Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft
File: 9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft (raw, json)
Hash identifier: oaGsk1gzmkV0sNNUsMJERNeznI00+nZJUdVxZLAmdf0=
Subject key identifier: 30:73:9D:87:63:86:D9:00:06:82:FB:9C:45:A4:23:E4:62:29:3B:C0
Authority key identifier: F6:8B:2F:4E:66:8E:F0:A1:76:A8:BD:00:04:E2:77:76:70:83:32:38
Certificate issuer: /CN=f68b2f4e668ef0a176a8bd0004e2777670833238
Certificate serial: 0196409EB883278E21AB53B5AC84F3A14CBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9osvTmaO8KF2qL0ABOJ3dnCDMjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft
Manifest number: 14F6
Signing time: Wed 16 Apr 2025 22:01:05 +0000
Manifest this update: Wed 16 Apr 2025 22:01:05 +0000
Manifest next update: Thu 17 Apr 2025 22:01:05 +0000
Files and hashes: 1: 1-WLV8VecHIiJX48ZCRXCPnkSV1w.roa (hash: LW+UjxgXYW+oRlL0a5q0N9JKog1QwqgaxgEIN56GOWA=)
2: 9osvTmaO8KF2qL0ABOJ3dnCDMjg.crl (hash: JJqCJIHy2vhBTmfqy/n3PzDv3sandAeiEOKAqSZWGOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9osvTmaO8KF2qL0ABOJ3dnCDMjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 21:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:40:9e:b8:83:27:8e:21:ab:53:b5:ac:84:f3:a1:4c:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f68b2f4e668ef0a176a8bd0004e2777670833238
Validity
Not Before: Apr 16 22:01:05 2025 GMT
Not After : Apr 17 22:01:05 2025 GMT
Subject: CN=30739d876386d9000682fb9c45a423e462293bc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c4:ca:a0:a9:71:d9:c5:f8:5b:88:28:60:01:
a1:af:05:6b:91:94:67:4f:66:7d:74:25:eb:28:53:
35:b7:7e:66:8f:62:03:99:57:98:b8:43:8b:21:f3:
52:08:a1:6f:61:d8:e5:07:95:17:f7:e0:d5:82:3a:
ab:62:d1:5a:22:01:95:bc:8e:ea:f3:76:0b:14:a9:
84:a7:e8:5f:46:6c:9a:5d:81:5f:1b:a2:c0:48:de:
60:1f:11:12:7a:b1:22:b8:bf:d8:c2:66:bf:8c:17:
dd:13:50:77:ad:87:92:41:bb:3f:17:d9:4b:71:b2:
ff:00:02:ae:00:cf:38:fa:50:c3:ac:dd:6f:b9:8e:
10:ab:61:b1:ba:46:f2:fc:00:47:29:cc:85:3d:6f:
7e:36:8f:76:e9:c0:7c:b7:07:3f:32:88:a9:38:5d:
d8:98:5d:70:0a:b8:d6:1a:11:78:11:2c:53:87:de:
ba:78:e1:47:5a:49:4e:51:0d:71:45:c2:db:cb:d9:
b7:c8:1c:32:17:9d:9f:24:2f:0d:7a:46:70:36:1f:
0f:97:af:b4:0b:78:f4:4d:e6:b7:4c:7c:41:1e:23:
9a:36:5c:6c:09:a0:b8:f3:7b:69:e7:ff:3b:3c:dd:
a3:09:de:c1:12:5c:df:b8:fe:db:10:48:83:94:65:
ac:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:73:9D:87:63:86:D9:00:06:82:FB:9C:45:A4:23:E4:62:29:3B:C0
X509v3 Authority Key Identifier:
keyid:F6:8B:2F:4E:66:8E:F0:A1:76:A8:BD:00:04:E2:77:76:70:83:32:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9osvTmaO8KF2qL0ABOJ3dnCDMjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:1b:57:37:e2:cc:c4:d8:11:c7:4f:7e:4d:5d:84:46:59:8c:
3b:8c:7c:89:6e:dc:a9:49:4b:8a:1b:94:89:95:30:f1:85:94:
47:81:08:4b:06:01:d9:da:c3:4b:59:67:4d:b3:c9:d4:6b:b3:
ae:29:fc:33:cc:6e:69:5b:45:5f:b0:35:b6:d6:f3:84:21:4d:
bf:5a:f2:9d:88:d5:48:76:96:9c:db:08:a8:bb:3f:a4:6e:f0:
2d:0e:3b:6f:b7:39:6d:68:8c:59:4e:cd:ca:82:19:1e:7b:e3:
fa:09:44:84:4e:cc:03:e3:18:84:6f:46:c1:87:8a:1c:6c:d5:
85:02:3a:d1:88:bc:16:1a:01:2b:c7:94:f3:bf:ea:7c:c1:93:
02:95:af:f2:86:f9:ba:c3:77:ad:7d:a8:d3:1a:a8:3c:ce:3e:
9c:1e:63:b9:1c:2f:bc:f1:76:e1:03:35:78:2b:76:87:7e:f5:
40:48:0c:98:a9:b9:d5:9a:98:e8:39:79:d6:a2:d7:18:6d:0c:
a4:ae:57:04:4d:38:8d:e7:62:a9:71:88:e3:5b:37:b9:c8:0f:
ad:52:13:b8:2a:70:dd:f7:f7:e0:12:dc:9c:fe:2b:51:ac:e2:
83:aa:89:19:8c:92:a1:26:63:ce:d0:ff:e4:ae:c1:72:f6:81:
a4:d3:0a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 05:43:52 2025 by rpki-client