Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
File: 9ZrbAgii0qcY0wZLRhP9xDINKPk.mft (raw, json)
Hash identifier: C/js9oEOP5k0DFTL7c3Z+SFHS8NfNSXOFZuUYXhKxak=
Subject key identifier: 70:2F:42:36:DF:8F:E1:B4:4A:53:6A:76:ED:7D:BC:3D:81:B4:D7:D7
Authority key identifier: F5:9A:DB:02:08:A2:D2:A7:18:D3:06:4B:46:13:FD:C4:32:0D:28:F9
Certificate issuer: /CN=f59adb0208a2d2a718d3064b4613fdc4320d28f9
Certificate serial: 019640D55AFFF3137B43218D1F6892DB4F33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ZrbAgii0qcY0wZLRhP9xDINKPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
Manifest number: 0C01
Signing time: Wed 16 Apr 2025 23:00:46 +0000
Manifest this update: Wed 16 Apr 2025 23:00:46 +0000
Manifest next update: Thu 17 Apr 2025 23:00:46 +0000
Files and hashes: 1: 9ZrbAgii0qcY0wZLRhP9xDINKPk.crl (hash: /gDILrid7R1S7Krgt1bHBFyISDYc4iRMgpl9z1S0SrY=)
2: B8bTTGpK1L-pMyO-WGFk_7H-LC8.roa (hash: r0JNxuBgg4on067YK5COQPlyCkk+tp458uDvr2IE4z8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ZrbAgii0qcY0wZLRhP9xDINKPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:40:d5:5a:ff:f3:13:7b:43:21:8d:1f:68:92:db:4f:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f59adb0208a2d2a718d3064b4613fdc4320d28f9
Validity
Not Before: Apr 16 23:00:46 2025 GMT
Not After : Apr 17 23:00:46 2025 GMT
Subject: CN=702f4236df8fe1b44a536a76ed7dbc3d81b4d7d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d5:f1:74:7e:ff:c1:64:c5:1f:46:20:81:91:
8e:3e:a8:aa:25:b0:a0:f9:3f:6a:2a:b2:63:74:47:
c1:2c:fc:b1:8c:42:f4:8f:7c:ae:62:48:c9:62:f1:
06:23:96:f0:e7:92:14:58:18:8d:2f:0e:a9:1b:09:
02:76:3c:51:9a:60:de:99:0f:2a:81:99:c7:b4:c5:
57:10:cc:63:10:d9:68:6b:69:43:a3:66:5c:4f:eb:
eb:49:f6:34:68:a1:63:d1:74:4d:96:7d:52:5d:3b:
81:90:f4:07:ef:63:d5:ce:5d:78:d4:d8:33:4e:e3:
e1:7e:17:10:cc:21:21:99:72:21:ec:06:9b:7b:99:
91:dc:08:b6:05:d4:8d:75:9a:9f:04:2e:34:aa:4f:
be:10:92:f0:6f:c2:66:02:69:74:50:4e:7e:5d:a1:
ae:a9:39:f0:bc:3d:c1:90:d7:81:f7:90:f1:90:93:
0f:ea:32:65:fe:d5:e3:5b:fe:ff:20:6c:93:77:6d:
36:a2:2d:57:5c:43:96:91:80:51:53:7e:2b:23:63:
63:5b:99:65:45:3e:04:e3:ab:d2:4b:8b:ec:c5:13:
f5:85:c3:fc:0b:e6:85:4b:4c:8e:5d:35:61:7e:d6:
57:17:36:67:8c:e4:e2:c6:29:b8:37:7f:1a:3f:93:
0b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:2F:42:36:DF:8F:E1:B4:4A:53:6A:76:ED:7D:BC:3D:81:B4:D7:D7
X509v3 Authority Key Identifier:
keyid:F5:9A:DB:02:08:A2:D2:A7:18:D3:06:4B:46:13:FD:C4:32:0D:28:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ZrbAgii0qcY0wZLRhP9xDINKPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:0a:02:3d:da:89:c0:f5:ff:ac:86:3a:ef:ff:87:e8:ed:81:
ee:fe:0f:22:6c:06:9f:6a:e4:e5:d7:85:b3:e8:04:82:a9:88:
ef:0b:af:eb:a5:16:79:4c:74:88:57:d1:06:d9:b3:4c:c0:15:
7e:ad:a8:30:dc:bf:5c:b0:fe:dd:ee:70:cb:ae:b6:28:d3:be:
85:a0:c5:d2:7d:17:08:8e:c5:47:e2:0f:04:2d:13:b2:cf:09:
db:dc:2d:2a:bb:a4:b3:1b:b8:57:bc:3b:22:4e:df:99:75:7d:
bd:ad:83:4b:50:fa:93:c3:7b:4b:a5:c9:ad:ba:fa:a8:a2:19:
2b:af:56:25:f9:c9:52:d7:bf:7f:c0:26:12:f7:01:c8:cd:d7:
14:12:7f:be:1c:2d:85:f8:3a:c8:b0:d3:f7:10:54:27:09:a2:
87:5a:73:ff:73:3f:fc:a7:21:15:84:49:63:a9:64:39:db:dc:
6f:15:d2:6d:38:55:89:c7:1b:4d:77:16:3e:3f:fb:bc:bf:53:
16:8e:44:8b:74:be:65:27:8e:4f:10:92:97:a7:d9:d7:17:61:
c0:8f:91:5c:17:96:c3:7f:86:dc:6a:66:3e:23:ef:51:c5:10:
4c:da:75:a4:08:5b:82:16:f1:05:aa:a5:80:cb:f4:2e:2b:1a:
13:b7:6b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:15:20 2025 by rpki-client