Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.mft
File: v9Cah3Q4F8VvgIgAeldG62n_LjA.mft (raw, json)
Hash identifier: XFsH4EFzcavJMDTKnIHQH354eghnPS4TczZIcqO1/W4=
Subject key identifier: 68:B3:4A:E4:7C:42:1E:75:2B:7D:3A:36:FA:5D:CC:80:42:D7:BB:A2
Authority key identifier: BF:D0:9A:87:74:38:17:C5:6F:80:88:00:7A:57:46:EB:69:FF:2E:30
Certificate issuer: /CN=bfd09a87743817c56f8088007a5746eb69ff2e30
Certificate serial: 01963EE6BF2B2F7E86FAF5DE1DE76944F9DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9Cah3Q4F8VvgIgAeldG62n_LjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.mft
Manifest number: 14F1
Signing time: Wed 16 Apr 2025 14:00:31 +0000
Manifest this update: Wed 16 Apr 2025 14:00:31 +0000
Manifest next update: Thu 17 Apr 2025 14:00:31 +0000
Files and hashes: 1: B_BBQaqQOZZdiFqzJdt68RGvVTU.roa (hash: p8nyxzChdTcqx5QWY5bjhUZqFlEO6HaoHatKb5Ff2uw=)
2: THgpYsuwtp7Ym3zY6av8RgfZzLY.roa (hash: uQpggmJggCBeqYH5pLAJ2yEpa7lh8jrstdPPyiUJ77Q=)
3: cQNCKEPPhAFzmHj-XbDsRfptwBU.roa (hash: ymcXQ0jfpJoz4wb2MWPQfmWBhQPG8KLXmWx/brPfkUI=)
4: nofXYpB0FisO0jICtG3Ef-GQMH0.roa (hash: 6sPkKup7pdVWKTBxrRqOcxcRj13RLFPr/8N1XCriJwg=)
5: v9Cah3Q4F8VvgIgAeldG62n_LjA.crl (hash: Bi5cWlFFM63QoJoOPr5n5Zvq2c2EeuEQgFLZNSKiog4=)
6: zoiZaQy1X6uA_fb18sRqVooSN48.roa (hash: +vAm2rSORgkYs00N65eNpRyENjf55QylaufRqfKzfJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/v9Cah3Q4F8VvgIgAeldG62n_LjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:e6:bf:2b:2f:7e:86:fa:f5:de:1d:e7:69:44:f9:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfd09a87743817c56f8088007a5746eb69ff2e30
Validity
Not Before: Apr 16 14:00:31 2025 GMT
Not After : Apr 17 14:00:31 2025 GMT
Subject: CN=68b34ae47c421e752b7d3a36fa5dcc8042d7bba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6e:cc:af:aa:70:0d:41:56:72:40:31:64:5d:
15:7b:60:8f:ec:bf:5f:f4:90:e7:1a:90:a9:c8:a1:
24:51:9b:78:33:11:b1:9a:fd:cc:b6:2c:11:e1:db:
0f:8e:ff:6a:d2:e9:bb:7e:2b:e7:c9:22:a7:7d:02:
08:27:48:91:14:78:fd:b6:70:0b:70:21:9f:5e:2a:
43:7a:d1:2b:87:34:4b:52:f7:1b:e5:aa:09:e2:05:
2b:03:a4:74:d7:5d:d9:25:80:43:f3:98:6a:59:5c:
0b:da:65:e8:9b:c4:16:16:47:d1:b3:6a:a2:21:e8:
e0:1e:f5:f1:d6:08:5f:30:bb:5a:77:47:4b:d1:32:
85:fb:3a:37:0a:f2:ee:03:e7:1d:d0:20:40:a7:f6:
d6:b8:6b:27:b6:54:30:c9:01:a1:5b:e1:dd:c3:4c:
b5:3a:d3:ea:1d:d9:b8:94:7c:56:c9:5f:c5:0f:8c:
87:5d:77:ec:0e:b8:ca:3e:2f:2c:44:73:f2:57:d9:
37:d8:b9:f1:ef:33:0b:de:16:88:8d:1e:ce:9a:c8:
b6:d2:5c:26:80:12:cd:04:a0:a1:10:c8:13:04:98:
cc:fe:cf:2a:94:99:d5:8b:4c:72:53:a3:c7:66:dc:
2b:c5:26:dd:da:95:ef:f5:f6:1d:b8:d1:be:bc:fc:
6e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B3:4A:E4:7C:42:1E:75:2B:7D:3A:36:FA:5D:CC:80:42:D7:BB:A2
X509v3 Authority Key Identifier:
keyid:BF:D0:9A:87:74:38:17:C5:6F:80:88:00:7A:57:46:EB:69:FF:2E:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9Cah3Q4F8VvgIgAeldG62n_LjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:9b:40:a4:6a:2a:d4:78:fa:62:2d:40:5d:a4:d1:a2:7f:76:
4d:ad:6f:f4:05:c9:b5:31:47:d9:c2:b9:50:6c:4c:0d:fc:5e:
04:5d:47:cf:30:6d:ba:f8:b1:86:29:02:32:94:2f:0c:bc:bb:
03:c1:c9:a2:97:9a:06:3f:52:8f:60:f6:f2:34:db:fb:50:c7:
df:6a:24:56:02:1e:dd:b8:d3:7d:05:13:4e:c2:c5:ae:db:39:
e4:8d:8d:e6:bc:42:f6:31:08:eb:59:72:f0:de:f6:17:af:28:
a7:88:4c:53:bd:1c:ba:97:43:77:a7:ff:ae:01:9f:3a:fc:b0:
28:32:89:5d:f5:1a:84:cd:6c:a7:1d:d0:5f:d7:c8:d2:14:ed:
92:3a:e3:08:0c:49:4b:2a:d3:b4:66:7a:d4:20:18:05:ed:54:
65:41:1e:7e:83:0f:0c:86:29:4d:b2:69:0d:d3:09:dd:8f:d5:
18:c7:66:e6:21:a1:01:db:30:e9:d8:34:c7:e8:f6:d1:a2:69:
5c:9e:89:73:e7:eb:91:f6:b2:5b:e4:78:30:93:82:fb:73:af:
59:d4:3c:5a:59:6f:b7:28:a8:83:49:97:0a:6f:77:a0:97:25:
dd:4e:e7:52:46:35:32:6f:0b:ab:f8:4a:bb:58:0b:d2:ee:3f:
e8:69:56:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 00:57:58 2025 by rpki-client