Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.mft
File: P9TS_b7jqj4SFCjqcFDJQ52Ihqk.mft (raw, json)
Hash identifier: X0BNHnJaR0j4n6Iynvn+T/k9edKg3jJxxG/IHxGW+uQ=
Subject key identifier: 32:C2:A6:8B:FA:93:A5:88:31:BC:7D:25:1F:C9:F0:74:5D:EE:EF:DA
Authority key identifier: 3F:D4:D2:FD:BE:E3:AA:3E:12:14:28:EA:70:50:C9:43:9D:88:86:A9
Certificate issuer: /CN=3fd4d2fdbee3aa3e121428ea7050c9439d8886a9
Certificate serial: 01958B84A4ACF1AA9A3CBD4D3BF4E6EB88BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.mft
Manifest number: 10AB
Signing time: Wed 12 Mar 2025 18:01:20 +0000
Manifest this update: Wed 12 Mar 2025 18:01:20 +0000
Manifest next update: Thu 13 Mar 2025 18:01:20 +0000
Files and hashes: 1: 1-SAfEHIPvpIzjeCy5Q8AoZxny3k.roa (hash: B/T0TK6WDLMTtz5a/Y6n6GO2yVmrFuy+pcNqZ8mftfA=)
2: KaQg1luFqQeXclQWU31ivATaEMk.roa (hash: bbZb4Op2H462Hn18DoohrEF0+UuFJwTPdqnyeROhfe8=)
3: P9TS_b7jqj4SFCjqcFDJQ52Ihqk.crl (hash: VDttX1c69Oz2U/ZBDWBRhAlnoT+dFFOM8zgWHxShYzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 18:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:84:a4:ac:f1:aa:9a:3c:bd:4d:3b:f4:e6:eb:88:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd4d2fdbee3aa3e121428ea7050c9439d8886a9
Validity
Not Before: Mar 12 18:01:20 2025 GMT
Not After : Mar 13 18:01:20 2025 GMT
Subject: CN=32c2a68bfa93a58831bc7d251fc9f0745deeefda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:3d:88:a8:1e:dc:ca:b0:e8:de:fc:8b:54:bd:
8c:b2:f3:c5:44:b5:b0:36:33:d7:a3:1a:a2:3f:57:
07:1a:e2:72:34:b8:4c:69:7e:de:3a:37:e2:75:ed:
89:57:cf:8e:0f:7f:84:ac:f0:0e:cc:cc:98:06:14:
47:37:1e:4e:08:fd:58:6d:01:e7:c2:b9:c4:77:52:
a1:7d:fa:cc:23:31:a0:f5:34:c8:18:03:6a:55:a0:
c9:83:cd:bb:95:05:ff:e8:83:f7:a8:94:2f:cb:72:
b2:91:a7:b0:9a:7a:db:d6:32:5b:a9:1f:b3:f8:b3:
6b:c7:8f:8d:e8:52:54:7f:5d:ba:41:44:cb:e3:ac:
4a:34:77:60:bb:e8:01:72:b7:e6:15:32:4b:c1:57:
96:bb:82:38:d7:61:28:f1:54:74:eb:ec:38:39:bf:
6d:15:a5:dc:35:21:57:f1:a0:e8:fd:09:ae:21:b2:
24:14:82:10:55:74:0f:4e:1b:98:de:ff:a4:90:d8:
9a:58:c0:df:23:b4:e8:df:69:af:85:7b:5d:53:f2:
7b:00:45:b4:ea:b4:6a:f3:ce:19:b1:da:c6:0f:7c:
eb:70:98:77:30:d3:7e:3d:5b:bf:06:68:32:62:73:
71:17:42:92:b9:55:90:3d:83:07:dc:0f:25:4b:7c:
70:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:C2:A6:8B:FA:93:A5:88:31:BC:7D:25:1F:C9:F0:74:5D:EE:EF:DA
X509v3 Authority Key Identifier:
keyid:3F:D4:D2:FD:BE:E3:AA:3E:12:14:28:EA:70:50:C9:43:9D:88:86:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:35:d5:5d:35:5d:8f:5f:ef:b8:bd:32:ad:c2:de:20:d9:00:
36:3e:16:61:a1:a9:4c:8c:bb:9d:27:fe:07:a0:50:08:03:61:
2d:0c:1d:d2:20:95:01:28:e3:47:1d:21:20:ec:b5:85:28:d2:
e0:3d:f2:7e:fb:1a:45:4c:0c:05:f8:68:99:e9:a7:48:45:aa:
b0:8c:fe:8a:e4:12:6b:f2:90:36:9f:6a:10:d9:70:87:b1:d0:
24:ea:50:0d:ad:21:c8:f7:59:8d:f0:f7:d6:03:b6:4b:ba:69:
3b:45:f9:8a:40:97:9c:2c:2e:0d:7a:22:3d:56:4c:40:16:93:
04:00:f2:4e:8b:24:d6:db:6c:db:d7:e5:c3:a7:49:99:d0:91:
dc:4e:cb:92:3d:d0:2d:7e:1e:ec:2f:24:14:47:85:96:96:6c:
d0:c2:83:53:97:32:31:07:c3:58:02:f1:35:c3:55:95:99:0d:
d9:b2:b5:38:2b:20:f1:0a:f5:ad:1b:1b:f2:38:ea:e9:3c:64:
52:1b:36:7a:5a:93:f9:1d:61:65:19:a0:03:c1:25:80:c4:67:
12:96:26:13:c3:82:3d:1d:9d:f4:d7:85:4a:f3:c8:1a:ca:29:
a2:51:03:ca:8b:41:7a:e5:c0:41:28:28:70:ac:cf:8c:74:a5:
f9:0f:27:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:31:07 2025 by rpki-client