Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft
File: 9Il_29x9JQjfzRTP9gCtQ7knkks.mft (raw, json)
Hash identifier: Os6D93MQpJsvVNLvFsBrs9M1oVVizQuxeX8KK1ni8vk=
Subject key identifier: 03:96:D6:D6:47:05:7B:B3:E8:D2:AE:EB:66:E3:49:BE:FF:37:57:BC
Authority key identifier: F4:89:7F:DB:DC:7D:25:08:DF:CD:14:CF:F6:00:AD:43:B9:27:92:4B
Certificate issuer: /CN=f4897fdbdc7d2508dfcd14cff600ad43b927924b
Certificate serial: 0196575D082664E87B35C1A4CAE039AFABB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Il_29x9JQjfzRTP9gCtQ7knkks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft
Manifest number: 0A31
Signing time: Mon 21 Apr 2025 08:00:36 +0000
Manifest this update: Mon 21 Apr 2025 08:00:36 +0000
Manifest next update: Tue 22 Apr 2025 08:00:36 +0000
Files and hashes: 1: 9Il_29x9JQjfzRTP9gCtQ7knkks.crl (hash: Jhm2KK8y2otQgzUqKWYDxeTUCYuzROHM2QKbSrcequY=)
2: goWXgCcrT8sdpWvs98SjkshS1QQ.roa (hash: pL/QBtJXrUgZbyv/2j+3PUPuF0UtD1Pg09swJJxayTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Il_29x9JQjfzRTP9gCtQ7knkks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:5d:08:26:64:e8:7b:35:c1:a4:ca:e0:39:af:ab:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4897fdbdc7d2508dfcd14cff600ad43b927924b
Validity
Not Before: Apr 21 08:00:36 2025 GMT
Not After : Apr 22 08:00:36 2025 GMT
Subject: CN=0396d6d647057bb3e8d2aeeb66e349beff3757bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d5:b8:f6:3d:ac:07:c6:2b:80:ac:d2:e0:6b:
df:51:78:b8:f0:7d:cc:0f:34:61:e6:0d:57:65:7f:
59:2a:b8:16:3a:c7:1c:5c:77:24:d7:30:a6:f4:e5:
a4:ee:a6:0d:bb:64:13:0e:f4:26:9f:06:77:a0:78:
0d:18:cc:05:28:6b:a7:3c:b1:4d:3b:37:d6:43:67:
7e:7b:9e:40:1d:01:48:f4:30:b7:77:d4:63:c3:fc:
bc:99:06:ab:67:99:92:bf:5b:ef:9c:41:20:ea:27:
ea:97:93:9a:6b:ef:5b:b6:5e:69:10:cf:68:05:bf:
ab:85:6f:2d:f1:34:12:a0:ec:3e:ba:7c:cc:f4:dd:
68:da:7d:75:bf:51:eb:cd:b5:54:ac:06:c2:3e:58:
66:f1:bb:60:5a:13:a7:29:81:6a:e0:14:3b:9d:bf:
9c:a4:82:eb:26:2f:f3:dc:5e:b4:28:41:9e:13:ce:
43:47:1e:38:83:7e:30:35:c1:cf:e2:e7:b6:ef:82:
13:6b:c2:94:c5:45:54:7e:05:1e:ac:76:d4:40:ce:
0b:80:82:55:dc:4c:06:6e:11:0f:dd:ee:30:5a:7e:
8e:db:63:f2:7c:d7:7f:63:0c:99:99:9f:94:3d:1d:
46:c0:21:cd:b5:b4:c5:8c:3f:ed:bb:af:25:26:07:
26:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:96:D6:D6:47:05:7B:B3:E8:D2:AE:EB:66:E3:49:BE:FF:37:57:BC
X509v3 Authority Key Identifier:
keyid:F4:89:7F:DB:DC:7D:25:08:DF:CD:14:CF:F6:00:AD:43:B9:27:92:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Il_29x9JQjfzRTP9gCtQ7knkks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:74:a6:bd:0c:cf:26:30:97:e9:00:e0:4a:a3:89:20:4f:97:
c3:1d:e8:29:86:d4:6d:d0:90:08:bc:0d:08:79:d8:f9:62:f9:
d7:4e:bd:ee:e5:90:d9:76:b4:34:88:f1:9d:19:ae:ee:0e:43:
a9:cd:70:10:b7:c0:15:dc:12:02:79:20:e5:53:bc:96:b7:34:
ec:cf:11:38:3c:06:5a:2d:f5:d2:a7:ca:ef:af:cc:d7:00:0d:
b7:30:53:c3:67:98:2c:c8:49:79:76:dd:37:ae:01:ba:76:4f:
c6:12:00:2c:d2:a1:19:f2:0c:ac:15:95:8e:bb:7f:ff:da:52:
34:77:20:d4:9e:02:f4:4c:6b:90:4a:7a:1a:03:d5:71:0e:de:
c4:63:c9:1a:70:99:14:80:70:b8:f2:30:77:7e:7c:e0:ef:5e:
57:40:fa:56:35:9e:83:5b:db:e9:8a:83:26:92:6a:d6:fd:fe:
fd:a8:64:ae:80:0d:31:6c:a1:6d:ad:6f:f4:fc:17:72:ab:d3:
12:dd:f0:b4:5f:b5:0f:61:e2:5f:9e:8d:86:1d:0c:89:a9:cf:
d8:21:b0:e0:91:f4:c5:c8:d4:2c:69:6a:3d:2a:b1:71:83:c6:
0a:e2:71:96:0a:da:c6:d1:ac:84:5a:a3:92:cb:31:a4:18:01:
3b:46:0f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:15:47 2025 by rpki-client