Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
File: C9StlfF_OXIHo_wNGG8pE98465M.mft (raw, json)
Hash identifier: bdMc55HwROltAPQr5nn/bVzDamKVXH3xs2QGv/z3rM4=
Subject key identifier: E8:CC:F8:6E:AE:39:A3:7A:52:FB:91:A2:D6:50:9E:AC:15:CE:0C:43
Authority key identifier: 0B:D4:AD:95:F1:7F:39:72:07:A3:FC:0D:18:6F:29:13:DF:38:EB:93
Certificate issuer: /CN=0bd4ad95f17f397207a3fc0d186f2913df38eb93
Certificate serial: 0196323EAF19C1985C325C5E604100A38CEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C9StlfF_OXIHo_wNGG8pE98465M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
Manifest number: 11FA
Signing time: Mon 14 Apr 2025 03:01:30 +0000
Manifest this update: Mon 14 Apr 2025 03:01:30 +0000
Manifest next update: Tue 15 Apr 2025 03:01:30 +0000
Files and hashes: 1: C9StlfF_OXIHo_wNGG8pE98465M.crl (hash: F1MR710DjyMvrrEw1HqgBEwna5z3XA8VrdLVOHdnDAo=)
2: ef1IFXBRyUc_UhmQBLKR_kqjP-k.roa (hash: ReaiOea67yb8AgzXCMfyIi9G3e09LCQ9vM+znmfetZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
rsync://rpki.ripe.net/repository/DEFAULT/C9StlfF_OXIHo_wNGG8pE98465M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:32:3e:af:19:c1:98:5c:32:5c:5e:60:41:00:a3:8c:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bd4ad95f17f397207a3fc0d186f2913df38eb93
Validity
Not Before: Apr 14 03:01:30 2025 GMT
Not After : Apr 15 03:01:30 2025 GMT
Subject: CN=e8ccf86eae39a37a52fb91a2d6509eac15ce0c43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:32:65:48:c9:ee:c9:85:94:08:0e:b3:bc:8a:
60:2e:b4:bd:6a:b3:0e:96:98:53:6d:4e:bd:f3:ca:
ea:1d:4b:99:ec:af:42:1b:60:d1:1d:3a:1c:b7:61:
8e:1d:83:b9:ef:b9:3e:aa:9c:f8:58:39:4c:77:b8:
87:30:87:25:92:28:c2:e5:b4:e3:43:25:3c:6f:cd:
87:fc:14:ac:39:1f:d0:d4:81:90:53:0e:60:41:bb:
69:6c:a3:47:3f:ec:c6:35:13:81:72:be:65:8a:0a:
39:6f:f0:5c:21:b2:10:8b:63:32:f3:09:5f:10:66:
85:86:14:c4:67:9b:18:58:c0:2c:15:ba:ce:79:c8:
9a:68:c6:f5:c6:7f:75:05:f2:ae:7d:70:94:96:4f:
e3:36:61:0c:6c:68:a7:c7:69:48:5f:ac:a4:ca:b8:
22:e7:c8:a1:87:8d:ac:e0:a5:ed:4b:d5:b9:eb:37:
57:e2:12:c2:2a:e6:cc:cf:e0:98:aa:62:41:a7:bb:
ca:2a:e2:5a:03:e3:f4:07:70:25:d5:27:7e:0b:d9:
9f:4f:94:71:98:5e:de:f7:96:b1:20:cc:90:a3:52:
dc:55:35:21:70:12:23:10:0c:e6:3e:0b:86:d3:38:
f7:d0:03:30:96:b3:68:2a:97:66:56:14:be:d0:f4:
8e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:CC:F8:6E:AE:39:A3:7A:52:FB:91:A2:D6:50:9E:AC:15:CE:0C:43
X509v3 Authority Key Identifier:
keyid:0B:D4:AD:95:F1:7F:39:72:07:A3:FC:0D:18:6F:29:13:DF:38:EB:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C9StlfF_OXIHo_wNGG8pE98465M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:06:77:0b:72:95:22:17:60:89:29:4e:4c:66:31:71:26:49:
3e:0c:a0:25:19:dc:76:46:01:b4:2a:4d:73:ea:b9:3e:db:88:
2d:c6:90:47:aa:86:58:37:ec:d4:fc:81:11:33:c4:41:44:2b:
9d:0f:4c:27:c5:53:cd:00:be:07:56:3c:71:39:c8:17:22:29:
70:53:aa:c1:10:bf:8d:d7:5e:d5:76:f7:7a:c5:7f:8c:83:b0:
5a:33:ca:96:88:56:42:65:f2:10:49:89:bb:07:6e:65:8f:70:
ef:50:b9:34:b7:66:ed:1e:5f:27:13:dc:82:7d:95:cf:3a:c2:
60:f2:12:93:53:80:a2:dd:03:60:f1:ca:66:50:65:45:1d:9a:
34:0c:be:81:7c:17:6d:83:df:50:02:0d:8b:d2:df:67:73:46:
0a:e4:e7:bb:86:95:a8:09:f6:4d:97:b6:cc:d7:77:a0:e9:27:
ed:cc:86:95:50:bb:ff:74:df:c5:05:2b:09:ab:67:7d:40:af:
82:f5:b5:69:fd:68:7c:e4:51:17:b5:7c:0e:bc:ef:e2:00:7c:
1c:60:f4:18:28:6f:a1:f2:68:d8:8e:96:00:81:08:fc:57:38:
02:66:65:af:3d:f0:23:18:b1:1d:ff:ca:a1:6c:5a:90:c9:c3:
c2:20:2d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 08:12:12 2025 by rpki-client