Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.mft
File: G95wrxU0lDVJRmSKzWQRY-KvGx0.mft (raw, json)
Hash identifier: Tyk5w9jxkknOIOYl/dXA/yJGJNO10uNPqZ3bH3cHd1Y=
Subject key identifier: E6:77:59:09:59:91:A4:B8:3A:2D:FB:12:C8:82:32:76:41:53:B2:81
Authority key identifier: 1B:DE:70:AF:15:34:94:35:49:46:64:8A:CD:64:11:63:E2:AF:1B:1D
Certificate issuer: /CN=1bde70af153494354946648acd641163e2af1b1d
Certificate serial: 01963FF9C3E1E656B9C7BA34328A3BE2E0B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G95wrxU0lDVJRmSKzWQRY-KvGx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.mft
Manifest number: 09FE
Signing time: Wed 16 Apr 2025 19:00:54 +0000
Manifest this update: Wed 16 Apr 2025 19:00:54 +0000
Manifest next update: Thu 17 Apr 2025 19:00:54 +0000
Files and hashes: 1: G95wrxU0lDVJRmSKzWQRY-KvGx0.crl (hash: f8k3+zgSQwr4MY67dX6TF5v+nonNIvmjyRchzTUSykI=)
2: TRfMCYgQom2qb1ltkPZ8pDFMPbw.roa (hash: B/bZzAE30Cbi1NKH6O3ZfRrv6UmAF6KTnp6VWp5movg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/G95wrxU0lDVJRmSKzWQRY-KvGx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:f9:c3:e1:e6:56:b9:c7:ba:34:32:8a:3b:e2:e0:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bde70af153494354946648acd641163e2af1b1d
Validity
Not Before: Apr 16 19:00:54 2025 GMT
Not After : Apr 17 19:00:54 2025 GMT
Subject: CN=e67759095991a4b83a2dfb12c88232764153b281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:78:bf:1a:07:db:d8:80:4a:79:9f:8b:38:d2:
f5:8e:36:b0:be:79:22:6f:ac:c1:05:8a:6a:5f:00:
42:56:80:16:51:2c:56:6a:fe:26:c7:4a:d9:8d:54:
66:35:fd:26:d1:54:f7:60:15:43:58:1c:df:e0:28:
5a:b7:34:47:cc:b3:37:25:4e:0d:89:68:14:4c:b5:
93:09:11:4c:07:5c:c0:1e:77:73:58:60:ad:3a:1b:
f5:91:90:13:17:d7:6a:3a:d8:1e:dc:e5:00:b3:51:
cd:61:e5:84:15:fa:4f:14:cb:b4:e5:93:78:e1:9c:
cc:a7:c4:d7:db:61:44:68:d1:45:de:f3:58:22:75:
91:80:c2:2b:51:9e:93:21:83:92:5e:53:b8:f2:9f:
0b:ee:f3:99:74:40:8e:fe:ab:e8:df:c0:e9:d7:aa:
ba:69:c9:92:5d:7d:1b:1d:1f:20:ff:ff:a7:7a:ff:
e0:78:59:15:f7:d9:47:ba:7c:3b:c0:83:86:79:4d:
56:a8:7d:77:74:6f:11:96:9c:10:c5:a3:e0:0a:89:
4d:c2:16:c9:39:a0:ca:f5:19:2a:c1:13:c8:0a:9e:
54:d7:e1:3f:84:2f:d4:5c:63:8d:b1:6a:c5:7d:58:
0a:65:ad:99:9f:a6:01:c3:34:33:b6:ba:89:78:ef:
15:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:77:59:09:59:91:A4:B8:3A:2D:FB:12:C8:82:32:76:41:53:B2:81
X509v3 Authority Key Identifier:
keyid:1B:DE:70:AF:15:34:94:35:49:46:64:8A:CD:64:11:63:E2:AF:1B:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G95wrxU0lDVJRmSKzWQRY-KvGx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:bd:45:e3:69:15:0c:d9:db:f6:64:eb:9f:be:70:7e:0c:4d:
8c:e6:25:75:d0:70:6d:cf:a2:bf:7e:06:c4:bb:22:68:e6:2b:
c8:7c:b6:b7:3b:5b:9c:c5:bf:a4:74:db:d9:c2:d9:70:51:ea:
17:fa:1d:65:b0:4e:9d:16:5d:82:48:ee:72:d0:5d:db:52:c0:
f6:de:86:99:dd:03:52:ab:9f:a7:0c:3b:ea:c2:d5:2c:1e:eb:
ba:57:34:eb:69:f9:2f:37:bb:34:fc:92:9b:63:9c:e4:fd:1f:
6e:10:30:36:71:70:a9:36:85:8c:aa:c4:04:3f:f5:44:a0:e1:
90:81:67:e7:ab:11:bd:1d:6e:c5:df:92:5b:8d:ee:2d:7a:e0:
ac:80:35:05:eb:05:8c:75:da:d8:cb:a0:7a:e6:a1:b0:8b:5a:
f2:f4:c5:d9:69:af:a6:0b:b3:6c:42:f9:3e:aa:69:00:f4:54:
f9:92:30:25:0c:ca:22:2d:5b:74:c4:5a:02:0d:64:41:5a:d5:
05:b1:13:2f:4b:e4:64:65:af:94:c3:74:cf:9d:5a:ae:46:83:
a5:a8:11:a1:c2:6a:ab:ee:d9:83:5f:49:ef:3a:de:d1:69:3f:
67:de:0a:56:9c:b9:a1:88:12:8b:1d:f5:2c:71:c3:14:e1:27:
94:37:85:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:31:37 2025 by rpki-client