:25:da:d5:e2:16:a3:a2:d2:4b:aa:00:98:9f:d5:95:
8d:16:b4:4d:99:6d:1c:51:a5:a5:49:99:31:0a:63:f6:2b:0e:
be:35:b6:23:94:ed:f6:06:f5:8b:09:00:7a:37:1f:8f:e9:ac:
01:83:7c:77:f9:e8:1c:2d:d9:a5:ef:de:e9:13:13:63:2c:f1:
74:45:0e:29:00:14:0b:b5:37:86:49:f3:4b:e7:d1:b2:63:d7:
4c:04:e6:b1:2c:80:68:47:91:08:a8:9c:15:ac:30:34:2f:23:
be:65:81:b9:87:25:e1:24:f4:9f:0c:ea:e3:89:f1:1b:3f:76:
11:76:e9:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:05:51 2025 by rpki-client