Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.mft
File: 9KyZ13p6HITdR_Q7tyBRqnOxqtY.mft (raw, json)
Hash identifier: Gb749HUoFRxQP7Z/CQUTJ+LQtQeU9m/K29bqLMqymCE=
Subject key identifier: 3E:E9:BA:3D:D1:C7:57:B6:D9:7A:3E:32:2E:57:BF:E6:A8:AD:11:CA
Authority key identifier: F4:AC:99:D7:7A:7A:1C:84:DD:47:F4:3B:B7:20:51:AA:73:B1:AA:D6
Certificate issuer: /CN=f4ac99d77a7a1c84dd47f43bb72051aa73b1aad6
Certificate serial: 019653EE3F9FC9CD463F727D9C35200A5946
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9KyZ13p6HITdR_Q7tyBRqnOxqtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.mft
Manifest number: 1004
Signing time: Sun 20 Apr 2025 16:00:44 +0000
Manifest this update: Sun 20 Apr 2025 16:00:44 +0000
Manifest next update: Mon 21 Apr 2025 16:00:44 +0000
Files and hashes: 1: 9KyZ13p6HITdR_Q7tyBRqnOxqtY.crl (hash: +D2FOEgoECzQ6WCoRs5CLZzmYezB+kr8Z6bemGMA8nw=)
2: DaSMaWZYfnj6ceinzYPrOhJJgQA.roa (hash: tLMLMu2mXxzV//rWf7p3b0LjE6TE93dgy9UoXP39ok8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9KyZ13p6HITdR_Q7tyBRqnOxqtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:ee:3f:9f:c9:cd:46:3f:72:7d:9c:35:20:0a:59:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4ac99d77a7a1c84dd47f43bb72051aa73b1aad6
Validity
Not Before: Apr 20 16:00:44 2025 GMT
Not After : Apr 21 16:00:44 2025 GMT
Subject: CN=3ee9ba3dd1c757b6d97a3e322e57bfe6a8ad11ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f9:62:74:7e:77:9c:a5:a8:d4:ff:8c:58:fc:
25:a7:11:05:f7:f2:32:c3:02:5c:99:fc:84:64:63:
07:0e:bd:44:3e:7b:73:1b:d0:77:c5:a3:be:63:81:
48:47:94:71:82:79:d6:06:4d:76:bd:9c:7b:69:a3:
2f:c6:42:71:48:f5:f0:93:76:60:4f:cf:4e:b1:ef:
d1:89:bd:a0:8a:4b:db:63:6a:75:d1:81:12:f7:78:
a7:dc:3e:b1:8b:26:5a:41:19:fd:a6:0a:8a:51:d7:
39:55:43:8d:f5:09:4c:98:2f:b7:e0:d2:4a:6b:70:
07:62:4a:bc:a9:c7:cb:5d:84:40:e4:2a:18:2b:34:
30:27:40:16:2d:b3:11:39:dd:a8:2e:8a:81:26:27:
bc:c6:51:d3:22:61:c8:3d:5b:66:5d:b3:e7:1c:be:
e8:81:4c:c3:c7:5a:6d:12:94:c2:41:f1:5e:e2:ae:
a3:e9:a0:7b:ea:fe:2a:fd:01:b0:99:7e:58:82:70:
2b:3e:c1:5b:85:b0:15:31:21:70:7e:c6:1d:06:97:
76:05:37:b5:eb:2f:c6:13:90:26:d7:34:83:6c:51:
92:60:9d:f0:aa:b6:4a:1c:ad:21:aa:07:c9:0a:b1:
2e:ca:04:bf:89:2a:0e:82:9e:96:1a:a5:b3:b5:a0:
c2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E9:BA:3D:D1:C7:57:B6:D9:7A:3E:32:2E:57:BF:E6:A8:AD:11:CA
X509v3 Authority Key Identifier:
keyid:F4:AC:99:D7:7A:7A:1C:84:DD:47:F4:3B:B7:20:51:AA:73:B1:AA:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9KyZ13p6HITdR_Q7tyBRqnOxqtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:43:1b:6f:fa:40:e1:b2:81:25:24:dd:fe:00:37:71:39:bb:
c2:19:22:48:63:13:07:43:07:23:c5:33:92:68:83:12:78:88:
6f:08:5e:c7:08:12:d4:76:5a:ec:90:7e:a9:2b:e5:de:63:10:
75:1a:98:06:55:cc:ac:98:e4:1c:db:eb:20:be:ed:6b:92:52:
59:3f:eb:9c:2c:c1:53:16:56:40:73:bb:d1:31:b8:a6:9d:ac:
80:d9:7a:84:99:7b:9f:37:92:1e:9b:e2:d6:0c:fd:e2:fc:2d:
b8:6e:e4:e9:d2:c2:20:ca:f8:42:42:2f:74:10:fd:2d:33:f0:
0d:4e:cc:8c:34:e2:06:50:d8:91:bf:dd:12:6a:ac:fc:bf:82:
fd:d3:47:d3:2d:eb:9b:fe:ea:da:c7:e5:cd:2f:24:bf:f6:91:
a2:1b:6d:14:2c:5d:7b:7f:d7:57:79:d1:6f:ed:6c:21:89:2c:
26:86:28:51:b6:b7:d8:83:a4:62:df:84:bc:76:2f:0e:48:23:
46:f5:82:a8:ff:7f:3b:34:df:7c:bd:c4:e3:71:4b:ef:46:43:
32:5b:0b:63:03:71:31:1f:cd:73:e6:ae:09:1b:94:36:24:91:
43:ec:1d:a1:9f:6d:6b:81:92:5d:44:ac:38:10:4e:24:86:5c:
a5:db:5e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:13:54 2025 by rpki-client