Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft
File: 9krUXSK1888ucc4KwBB0t80hrFc.mft (raw, json)
Hash identifier: nK/1fg5Z4lin0b0qOisdS6bwGxWJJQAEQTbS6QUCYhk=
Subject key identifier: 3E:2C:EF:11:A2:84:E5:2D:D8:D8:A7:AF:A8:88:23:D5:F5:35:43:F6
Authority key identifier: F6:4A:D4:5D:22:B5:F3:CF:2E:71:CE:0A:C0:10:74:B7:CD:21:AC:57
Certificate issuer: /CN=f64ad45d22b5f3cf2e71ce0ac01074b7cd21ac57
Certificate serial: 019642FACD89C8CED5A9C6E009C5087B8232
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9krUXSK1888ucc4KwBB0t80hrFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft
Manifest number: 13A2
Signing time: Thu 17 Apr 2025 09:00:54 +0000
Manifest this update: Thu 17 Apr 2025 09:00:54 +0000
Manifest next update: Fri 18 Apr 2025 09:00:54 +0000
Files and hashes: 1: 9krUXSK1888ucc4KwBB0t80hrFc.crl (hash: WKTO4J6HOF4gcZW2pdPcaRsc/GiNJh9Fs9Y9og0bnpU=)
2: rnFKFHUDJ2VK_n3nnMWQgvu93Us.roa (hash: ddxwbWDe9h7jTPjb6zGryBRSU7cXly9K/marvCxyA4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9krUXSK1888ucc4KwBB0t80hrFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:42:fa:cd:89:c8:ce:d5:a9:c6:e0:09:c5:08:7b:82:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f64ad45d22b5f3cf2e71ce0ac01074b7cd21ac57
Validity
Not Before: Apr 17 09:00:54 2025 GMT
Not After : Apr 18 09:00:54 2025 GMT
Subject: CN=3e2cef11a284e52dd8d8a7afa88823d5f53543f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:42:db:13:82:c9:37:88:a9:3f:56:cd:89:05:
98:70:76:f1:f5:8a:44:32:f6:32:cf:99:60:67:8a:
30:79:3e:c5:c4:b6:35:6d:49:65:f8:93:29:7b:d4:
7d:69:b3:cc:01:77:9f:09:81:d3:64:70:79:8c:d5:
e8:fc:f5:85:a0:0d:eb:bd:0a:48:4f:e2:a3:db:31:
88:e2:f8:7a:25:12:6c:9f:5a:0a:f1:2c:f7:13:98:
26:ad:60:71:c2:88:9f:06:82:53:e8:2d:b8:08:6a:
6a:81:51:3f:84:48:82:61:1c:25:c5:aa:59:e3:10:
eb:4b:b4:ba:3a:b1:a6:b0:46:91:f9:59:9e:0e:22:
8d:79:cb:47:75:a0:bd:f8:78:a9:8d:7d:d7:98:24:
d3:19:61:09:17:df:21:56:dc:8a:84:06:d2:73:37:
b2:f9:af:77:c0:52:28:bb:11:51:a1:7a:08:fd:21:
d6:7f:f3:ac:47:b4:58:24:c6:9a:f5:05:7c:08:f9:
82:1a:bc:24:f6:62:df:2e:50:66:14:f2:82:6c:19:
2b:72:42:3f:a8:9c:f0:df:fa:d2:49:e6:c1:67:68:
33:a9:b0:e6:30:21:f3:16:cf:1c:d8:d3:7f:26:47:
10:e6:ae:8f:c0:de:f3:f8:5d:84:02:24:a2:6e:2c:
0a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:2C:EF:11:A2:84:E5:2D:D8:D8:A7:AF:A8:88:23:D5:F5:35:43:F6
X509v3 Authority Key Identifier:
keyid:F6:4A:D4:5D:22:B5:F3:CF:2E:71:CE:0A:C0:10:74:B7:CD:21:AC:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9krUXSK1888ucc4KwBB0t80hrFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:c7:ae:7b:42:f5:26:28:51:82:be:c0:fd:14:e0:60:b7:65:
33:1d:97:32:8d:33:83:27:cd:1c:15:56:37:0a:c3:d8:02:62:
04:eb:b1:9b:60:77:c5:d4:ba:0f:c4:58:f6:5e:87:da:45:c7:
84:3c:00:e3:07:fa:65:d6:47:9a:06:9d:7b:59:1a:53:50:aa:
57:08:3c:e3:1d:34:ef:39:35:77:3b:69:25:dd:dd:2a:07:9c:
eb:49:be:aa:8a:fb:46:0d:2a:ee:54:73:95:32:de:89:b9:b7:
d6:c6:64:5b:f9:2c:e0:c8:47:c5:3b:8e:ab:4a:e8:0a:96:98:
4c:ce:4a:1e:3c:35:69:d5:c9:16:bf:39:da:4e:73:c5:68:6a:
59:91:de:3b:b7:fb:59:72:66:86:10:aa:3f:55:18:62:ab:52:
87:4f:2f:29:9f:72:58:03:02:b3:54:14:1f:80:20:1c:6d:d2:
59:54:3a:5d:de:e5:c0:de:84:ac:27:c1:a3:fe:ce:8e:12:7b:
1b:3e:8e:33:d9:06:69:0f:30:e8:c3:6f:3a:12:04:e8:08:5c:
f4:8b:f5:f0:15:b2:06:54:19:0f:f4:78:06:c4:fe:e5:d0:d8:
63:fa:6a:68:30:3c:f0:24:52:5c:b9:37:bd:b6:b2:da:6e:c4:
bd:2a:bd:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 14:45:05 2025 by rpki-client